[
https://issues.apache.org/jira/browse/KNOX-3347?focusedWorklogId=1025433&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1025433
]
ASF GitHub Bot logged work on KNOX-3347:
----------------------------------------
Author: ASF GitHub Bot
Created on: 16/Jun/26 15:14
Start Date: 16/Jun/26 15:14
Worklog Time Spent: 10m
Work Description: lmccay merged PR #1262:
URL: https://github.com/apache/knox/pull/1262
Issue Time Tracking
-------------------
Worklog Id: (was: 1025433)
Time Spent: 1h 20m (was: 1h 10m)
> Introduce TokenExchangePrincipal for extending Act claim for token_exchange
> ---------------------------------------------------------------------------
>
> Key: KNOX-3347
> URL: https://issues.apache.org/jira/browse/KNOX-3347
> Project: Apache Knox
> Issue Type: Improvement
> Components: JWT
> Reporter: Larry McCay
> Priority: Major
> Fix For: 3.0.0
>
> Time Spent: 1h 20m
> Remaining Estimate: 0h
>
> Currently, the ActorChainPrincipal includes whatever act chain was in the
> Subject token from the token_exchange. The presence of the
> ImpersonatedPrincipal is currently only added by the identity assertion
> provider based on a doAs and proxyuser based impersonation. This is required
> for the new actor to be added to the nested 'act' claim.
> Let's add not the use of the TokenExchangePrincipal to the identity assertion
> logic that sets the ImpersonatedPrincipal in addition to the doAs pattern.
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
