Investigate using annotations for more granularity on auth filtering
A behavior I've noticed is that the auth filter creates a bit of initial latency for each request. This is especially true when the token is not present/invalid as the auth server takes a bit longer to validate in those cases.
- 2 new annotations. Something like:
FullAuth
andPartialAuth
(just prototype names)-
FullAuth
would get caught by aRequestFilter
and fully deny the incoming request -
PartialAuth
would allow for data to be fetched and could be caught by aResponseFilter
to obfuscate the email and country data - There might be a way to leverage reactive to allow for the token to be validated while the data is being fetched on the
PartialAuth
endpoints.
-
/cc @malowe thoughts or other potential solutions?