Skip to content

Skip user loading for proxy service account#2824

Closed
njshah301 wants to merge 1 commit into
google:masterfrom
njshah301:feature/oidc-auth-optimization
Closed

Skip user loading for proxy service account#2824
njshah301 wants to merge 1 commit into
google:masterfrom
njshah301:feature/oidc-auth-optimization

Conversation

@njshah301

@njshah301 njshah301 commented Sep 16, 2025

Copy link
Copy Markdown
Collaborator

Reduces database load by skipping the User entity lookup for the proxy service account during OIDC authentication.

The high volume of EPP "hello" and "login" commands from the proxy service account results in a constant database load. These lookups are unnecessary as the proxy service account is not expected to have a corresponding User object.

This change optimizes the authentication flow by checking for the proxy service account email before attempting to load a User from the database. This bypasses the database transaction entirely for these high-volume requests.

This approach is more efficient than caching, as it eliminates the database lookup for the proxy service account altogether, rather than just caching the result.


This change is Reviewable

Reduces database load by skipping the User entity lookup for the proxy
service account during OIDC authentication.

The high volume of EPP "hello" and "login" commands from the proxy
service account results in a constant database load. These lookups
are unnecessary as the proxy service account is not expected to have a
corresponding User object.

This change optimizes the authentication flow by checking for the proxy
service account email *before* attempting to load a User from the
database. This bypasses the database transaction entirely for these
high-volume requests.

This approach is more efficient than caching, as it eliminates the
database lookup for the proxy service account altogether, rather than
just caching the result.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant