Check automatic refresh interval before refreshing the security tokens.

IdentityServer / IdentityServer3.AccessTokenValidation

OWIN Middleware to validate access tokens from IdentityServer3

Apache License 2.0

91 stars 149 forks source link

Check automatic refresh interval before refreshing the security tokens. #155

Open SingleCopy opened 7 years ago

SingleCopy commented 7 years ago

Possible fix for the performance issue found in the DiscoveryDocumentIssuerSecurityTokenProvider when the RetrieveMetadata method is called. https://github.com/IdentityServer/IdentityServer3.AccessTokenValidation/issues/154

strtdusty commented 6 years ago

Please approve this. This looks to be a regression since 2.14. We have verified this fixes our performance issues.

dotnetnate commented 6 years ago

I can also verify both the problem and that this PR addresses it. We had an API failing under as few as 50 concurrent users prior to applying this. Once applied, expected throughput was achieved. Please approve.