Jason Fehr created IMPALA-15412:
-----------------------------------
Summary: Bad Format of Error Message in WWW-Authenticate Header
Key: IMPALA-15412
URL: https://issues.apache.org/jira/browse/IMPALA-15412
Project: IMPALA
Issue Type: Improvement
Reporter: Jason Fehr
Assignee: Jason Fehr
When JWT/OAuth returns an error via the WWW-Authenticate header, the format of
the "error_description" value is not ideal. The value ends with a newline and
a space. It should not have either on the end.
{noformat}
curl -v -H "Authorization: Bearer ${JWT}" http://localhost:25000
* Trying 127.0.0.1:25000...
* Connected to localhost (127.0.0.1) port 25000 (#0)
> GET / HTTP/1.1
> Host: localhost:25000
> User-Agent: curl/7.81.0
> Accept: */*
> Authorization: Bearer {{REDACTED}}
>
* Mark bundle as not supporting multiuse
< HTTP/1.1 200 OK
< WWW-Authenticate: Bearer error="invalid_token",error_description="Error
verifying JWT Token: Verification failed, no matching key.
< "
< X-Frame-Options: DENY
< X-Content-Type-Options: nosniff
< Cache-Control: no-store
< Content-Security-Policy: default-src 'self'; style-src 'self'
'unsafe-inline'; script-src 'self' 'unsafe-inline'; img-src 'self' data:;
< Content-Type: text/html; charset=UTF-8
< Content-Length: 7968
{noformat}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
