2022-05-20 UTC
# 
Zegnat Not sure I fully grasp what sort of auth*ation you you there. Normally I would expect me to authenticate myself once and then be given some form of proof-of-authentication after the process. And then I only need to provide said proof afterwards. The API server can often very efficiently check whether the proof is still valid or whether to ask for re-authentication. So the cache would be built into the proof-validity. I.e. basically