search

litespeedtech / openlitespeed

Our high-performance, lightweight, open source HTTP server
https://openlitespeed.org
GNU General Public License v3.0
1.16k stars 189 forks source link

Documentation: Lack of ESI Support Causes issues with WordPress Nonces #372

Closed jordantrizz closed 8 months ago

jordantrizz commented 8 months ago

From what I found, there's nowhere talking about WordPress Nonces and Openlitespeed. Please correct anything inaccurate in this issue, that's why I'm creating it.

So I'm creating this issue to bring more attention to the fact that WordPress nonce can't be cached with Openlitespeed using the WordPress LSCache plugin since Openlitespeed doesn't support ESI.

Litespeed Enterprise is different due to the support of ESI and support within the LSCache plugin to cache WordPress Nonces using ESI.

The only resource I found searching was this forum post https://forum.openlitespeed.org/threads/wp-nonce-is-cached.4512/

There should be further documentation about Openlitespeed and WordPress Nonces. A step further would be to enable ESI within Openlitespeed, as this would push more usage versus Nginx.

litespeedtech commented 8 months ago

LiteSpeed WordPress cache plugin should detect and automatically disable nonce caching when ESI support is absent. We will improve the documentation. Thanks for the remainder.

jordantrizz commented 8 months ago

LiteSpeed WordPress cache plugin should detect and automatically disable nonce caching when ESI support is absent. We will improve the documentation. Thanks for the remainder.

That's not really what I was concerned about. If this does happen, and the Litespeed Cache TTL is set to over 12 hours then WordPress Nonces fail to work. Instead, there should be detection within LSCache to detect ESI is not available, and when the Cache TTL is higher than 12 hours and add a warning.