[
https://issues.apache.org/jira/browse/MESOS-4844?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15192301#comment-15192301
]
Adam B commented on MESOS-4844:
-------------------------------
2 of 3 patches committed; Tests for bad authentication still under review at
https://reviews.apache.org/r/44621/
commit 83f3db0580370253df7c914066532d74c6732cac
Author: Joerg Schad <[email protected]>
Date: Mon Mar 7 17:29:33 2016 -0800
Unified/added Future checks for http methods in tests.
Review: https://reviews.apache.org/r/44286/
commit 37eff3337e67e32005fbd6d1ca9d45b336701106
Author: Joerg Schad <[email protected]>
Date: Sat Mar 12 23:59:12 2016 -0800
Added authentication to master endpoints.
Added Authentication to master process http endpoints
(except version, health, redirect, scheduler).
Review: https://reviews.apache.org/r/44186/
> Add authentication to master endpoints
> --------------------------------------
>
> Key: MESOS-4844
> URL: https://issues.apache.org/jira/browse/MESOS-4844
> Project: Mesos
> Issue Type: Task
> Components: master, security
> Reporter: Adam B
> Assignee: Joerg Schad
> Labels: mesosphere, security
>
> Before we can add authorization around operator endpoints, we need to add
> authentication support, so that unauthenticated requests are denied when
> --authenticate_http is enabled, and so that the principal is passed into
> `route()`.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
