[
https://issues.apache.org/jira/browse/HBASE-24252?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17093943#comment-17093943
]
Nick Dimiduk commented on HBASE-24252:
--------------------------------------
I just find it very strange (I won't say "non-standard" because in the world of
web services, there really isn't) to specify anything authN/Z as a request
parameter. Unless you're implementing an endpoint like {{/authenticate}} this
kind of information usually goes along as a request header.
> Implement proxyuser/doAs mechanism for hbase-http
> -------------------------------------------------
>
> Key: HBASE-24252
> URL: https://issues.apache.org/jira/browse/HBASE-24252
> Project: HBase
> Issue Type: Improvement
> Components: security, UI
> Reporter: Istvan Toth
> Assignee: Istvan Toth
> Priority: Major
> Fix For: 3.0.0, 2.3.0, 2.4.0, 2.2.5
>
>
> The REST and Thrift interfaces for HBase already implement the standard
> hadoop ProxyUser mechanism for SPNEGO, but it is not implemented in
> hbase-httpserver.
> Implement it.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
