[ 
https://issues.apache.org/jira/browse/NIFIREG-403?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17157062#comment-17157062
 ] 

Bryan Bende commented on NIFIREG-403:
-------------------------------------

That is not how it works... NiFi Registry is an application with a REST API, 
the UI and NiFi are both clients of the REST API. From the perspective of 
saving a version of a flow, it is just a call to the REST API, it could be from 
NiFI or from curl or from NiFi CLI, or any tool. If registry is unsecured then 
we have not authenticated whoever is making that call and therefore we have no 
way to know what user identity to store as the committer. In the case when NiFi 
is saving to NiFI Registry, NiFi does send over the identity of the user, but 
it still requires that NiFi itself authenticates to registry and registry 
verifies that NiFi is an authorized proxy.

 

> Nifi-Registry showing anonymous version from loged user on NiFi
> ---------------------------------------------------------------
>
>                 Key: NIFIREG-403
>                 URL: https://issues.apache.org/jira/browse/NIFIREG-403
>             Project: NiFi Registry
>          Issue Type: Bug
>         Environment: NiFi Registry 0.5.0 on Amazon Linux AMI 2
>            Reporter: Alejandro Fiel Martínez
>            Priority: Major
>
> Hi, I have 2 NiFi 1.11.4 installed along NiFi Registry.
> I log in on NiFi with openId, no login on Registry (Nginx).
> When I generate a new version fron NiFi to Registry, the user that generated 
> that version it showed as "anonymous" on Registry when it was loged in on 
> NiFi.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to