)]}'
{"doc/source/middlewarearchitecture.rst":[{"author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"change_message_id":"ebb16a54ff2e69f5e5bdae0efd044d7fc682898b","unresolved":false,"context_lines":[{"line_number":198,"context_line":"Validating the identity of every client on every request can impact performance"},{"line_number":199,"context_line":"for both the OpenStack service and the identity service. As a result,"},{"line_number":200,"context_line":"keystonemiddleware is configurable to cache authentication responses from the"},{"line_number":201,"context_line":"identity service in-memory. It is worth noting that tokens invalidated after"},{"line_number":202,"context_line":"they\u0027ve been stored in the cache may continue to work. Deployments using"},{"line_number":203,"context_line":"`memcached`_ may use the following keystonemiddleware configuration options"},{"line_number":204,"context_line":"instead of an in-memory cache."}],"source_content_type":"text/x-rst","patch_set":2,"id":"5a9d85d2_eebd76d8","line":201,"range":{"start_line":201,"start_character":17,"end_line":201,"end_character":26},"updated":"2016-06-21 06:46:21.000000000","message":"I think its also worth mentioning the in-memory is currently enabled by default.","commit_id":"6f53905a949705b251ff626a720558bd5fbd8f3b"},{"author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"change_message_id":"ebb16a54ff2e69f5e5bdae0efd044d7fc682898b","unresolved":false,"context_lines":[{"line_number":243,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":244,"context_line":""},{"line_number":245,"context_line":"When using `memcached`_, tokens and authentication responses are stored in the"},{"line_number":246,"context_line":"cache as raw data. In the event the cache is compromised, all token and"},{"line_number":247,"context_line":"authentication responses will be readable. To mitigate this risk,"},{"line_number":248,"context_line":"``auth_token`` middleware provides an option to authenticate and optionally"},{"line_number":249,"context_line":"encrypt the token data stored in the cache."}],"source_content_type":"text/x-rst","patch_set":2,"id":"5a9d85d2_ae724e47","line":246,"range":{"start_line":246,"start_character":45,"end_line":246,"end_character":56},"updated":"2016-06-21 06:46:21.000000000","message":"memcachd is unauthenticated and it should be protected by internal network.","commit_id":"6f53905a949705b251ff626a720558bd5fbd8f3b"}]}