Manfred Baedke created OAK-5209: ----------------------------------- Summary: Save roundtrips to external identity servers Key: OAK-5209 URL: https://issues.apache.org/jira/browse/OAK-5209 Project: Jackrabbit Oak Issue Type: Improvement Components: auth-external Reporter: Manfred Baedke
When looking up group memberships recursively, org.apache.jackrabbit.oak.spi.security.authentication.external.impl.DynamicSyncContext.collectPrincipalNames() will call the ExternalIdentityProvider for each declared group membership just to retrieve the principal name for the given external identity. This is potentially costly and should be avoided, for instance by adding a getter for the principal name to the interface ExternalIdentityRef. Let's discuss options here. -- This message was sent by Atlassian JIRA (v6.3.4#6332)