Skip to content

BlobsBackend: decide on authentication for the MVP

we need to decide whether the BlobsBackend needs authentication. if so, we should have a more efficient way of checking authentication than doing a query to couch for the authentication tokens every time.

if we decide we need authentication, we can use Twisted session objects (with expiration) that only check the couchdb token once, and cache the session inside the Site hierarchy.

another possibility, if we run the BlobsBackend in a different process, is to use the Perspective Broker to query a Sessions container.

(from redmine: created on 2016-12-06)