pzampino opened a new pull request #440:
URL: https://github.com/apache/knox/pull/440


   …3rd-party) token verifications
   
   ## What changes were proposed in this pull request?
   
   This is a return to KNOX-2544 to address some shortcomings with the previous 
attempt. With these changes:
   - Third-party JWTs (any without the internal Knox UUID) are supported in the 
signature verification caching optimization.
   - The cache has been separated from the JWT providers, such that it can be 
shared by multiple instances of the same JWT provider associated with the a 
single topology. The caches are still topology specific; They're just no longer 
bound to a single JWT provider(i.e., filter) instance.
   
   ## How was this patch tested?
   
   - `mvn -Ppackage,release clean install`
   - Modified AbstractJWTFilterTest and HadoopAuthFilterTest
   - Added 
org.apache.knox.gateway.provider.federation.jwt.filter.SignatureVerificationCacheTest
   - Still performing manual testing, but wanted to get the review started.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to