Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id C78FA200BD4 for ; Thu, 1 Dec 2016 17:52:59 +0100 (CET) Received: by cust-asf.ponee.io (Postfix) id C638B160B10; Thu, 1 Dec 2016 16:52:59 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 41841160B05 for ; Thu, 1 Dec 2016 17:52:59 +0100 (CET) Received: (qmail 11410 invoked by uid 500); 1 Dec 2016 16:52:58 -0000 Mailing-List: contact oak-issues-help@jackrabbit.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: oak-dev@jackrabbit.apache.org Delivered-To: mailing list oak-issues@jackrabbit.apache.org Received: (qmail 11384 invoked by uid 99); 1 Dec 2016 16:52:58 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Dec 2016 16:52:58 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id 57A552C14F3 for ; Thu, 1 Dec 2016 16:52:58 +0000 (UTC) Date: Thu, 1 Dec 2016 16:52:58 +0000 (UTC) From: "Manfred Baedke (JIRA)" To: oak-issues@jackrabbit.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (OAK-5209) Save roundtrips to external identity servers MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Thu, 01 Dec 2016 16:53:00 -0000 [ https://issues.apache.org/jira/browse/OAK-5209?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Manfred Baedke updated OAK-5209: -------------------------------- Affects Version/s: 1.4.10 1.5.14 > Save roundtrips to external identity servers > -------------------------------------------- > > Key: OAK-5209 > URL: https://issues.apache.org/jira/browse/OAK-5209 > Project: Jackrabbit Oak > Issue Type: Improvement > Components: auth-external > Affects Versions: 1.4.10, 1.5.14 > Reporter: Manfred Baedke > > When looking up group memberships recursively, org.apache.jackrabbit.oak.spi.security.authentication.external.impl.DynamicSyncContext.collectPrincipalNames() will call the ExternalIdentityProvider for each declared group membership just to retrieve the principal name for the given external identity. This is potentially costly and should be avoided, for instance by adding a getter for the principal name to the interface ExternalIdentityRef. Let's discuss options here. -- This message was sent by Atlassian JIRA (v6.3.4#6332)