Jeff Storck created NIFI-4986:
---------------------------------

             Summary: Knox SSO token expiry handling (NiFi + Knox + SSO)
                 Key: NIFI-4986
                 URL: https://issues.apache.org/jira/browse/NIFI-4986
             Project: Apache NiFi
          Issue Type: Bug
          Components: Core UI
    Affects Versions: 1.5.0
            Reporter: Jeff Storck


When NiFi is proxied through Knox using the SSOCookieProvider, the NiFi UI can 
not determine when the Knox SSO token has expired.

The NiFI UI attempts to make API calls through Knox via XHRs (XMLHttpRequests), 
which end up receiving the Knox SSO login page as the response if the Knox SSO 
token has expired.  Knox will be patched for this via 
[https://issues.apache.org/jira/browse/KNOX-1210|KNOX-1210], and a 401 will be 
returned by the call to Knox if the token has expired.

The NiFi UI will need a way to allow the user to log in through the KnoxSSO 
again after receiving a 401 in this scenario.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to