Authorization list should be refreshed upon auth failure

connectome-neuprint / neuPrintHTTP

Implements connectomics REST interface

5 stars 2 forks source link

Authorization list should be refreshed upon auth failure #64

Closed stuarteberg closed 3 weeks ago

stuarteberg commented 10 months ago

If I understand correctly, the list of authorized users is only consulted once, upon startup (unless the server is configured to use datastore). Is that correct?

It would be nice if we could grant access without requiring a reboot of the server. I propose to refresh the list any time a request fails auth. Before returning an error, refresh the auth list and check one more time.

stuarteberg commented 3 weeks ago

Apparently this is already implemented and seems to work.