pzampino opened a new pull request #284: KNOX-2266 - Tokens Should Include a 
Unique Identifier
URL: https://github.com/apache/knox/pull/284
 
 
   ## What changes were proposed in this pull request?
   
   JWTs issued and validated by Knox now include a unique identifier as a 
private claim. This is mostly to guarantee token uniqueness, even for multiple 
requests within the same second.
   Further, the TokenStateService has been updated to leverage this unique 
identifier as the key for handling token state. This identifier is less 
susceptible to the nuances of some storage mechanisms.
   
   ## How was this patch tested?
   
   Mulitple existing tests were modified to accommodate this change while 
ensuring the maintenance of existing behavior. 
TokenServiceResourceTest#testConcurrentGetToken was added to validate these 
changes. I've also done a bit of manual testing.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to