Tom Bentley
Tom Bentley
We get the dek from the cache, we check it and maybe invalidate the cache entry. The get-and-check pattern is not atomic. So multiple racing threads can end up calling...
Looks like we did this one.
> I'd also like to avoid a car crash with https://github.com/kroxylicious/kroxylicious/pull/1639. If only 1639 was a tidy as a mere car crash. I think we're at least into train wreckage...
We should drop the `proxy` from these package names, so that all 1st party filters have their own package whose name is prefixed by `io.kroxylicious.filter.`
@k-wall I'm interested in your opinion on something which isn't really covered by the proposal currently. In this PR I've introduced the `SubjectBuilder` interface, which gets to decide what principals...
You know, now that I've written out those examples it makes me think that it's odd to separate the config of the subject builder from the configuration of the authorizer....
Another consideration to bear in mind is audit logging. Ideally an authorizer would record the decisions it makes. It's more fiddly to arrange collecting those events and routing them to...
Been merging chunks of this all week and it's still sitting a +30,370.
:checkered_flag: This was broken into other several PRs which were progressively merged onto `main`. So everything once in this branch is now on available from `main` in some form or...