Github user kotarot commented on the issue:

    https://github.com/apache/nifi/pull/3110
  
    @markap14 Thank you for your kind advice! That makes sense to me.
    
    In the new commit, I have left the existing authorization codes, followed 
by the authorization using `HostnameVerifier` (which I added). The 
authorization is performed as follows:
    - If the authorization with the string-match succeeded, then returns the 
node information from Client Identities (as we fixed in #3109 ).
    - After that, if the authorization by `HostnameVerifier` succeeded, then 
returns the derived hostname from the socket is returned.
    
    Does this change seem to be no problem?
    
    Also, I modified a few tests related to `LoadBalanceAuthorizer` because the 
interface of `authorize` is changed.
    
    @ijokarumawak Could you please review it?


---

Reply via email to