[ 
https://issues.apache.org/jira/browse/AMBARI-7938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14183157#comment-14183157
 ] 

Hudson commented on AMBARI-7938:
--------------------------------

SUCCESS: Integrated in Ambari-trunk-Commit #695 (See 
[https://builds.apache.org/job/Ambari-trunk-Commit/695/])
AMBARI-7938 - Views: ability to use current ambari authorization + session 
(tbeerbower: 
http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=439a0a40d5bffdfa38059deb212d3658ea79adf1)
* 
ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariManagementController.java
* 
ambari-server/src/test/java/org/apache/ambari/server/view/ViewContextImplTest.java
* 
ambari-server/src/main/java/org/apache/ambari/server/view/ViewAmbariStreamProvider.java
* 
ambari-server/src/main/java/org/apache/ambari/server/view/ViewURLStreamProvider.java
* ambari-server/src/main/java/org/apache/ambari/server/view/ViewContextImpl.java
* 
ambari-server/src/test/java/org/apache/ambari/server/view/ViewAmbariStreamProviderTest.java
* 
ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java
* ambari-views/src/main/java/org/apache/ambari/view/ViewContext.java
* 
ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariSessionManager.java
* 
ambari-server/src/test/java/org/apache/ambari/server/view/ViewURLStreamProviderTest.java
* 
ambari-server/src/test/java/org/apache/ambari/server/controller/internal/URLStreamProviderTest.java
* ambari-views/src/main/java/org/apache/ambari/view/AmbariStreamProvider.java
* 
ambari-server/src/main/java/org/apache/ambari/server/controller/internal/URLStreamProvider.java
* ambari-server/src/main/java/org/apache/ambari/server/view/ViewRegistry.java


> Views: ability to use current ambari authorization + session
> ------------------------------------------------------------
>
>                 Key: AMBARI-7938
>                 URL: https://issues.apache.org/jira/browse/AMBARI-7938
>             Project: Ambari
>          Issue Type: Bug
>            Reporter: Tom Beerbower
>            Assignee: Tom Beerbower
>             Fix For: 2.0.0
>
>         Attachments: AMBARI-7938.patch
>
>
> When a user accesses ambari, they first "login" with a basic auth 
> "Authorization" header. That results in a AMBARISESSIONID= that is 
> authenticated. And subsequent calls from Ambari Web use that AMBARISESSIONID 
> in a cookie to avoid having to re-auth (as long as the session doesn't 
> timeout).
> If a view in ambari web is going to call-out to an ambari server (for 
> example, if the view wants to use an ambari server API to update capacity 
> scheduler configs via Ambari REST API), it would be useful for that view to 
> re-use that auth info / session so the view connects to the ambari server as 
> the "same" user.
> Provide a way to expose the "Authorization/session" cookie in viewcontext if 
> they plan to have the view connect to an ambari server. Could this be an 
> option on URLStreamProvider obtained from the viewcontext, to hide the 
> details?



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to