9e84371461
This patch improves check_token validation performance by only pulling revocation events based on the token issued_at value, taking advantage of the table index. In this way, only a subset of relevant events will be returned for validation. Benchmarks can be seen at [1], but included here as well: Time per Request for Old Method ------------------------------- 10 revokes at 7.908 100 revokes at 18.224 1,000 revokes at 110.155 10,000 revokes at 1998.220 Time per Request New Method --------------------------- 10 revokes at 17.636ms, 100 revokes at 17.279ms, 1,000 revokes at 17.370, 10,000 revokes w/all revokes issued before token at 17.263 (best case) 10,000 revokes w/all revokes after token creation 44.934ms (worst case) [1] https://gist.github.com/csrichard1/4b7b8527ee5a6565a84956cff33cf29b Change-Id: I9c2f067d870d542ec5909eaf8b24ded07b75f433 Partial-Bug: 1524030
13 lines
536 B
YAML
13 lines
536 B
YAML
---
|
|
fixes:
|
|
- >
|
|
[`bug 1524030 <https://bugs.launchpad.net/keystone/+bug/1524030>`_]
|
|
During token validation we've reduced the number of revocation events
|
|
returned, only returning a subset of events relevant to the token. Thus,
|
|
improving overall token validation performance.
|
|
other:
|
|
- >
|
|
The revoke backend driver interface has changed. We've added a token
|
|
parameter to the ``list_events`` method in order to improve performance by
|
|
reducing the number of revocation events returned during token validation.
|