tree ed3a8333a3135055b58dc1d2daffff620b90ea21
parent c438c579480502708b77d6a9e38833f52232aec9
author Luca Milanesio <luca.milanesio@gmail.com> 1699491524 +0000
committer Luca Milanesio <luca.milanesio@gmail.com> 1699556429 +0000

Refresh GitHub groups upon Gerrit successful login

GitHub groups are cached and persisted on disk, for preventing
GitHub outages to impact Gerrit Code Review. The persistent cache may
however cause security and inconsistency issues with the original
copy of the groups and memebership on GitHub.

Make sure that groups are refreshed every time a user is logging
on Gerrit Code Review UI successfully.

NOTE: Git/HTTP is excluded because it could lead to bursts of
GitHub APIs that could exhaust the user's allowance.

Because of the lack of login notification from Gerrit, the solution
needs to be based on the presence of the Set-Cookie header in
the HTTP response, hence the group refresh needs to use a
ServletFilter that is invoked for every request heading to Gerrit.

Bug: Issue 308979847
Change-Id: Ie5d012fb7c34e3edbb5576b53de32fd5b140ec17