[ 
https://issues.apache.org/jira/browse/IOTDB-700?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17115096#comment-17115096
 ] 

Julian Feinauer commented on IOTDB-700:
---------------------------------------

I started working on this. It seems like it is sufficient to subclass the 
BasicAuthorizer and the BasicUserManager at the points where username / 
password is checked and rewrite it to validate the given JWT and extract the 
username from there.

> Add OpenID Connect based JWT Access as alternative to Username / Password
> -------------------------------------------------------------------------
>
>                 Key: IOTDB-700
>                 URL: https://issues.apache.org/jira/browse/IOTDB-700
>             Project: Apache IoTDB
>          Issue Type: New Feature
>          Components: Server
>            Reporter: Julian Feinauer
>            Priority: Major
>
> Currently login is only able via username / password backed by local file. In 
> integrated setups it would be nice to allow JWT based access so that one can 
> use the same Authentification over mutliple systems. Authorization (Roles / 
> Groups) would still be done in IoTDB. So only the login process is migrated 
> to another system.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to