[
https://issues.apache.org/jira/browse/IMPALA-13288?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
gaurav singh updated IMPALA-13288:
----------------------------------
Summary: OAuth AuthN: Add token verification logic in Impala (was: CLONE -
Support x5c Parameter in JSON Web Keys (JWK))
> OAuth AuthN: Add token verification logic in Impala
> ---------------------------------------------------
>
> Key: IMPALA-13288
> URL: https://issues.apache.org/jira/browse/IMPALA-13288
> Project: IMPALA
> Issue Type: Bug
> Components: Backend, Security
> Reporter: gaurav singh
> Assignee: gaurav singh
> Priority: Critical
> Labels: JWT, jwt, security
> Fix For: Impala 4.5.0
>
>
> The ["x5u"|https://datatracker.ietf.org/doc/html/rfc7517#section-4.6],
> ["x5c"|https://datatracker.ietf.org/doc/html/rfc7517#section-4.7],
> ["x5t"|https://datatracker.ietf.org/doc/html/rfc7517#section-4.8], and
> ["x5t#S256|https://datatracker.ietf.org/doc/html/rfc7517#section-4.9]
> parameters in JWKs is not supported by Impala. Implement support for this
> parameter using the available methods in the [Thalhammer/jwt-cpp
> library|https://github.com/Thalhammer/jwt-cpp/blob/ce1f9df3a9f861d136d6f0c93a6f811c364d1d3d/example/jwks-verify.cpp].
> Note: If the "alg" property is specified and so is "x5u" or "x5c", then the
> value of the "alg" property must match the algorithm on the certificate from
> the "x5u" or "x5c" property.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
