{"action":"opened","issue":{"url":"https://api.github.com/repos/stnoonan/spnego-http-auth-nginx-module/issues/42","labels_url":"https://api.github.com/repos/stnoonan/spnego-http-auth-nginx-module/issues/42/labels{/name}","comments_url":"https://api.github.com/repos/stnoonan/spnego-http-auth-nginx-module/issues/42/comments","events_url":"https://api.github.com/repos/stnoonan/spnego-http-auth-nginx-module/issues/42/events","html_url":"https://github.com/stnoonan/spnego-http-auth-nginx-module/issues/42","id":78098142,"number":42,"title":"Avoid 401 Round Trip","user":{"login":"AaronOpfer","id":1189089,"avatar_url":"https://avatars.githubusercontent.com/u/1189089?v=3","gravatar_id":"","url":"https://api.github.com/users/AaronOpfer","html_url":"https://github.com/AaronOpfer","followers_url":"https://api.github.com/users/AaronOpfer/followers","following_url":"https://api.github.com/users/AaronOpfer/following{/other_user}","gists_url":"https://api.github.com/users/AaronOpfer/gists{/gist_id}","starred_url":"https://api.github.com/users/AaronOpfer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AaronOpfer/subscriptions","organizations_url":"https://api.github.com/users/AaronOpfer/orgs","repos_url":"https://api.github.com/users/AaronOpfer/repos","events_url":"https://api.github.com/users/AaronOpfer/events{/privacy}","received_events_url":"https://api.github.com/users/AaronOpfer/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-05-19T13:54:16Z","updated_at":"2015-05-19T13:54:16Z","closed_at":null,"body":"Hello,\r\n\r\nI've been using this module in my DEV & QA environments and recently started rolling out to production as a part of my campaign to replace apache2 and it's working great so far, very pleased with this module overall.\r\n\r\nI noticed in the logs, however, a pattern of an anonymous GET that returns 401 occurring before every (authenticated) request. Even though we're on a fast LAN network this seems wasteful. I'd like to reduce this if possible.\r\n\r\nApparently IIS has an option for reducing these roundtrips: http://blogs.msdn.com/b/saurabh_singh/archive/2010/01/06/case-study-are-you-seeing-401-s-too-often-for-http-web-requests.aspx\r\n\r\nIs it possible for this module to do something similar? Although I am not sure how that option works under the hood. It sounds like Chrome is behaving correctly according to the spec to make sure the server wants authentication on every request. But maybe this module could store a mapping of client connections to authenticated usernames in order to avoid the repeat requests, so that anonymous requests on a previously authenticated connection don't need to make another 401 roundtrip?\r\n\r\nThanks."}}