This story assume:

• mod_perl is used on the platform (to generate the right codendi_svnroot.conf)
• token is generated manually by developers for test purpose

Enhance and clean-up "Tuleap.pm" mod_perl implementation of Tuleap authentication in Apache:

• Clean-up Tuleap.pm to make it more readable / maintainable
• Propose "Token first" authentication with fallback on default mode:
  • Database
  • or LDAP (esp. according to ldap "$sys_ldap_svn_auth" config & per project config)

Critical parts:

• modperl is already used on large deployment, the impact on existing deployment (in term of perfs and behaviour) should be neutral (no modification) or positive (better performances). Svn is very HTTP intensive so the authentication module should be carefully crafted to limit overhead.
• this new mode is designed for very high traffic sites, the implementation and settings (caches, etc) should take this into account.
• fallback on LDAP should be checked against std LDAP as well as ActiveDirectory.