Sandeep More created KNOX-2974:
----------------------------------
Summary: Add a new endpoint like 'pre' that supports other verbs
and ignores paths
Key: KNOX-2974
URL: https://issues.apache.org/jira/browse/KNOX-2974
Project: Apache Knox
Issue Type: New Feature
Components: docker, Server
Reporter: Sandeep More
Assignee: Sandeep More
Knox can be used as an [external authorizer for Istio
|https://istio.io/v1.10/blog/2021/better-external-authz/]. In this model Istio
forwards the request to the external authorizer and depending on the results
the request then either errors out with 401 or 403 OR proceeds to it's intended
destination after successful authentication and authorization by Knox.
Here the request is getting forwarded and Knox acts as a "filter". This means
the "pre" endpoint should support all the HTTP verbs and it should have the
ability to ignore additional paths that may be appended by Istio.
This JIRA is to address these issues by creating a new service "extauthz" that
addresses these issues without changing existing "pre" service to prevent
breakage.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
