Per
"Oleksii Maksymov, just a FYI that since this ticket was created, we have narrowed some performance issues related to mod-authtoken and mod-permissions (mostly mod-permissions because mod-authtoken calls mod-permissions). The log provided in this ticket does not show that because at that time the Okapi "requestId" was not passed/logged from module->auth->permissions yet. So if you can directly test /mod-notify/patron-notice API endpoint and proves that it indeed performs good, we can focus on mod-permissions performance. Thanks."