Hi devs,
I posted a patch on
http://jira.xwiki.org/jira/browse/XWIKI-3013 which
make XWiki authenticate only once by session by default, this is
configurable in xwiki.cfg using xwiki.authentication.always=1.
Pros:
- quicker navigation because user is not re-authenticated for each
request, this can be very annoying when authentication means access
another server like LDAP and when there is a lots of users at the same
time
Cons:
- you have to start a new session (by logout/login for example) to be
able to update informations from LDAP or any other authentication
which do data update from remote authentication server.
The cons is why I prefer to make this possible to disable if needed.
Here is my +1.
Thanks,