Page History

...

We need to make sure in the following scenarios, the behavior will be acceptable and shouldn't introduce any security leaks:

1. multi-user mode
   1. Make sure in this mode, expiring one user doesn't interrupt the other user's connections. 
2. register interests and CQ
   1. In these cases, when the user making the CQ and registered interests has expired, no further data will be sent back to the user unless re-authenticated.
3. function execution on servers
   1. we will need to verify that when user expires, function executions on all servers will be stopped and re-authenticated.

Performance Impact

For on-demand re-authentication, credential expiration is discovered by the server, the client gets the notification then initiate re-authentication. Client operations will be interrupted at some period, the client will try re-authenticate only once for this operation again, hopefully the 2nd time, it will succeed.

...