-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/75269/
-----------------------------------------------------------
Review request for ranger, Mehul Parikh, Pradeep Agrawal, Sailaja Polavarapu,
Vikas Kumar, and Velmurugan Periasamy.
Bugs: RANGER-4993
https://issues.apache.org/jira/browse/RANGER-4993
Repository: ranger
Description
-------
HSTS header is missing for 404 Not found requests .
E.G.
curl -ivk -u keyadmin:Admin123 https://<fqdn>:9494/
OR
curl -ivk --negotiate -u : https://<fqdn>:9494
< HTTP/1.1 404 Not Found
HTTP/1.1 404 Not Found
< Content-Type: text/html;charset=utf-8
Content-Type: text/html;charset=utf-8
< Content-Language: en
Content-Language: en
< Content-Length: 682
Content-Length: 682
< Date: Mon, 26 Aug 2024 13:12:21 GMT
Date: Mon, 26 Aug 2024 13:12:21 GMT
< Server: Apache Ranger
Server: Apache Ranger
Diffs
-----
kms/config/webserver/ranger-kms-site.xml 8b72cc2b7
kms/src/main/java/org/apache/hadoop/crypto/key/kms/server/HSTSFilter.java
PRE-CREATION
kms/src/main/webapp/WEB-INF/web.xml c3a35bc29
Diff: https://reviews.apache.org/r/75269/diff/1/
Testing
-------
Successfully validated the HSTS header for above API and all the existing APIs
such as GET keys, create keys, rollover keys , delete keys.
Thanks,
Dhaval Shah
