tree 84675360a547c4e6b5e888d8c04241cb24688906
parent 7c6862cbd1cd2ac8b36ab5fc681375a721f26b14
author Luca Milanesio <luca.milanesio@gmail.com> 1671143012 +0000
committer Luca Milanesio <luca.milanesio@gmail.com> 1671143231 +0000

Create HTTP session only for login requests

Previously the SAML filter was creating a new Jetty HTTP
session for any request to Gerrit, including the ones that
are not supposed to go through a SAML authentication handshake.

Delay the creation of the session and fetching of the user
until the request has to process that information for a login
authentication flow.

Allow to massively reduce the number of sessions created
and also minimize the associated resource allocation.

Change-Id: I81af508f550b1c32e03616de0e82e7af99cbc880