a2l007 commented on issue #10580: URL: https://github.com/apache/druid/issues/10580#issuecomment-733021489
You could either create a new security extension from scratch using [this extension](https://github.com/apache/druid/tree/master/extensions-core/druid-basic-security) as a reference or add the SAMEORIGIN header to the [auth filter](https://github.com/apache/druid/blob/fe693a4f01a60d5a93dfa9225bf7f6c33fae7843/extensions-core/druid-basic-security/src/main/java/org/apache/druid/security/basic/authentication/BasicHTTPAuthenticator.java#L154) present in the extension and recompile it. I haven't tested out the latter approach with the basic security extension, but it may be worth a try. ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
