This is an automated email from the ASF dual-hosted git repository.
rzo1 pushed a change to branch fix/drpc-impersonation-check
in repository https://gitbox.apache.org/repos/asf/storm.git
from 73f304e53 Deny doAsUser without an authenticated user in DRPC
add 234f68dee Parse the remote address as a literal and reject anonymous
doAsUser before Nimbus
No new revisions were added by this update.
Summary of changes:
.../storm/daemon/drpc/webapp/ReqContextFilter.java | 7 ++-
.../daemon/ui/filters/AuthorizedUserFilter.java | 32 +++++++-----
.../daemon/drpc/webapp/ReqContextFilterTest.java | 61 ++++++++++++++++++++++
.../ui/filters/AuthorizedUserFilterTest.java | 19 +++++++
4 files changed, 101 insertions(+), 18 deletions(-)
create mode 100644
storm-webapp/src/test/java/org/apache/storm/daemon/drpc/webapp/ReqContextFilterTest.java
