[
https://issues.apache.org/jira/browse/IMPALA-15412?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Michael Smith resolved IMPALA-15412.
------------------------------------
Fix Version/s: Impala 5.0.0
Resolution: Fixed
> Bad Format of Error Message in WWW-Authenticate Header
> ------------------------------------------------------
>
> Key: IMPALA-15412
> URL: https://issues.apache.org/jira/browse/IMPALA-15412
> Project: IMPALA
> Issue Type: Improvement
> Reporter: Jason Fehr
> Assignee: Jason Fehr
> Priority: Critical
> Fix For: Impala 5.0.0
>
>
> When JWT/OAuth returns an error via the WWW-Authenticate header, the format
> of the "error_description" value is not ideal. The value ends with a newline
> and a space. It should not have either on the end.
> {noformat}
> curl -v -H "Authorization: Bearer ${JWT}" http://localhost:25000
> * Trying 127.0.0.1:25000...
> * Connected to localhost (127.0.0.1) port 25000 (#0)
> > GET / HTTP/1.1
> > Host: localhost:25000
> > User-Agent: curl/7.81.0
> > Accept: */*
> > Authorization: Bearer {{REDACTED}}
> >
> * Mark bundle as not supporting multiuse
> < HTTP/1.1 200 OK
> < WWW-Authenticate: Bearer error="invalid_token",error_description="Error
> verifying JWT Token: Verification failed, no matching key.
> < "
> < X-Frame-Options: DENY
> < X-Content-Type-Options: nosniff
> < Cache-Control: no-store
> < Content-Security-Policy: default-src 'self'; style-src 'self'
> 'unsafe-inline'; script-src 'self' 'unsafe-inline'; img-src 'self' data:;
> < Content-Type: text/html; charset=UTF-8
> < Content-Length: 7968
> {noformat}
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
