AzureAD / azure-activedirectory-identitymodel-extensions-for-dotnet

IdentityModel extensions for .Net
MIT License
1.06k stars 401 forks source link

[Feature Request] New validation call graph needs a way to defer building strings. #2986

Open brentschmaltz opened 3 weeks ago

brentschmaltz commented 3 weeks ago

One of the tenants of the new design is to reduce allocations when multiple policies are in effect. So if the first policy fails and the second policy succeeds, we want minimal allocations.

Several places in our call graphs we build strings when multiple errors could have occurred, signature validation is one place. We need to find a way to build the strings on demand.