LPS-35920

Hi Vilmos,

I added the p_auth token check inside LanguageServlet as you did. With an invalid p_auth token the service won't work.

With valid token, it behaves as previously - for a known key it returns corresponding value, for an unknown key it returns the key.

The change is that the response for an unknown key is never cached - should be safe to return the key now a it was previously.

I also changed CacheFilter so that there is always only one record with p_auth for all users and this cached record can be accessed only with the valid p_auth token.

You can see that with the no-cache headers there is no need to include the filter config parameters, because our caching system ignores such request.

If you have any questions please comment.

Thanks!