[squid-users] Shared Caching with Authorization

[LIJO C J]

Hi,
I have a resource representation in a REST service.  The response content  is same for allusers. But the response should be accessed only by authorizedInventoryAuditors.


 
1.      How should be the response headers set to leveragecaching in Squid (as a forward proxy)?

2.      How Squid will validate that the requested useris an authorized InventoryAuditor, while serving the response from cache?


 

 

 
[RoutePrefix("api/users")]

public classUsersController : ApiController

{

   [Authorize(Roles="InventoryAuditor")]

   [Route("")]

   [HttpGet]

    publicList<User> GetAllUsers()

    {

       //Return list of users

    }


 
}


 
public class User

{

    publicint UserID { get; set; }

    publicstring FirstName { get; set; }

}

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160826/dc63fcf9/attachment.html>