[ 
https://issues.apache.org/jira/browse/KNOX-2974?focusedWorklogId=887882&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-887882
 ]

ASF GitHub Bot logged work on KNOX-2974:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 30/Oct/23 14:23
            Start Date: 30/Oct/23 14:23
    Worklog Time Spent: 10m 
      Work Description: moresandeep merged PR #813:
URL: https://github.com/apache/knox/pull/813




Issue Time Tracking
-------------------

    Worklog Id:     (was: 887882)
    Time Spent: 20m  (was: 10m)

> Add a new endpoint like 'pre' that supports other verbs and ignores paths
> -------------------------------------------------------------------------
>
>                 Key: KNOX-2974
>                 URL: https://issues.apache.org/jira/browse/KNOX-2974
>             Project: Apache Knox
>          Issue Type: New Feature
>          Components: docker, Server
>            Reporter: Sandeep More
>            Assignee: Sandeep More
>            Priority: Major
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> Knox can be used as an [external authorizer for Istio 
> |https://istio.io/v1.10/blog/2021/better-external-authz/]. In this model 
> Istio forwards the request to the external authorizer and depending on the 
> results the request then either errors out with 401 or 403 OR proceeds to 
> it's intended destination after successful authentication and authorization 
> by Knox. 
> Here the request is getting forwarded and Knox acts as a "filter". This means 
> the "pre" endpoint should support all the HTTP verbs and it should have the 
> ability to ignore additional paths that may be appended by Istio.
> This JIRA is to address these issues by creating a new service "extauthz" 
> that addresses these issues without changing existing "pre" service to 
> prevent breakage. 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to