Hello Jason Fehr, Impala Public Jenkins,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/21728
to look at the new patch set (#26).
Change subject: IMPALA-13288: OAuth AuthN Support for Impala
......................................................................
IMPALA-13288: OAuth AuthN Support for Impala
This patch added OAuth support with following functionality:
* Load and parse JWKS from pre-installed JSON file.
* Read the OAuth Access token from the HTTP Header.
* Verify the OAuth's signature with public key in JWKS.
* Get the username out of the payload of OAuth Access token.
* Support following JSON Web Algorithms (JWA):
HS256, HS384, HS512, RS256, RS384, RS512.
* Impala Shell side changes with options -a and --oauth_cmd
We use third party library jwt-cpp to verify OAuth token. jwt-cpp is a
headers only C++ library.
Added BE unit-tests for loading JWKS file and verifying JWT token.
Testing:
- Passed core run.
Change-Id: I65dc8db917476b0f0d29b659b9fa51ebaf45b7a6
---
M be/src/rpc/auth-provider.h
M be/src/rpc/authentication.cc
M be/src/service/impala-server.cc
M be/src/transport/THttpServer.cpp
M be/src/transport/THttpServer.h
M be/src/util/CMakeLists.txt
M be/src/util/jwt-util-test.cc
A be/src/util/oauth-util-internal.h
A be/src/util/oauth-util.cc
A be/src/util/oauth-util.h
M be/src/util/webserver.cc
M be/src/util/webserver.h
M common/thrift/generate_error_codes.py
M common/thrift/metrics.json
M shell/ImpalaHttpClient.py
M shell/impala_client.py
M shell/impala_shell.py
M shell/option_parser.py
18 files changed, 2,678 insertions(+), 21 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/28/21728/26
--
To view, visit http://gerrit.cloudera.org:8080/21728
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I65dc8db917476b0f0d29b659b9fa51ebaf45b7a6
Gerrit-Change-Number: 21728
Gerrit-PatchSet: 26
Gerrit-Owner: gaurav singh <[email protected]>
Gerrit-Reviewer: Impala Public Jenkins <[email protected]>
Gerrit-Reviewer: Jason Fehr <[email protected]>
