Larry McCay created KNOX-1072:
---------------------------------
Summary: Add Client Cert Required Capability to KnoxToken
Key: KNOX-1072
URL: https://issues.apache.org/jira/browse/KNOX-1072
Project: Apache Knox
Issue Type: Bug
Reporter: Larry McCay
Assignee: Larry McCay
Token exchange is becoming a popular feature from Knox authentication services.
Currently there is no way to establish and enforce the identities that are
trusted to request a token for another given token or set of credentials.
This change allows for a configured list of allowed principals to be validated
against the SubjectDN of the client presented X509Certificate.
By coupling this with KNOX-1051, we are able to have an authenticated channel
over which a token may be acquired along with authorization checks.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
