Hello,
I'm developing a headless application using Drupal 10 as the backend and utilizing the Simple OAuth module for OAuth 2.0 authentication. I've noticed that the DisallowSimpleOauthRequests class prevents caching of responses when the Authorization header is present in the request.
My questions are:
I'm surprised to find little to no documentation or discussions addressing this issue. Am I missing something or going down the wrong path?
Is there a recommended way to allow caching of authenticated responses while maintaining adequate security?
Thanks for you help!
Active
6.0
Documentation
Authenticated request are by default not cachable (coupled or decoupled). You could try enabling "Dynamic Page Cache" module, it caches pages minus the personalized parts (both anonymous & authenticated). If you want to leverage a reverse-proxy you could take a look on https://www.drupal.org/project/adv_varnish → .