Manfred Baedke created OAK-5209:
-----------------------------------

             Summary: Save roundtrips to external identity servers
                 Key: OAK-5209
                 URL: https://issues.apache.org/jira/browse/OAK-5209
             Project: Jackrabbit Oak
          Issue Type: Improvement
          Components: auth-external
            Reporter: Manfred Baedke


When looking up group memberships recursively, 
org.apache.jackrabbit.oak.spi.security.authentication.external.impl.DynamicSyncContext.collectPrincipalNames()
 will call the ExternalIdentityProvider for each declared group membership just 
to retrieve the principal name for the given external identity. This is 
potentially costly and should be avoided, for instance by adding a getter for 
the principal name to the interface ExternalIdentityRef. Let's discuss options 
here.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to