Comment 3 for bug 1583961

Revision history for this message
Alvaro Lopez (aloga) wrote :

@Steve, that's it. If the user is accessing OpenStack 100 times, 100 browser tabs/windows will be opened. In most cases authentication will be done manually (i.e. log in) only once, as subsequent requests will be authenticated if the user does not log out.

The access token can be reused (as long as it is still valid), so the only way to not ask for authentication each time is to persist the access token from session to session and detect if a valid token is there. The token can be persisted to disk but this may have security concerns.