[ 
https://issues.apache.org/jira/browse/FALCON-229?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13948724#comment-13948724
 ] 

Venkatesh Seetharam commented on FALCON-229:
--------------------------------------------

I verified that the user.name is being passed as a query param. I have made 
that change already. Does it need anything else? Should it be more secure and 
be part of the header instead?

{code}
org.apache.falcon.resource.channel.HTTPChannel#invoke
            ClientResponse response = getClient()
                    .resource(UriBuilder.fromUri(url).build())
                    .queryParam("user.name", user)
                    .accept(accept).type(mimeType)
                    .method(httpMethod, ClientResponse.class,
                            (isPost(httpMethod) ? 
incomingRequest.getInputStream() : null));
{code}

> Enable SSL for Falcon REST API
> ------------------------------
>
>                 Key: FALCON-229
>                 URL: https://issues.apache.org/jira/browse/FALCON-229
>             Project: Falcon
>          Issue Type: Sub-task
>    Affects Versions: 0.5
>            Reporter: Venkatesh Seetharam
>            Assignee: Srikanth Sundarrajan
>              Labels: security
>         Attachments: FALCON-229-v2.patch, FALCON-229.patch
>
>
> Good to have but not in the first iteration.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to