AUTHORIZATION CACHE

摘要

Example embodiments disclosed herein relate to implementing an authorization cache. An authorization fact is determined based on a grant. The authorization fact is cached. The grant is revoked. The authorization fact is revoked based on a grant index.

主权项

1. A computing system comprising:
an authorization module to determine a plurality of authorization facts each based on one or more grants respectively associated with a respective issuer to a respective subject; a fact caching module to cache the authorization facts; a fact index module to implement a fact index indexed based on the authorization facts, wherein the index is based on, for each authorization fact, an authorization term; and a grant index module to implement a grant index of the grants, wherein the grant index includes, for each grant, the respective issuer, the respective grant, and the respective subject; wherein in response to one of the grants being revoked, one of the authorization facts based on the one grant is revoked.