zeripathandLunny Xiao deb2ef59b2 Add API Token Cache (#16547) ...

One of the issues holding back performance of the API is the problem of hashing.
Whilst banning BASIC authentication with passwords will help, the API Token scheme
still requires a PBKDF2 hash - which means that heavy API use (using Tokens) can
still cause enormous numbers of hash computations.

A slight solution to this whilst we consider moving to using JWT based tokens and/or
a session orientated solution is to simply cache the successful tokens. This has some
security issues but this should be balanced by the security issues of load from
hashing.

Related #14668

Signed-off-by: Andrew Thornton <[email protected]>

Co-authored-by: Lunny Xiao <[email protected]>

2021-08-17 14:30:42 -04:00

doc

Add API Token Cache (#16547)

2021-08-17 14:30:42 -04:00

page

Fix various documentation, user-facing, and source comment typos (#16367)

2021-07-08 13:38:13 +02:00

S

Description

No description provided

Apache-2.0

9.6 MiB

Languages

TypeScript 42.4%

MDX 30.9%

Astro 8.1%

JavaScript 6.4%

Shell 6%

Other 6.2%