Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-5250

Cache cookie.tokenkey pulled from Crowd's /rest/config/cookie

XMLWordPrintable

    • 5

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Summary

      When cookie.tokenkey is missing in product's crowd.properties the value will be pulled from Crowd's /rest/config/cookie endpoint every time authentication check happens.

      cookie.tokenkey is an optional configuration and it should be safe to not define it, but at the same time it adds a lot of unnecessery communication load. Making it cached on server side for few minutes could address this problem.

      Workaround

      Set the cookie.tokenkey to the value configured in the Crowd server. This is detailed in The crowd.properties file. Specifically:
      An example of this configuration:

      ...
cookie.tokenkey=crowd.token_key

            [CWD-5250] Cache cookie.tokenkey pulled from Crowd's /rest/config/cookie

            Aakrity Tibrewal (Inactive) made changes -
            Resolution New: Low Engagement [ 10300 ]
            Status Original: Future Consideration [ 11775 ] New: Closed [ 6 ]
            Aakrity Tibrewal (Inactive) made changes -
            Labels New: cleanup-seos-fy25
            SET Analytics Bot made changes -
            Support reference count New: 5
            Justin W. made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 463432 ]
            Katherine Yabut made changes -
            Workflow Original: JAC Suggestion Workflow [ 3387890 ] New: JAC Suggestion Workflow 3 [ 3631047 ]
            Mareusz (Inactive) made changes -
            Status Original: Under Consideration [ 11774 ] New: Future Consideration [ 11775 ]
            Mareusz (Inactive) made changes -
            Component/s New: Authentication / Security [ 12726 ]
            Andrew S (Inactive) made changes -
            Description Original: h3. Summary

            When {{cookie.tokenkey}} is missing in product's {{crowd.properties}} the value will be pulled from Crowd's {{/rest/config/cookie}} endpoint every time authentication check happens.

            {{cookie.tokenkey}} is an optional configuration and it should be safe to not define it, but at the same time it adds a lot of unnecessery communication load. Making it cached on server side for few minutes could address this problem.

            h3. Workaround
            Set the {{cookie.tokenkey}} to the value configured in the Crowd server. This is detailed in [The crowd.properties file|https://confluence.atlassian.com/display/CROWD/The+crowd.properties+file]. Specifically:
            An example of this configuration:
            {code:XML}
            ...
            cookie.tokenkey crowd.token_key
            {code}             		New: h3. Summary

            When {{cookie.tokenkey}} is missing in product's {{crowd.properties}} the value will be pulled from Crowd's {{/rest/config/cookie}} endpoint every time authentication check happens.

            {{cookie.tokenkey}} is an optional configuration and it should be safe to not define it, but at the same time it adds a lot of unnecessery communication load. Making it cached on server side for few minutes could address this problem.

            h3. Workaround
            Set the {{cookie.tokenkey}} to the value configured in the Crowd server. This is detailed in [The crowd.properties file|https://confluence.atlassian.com/display/CROWD/The+crowd.properties+file]. Specifically:
            An example of this configuration:
            {code:XML}
            ...
            cookie.tokenkey=crowd.token_key
            {code}
            Monique Khairuliana (Inactive) made changes -
            Workflow Original: Simplified Crowd Development Workflow v2 [ 2812479 ] New: JAC Suggestion Workflow [ 3387890 ]
            Issue Type Original: Improvement [ 4 ] New: Suggestion [ 10000 ]
            Status Original: Verified [ 10005 ] New: Under Consideration [ 11774 ]
            Andriy Yakovlev [Atlassian] made changes -
            Status Original: Open [ 1 ] New: Verified [ 10005 ]

              Unassigned Unassigned
              pczuj Przemyslaw Czuj (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: