thevenin yama created ZEPPELIN-2880:
---------------------------------------
Summary: Fix username output when OIDC is enabled
Key: ZEPPELIN-2880
URL: https://issues.apache.org/jira/browse/ZEPPELIN-2880
Project: Zeppelin
Issue Type: Bug
Components: Core
Affects Versions: 0.8.0
Reporter: thevenin yama
SecurityUtils.getPrincipal() should not use toString() wen principal implements
java.security.Principal.
Our Principal implementation contains user's roles, permissions and tokens. All
of this information is part of the toString() output, and is sent to Zeppelin's
client via websocket. It appears in the web browser when running a paragraph in
a notebook.
When Principal implements java.security.Principal, it would be better to use
getName() instead of toString().
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
