[
https://issues.apache.org/jira/browse/HDDS-13997?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Fabian Morgan updated HDDS-13997:
---------------------------------
Description:
Plumbing for passing STS token through S3 api processing.
The STS token is decoded, decrypted and validated once and passed through a
thread local for remaining accesses if it is valid. Also, a new method
{{getEffectiveAccessId()}} has been created in {{OzoneManager}} because the
Kerberos identity used for STS requests must be the identity that originally
created the token.
was:Plumbing for passing STS token through S3 api processing. We need to
ensure users of STS tokens are authenticated against the Kerberos identity that
created the token.
> [STS] Plumbing for passing STS token through S3 api processing
> --------------------------------------------------------------
>
> Key: HDDS-13997
> URL: https://issues.apache.org/jira/browse/HDDS-13997
> Project: Apache Ozone
> Issue Type: Sub-task
> Reporter: Fabian Morgan
> Assignee: Fabian Morgan
> Priority: Major
> Labels: pull-request-available
>
> Plumbing for passing STS token through S3 api processing.
> The STS token is decoded, decrypted and validated once and passed through a
> thread local for remaining accesses if it is valid. Also, a new method
> {{getEffectiveAccessId()}} has been created in {{OzoneManager}} because the
> Kerberos identity used for STS requests must be the identity that originally
> created the token.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
