Tuleap Community Edition development and releases are no longer public. You have until September 30th to download packages and sources in Tuleap project. You can contact the team if you need further assistance.

    •  
      request #23452 Doing REST or Webdav operations with Basic Auth should not create a "long session"
    Infos
    #23452
    Thomas Gerbet (tgerbet)
    2021-10-20 10:12
    2021-10-19 13:14
    25007
    Details
    Doing REST or Webdav operations with Basic Auth should not create a "long session"

    Every time a user authenticated with a Basic Auth header calls the REST API or do a Webdav information, Tuleap generates a "long session" and store the information in the session table. It can lead to a massive session which in turn can lead to performance issues.

    There is no need to create such a session in this situation since the authentication is only supposed to live for the duration of the request.

    Other
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2021-10-19
    Attachments
    Empty
    References
    Referenced by request #23452

    Follow-ups