Investigate using annotations for more granularity on auth filtering
A behavior I've noticed is that the auth filter creates a bit of initial latency for each request. This is especially true when the token is not present/invalid as the auth server takes a bit longer to validate in those cases.
- 2 new annotations. Something like:
FullAuthandPartialAuth(just prototype names)-
FullAuthwould get caught by aRequestFilterand fully deny the incoming request -
PartialAuthwould allow for data to be fetched and could be caught by aResponseFilterto obfuscate the email and country data - There might be a way to leverage reactive to allow for the token to be validated while the data is being fetched on the
PartialAuthendpoints.
-
/cc @malowe thoughts or other potential solutions?