- Cache the username and last verified time associated with each logged-in backend - In the HTTP backend, verify the access token explicitly at most once per hour This trades off a little bit of usability for improved inner-loop latency: if a user's API token becomes invalid less than an hour after it was last verified, the user will see 4xx errors when attempting stack operations rather than seeing the login prompt. |
||
---|---|---|
.. | ||
manager.go |