Hello Jason Fehr, Impala Public Jenkins,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/24448
to look at the new patch set (#13).
Change subject: IMPALA-14799: Add oauth_servers support and tests
......................................................................
IMPALA-14799: Add oauth_servers support and tests
Introduce --oauth_servers to configure multiple JWT/OAuth identity providers,
migrate legacy jwks_* and oauth_* flags with deprecation warnings, and verify
tokens across all configured JWKS sources.
Address follow-up review feedback by adding validateTokenSignature support per
OAuth server config, unifying bearer token authentication logic through
OAuthServersManager for RPC and webserver paths, and tightening manager
selection behavior to prefer matching keys before cryptographic verification.
Testing:
- Incremental Linux build: ninja impalad oauth-server-config-test
oauth-servers-manager-test jwt-util-test
- OAuthServerConfigTest (13/13 passing)
- OAuthServersManagerTest (5/5 passing)
- JwtUtilTest (23/23 passing)
- org.apache.impala.customcluster.JwtHttpTest (8/8 passing)
- tests/custom_cluster/test_shell_oauth_servers_auth.py (3/3 passing)
Change-Id: Ib29ff36600406ba59c10f29d79cc632020f4a3f7
Assisted-by: GPT-5.3 (Cursor)
---
M be/src/rpc/authentication.cc
M be/src/runtime/exec-env.cc
M be/src/runtime/exec-env.h
M be/src/service/impala-server.cc
M be/src/util/CMakeLists.txt
M be/src/util/jwt-util-internal.h
M be/src/util/jwt-util.cc
M be/src/util/jwt-util.h
A be/src/util/oauth-server-config-test.cc
A be/src/util/oauth-server-config.cc
A be/src/util/oauth-server-config.h
A be/src/util/oauth-servers-manager-test.cc
A be/src/util/oauth-servers-manager.cc
A be/src/util/oauth-servers-manager.h
M be/src/util/webserver.cc
M be/src/util/webserver.h
M fe/src/test/java/org/apache/impala/customcluster/JwtHttpTest.java
A tests/custom_cluster/test_shell_oauth_servers_auth.py
18 files changed, 1,167 insertions(+), 252 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/48/24448/13
--
To view, visit http://gerrit.cloudera.org:8080/24448
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: Ib29ff36600406ba59c10f29d79cc632020f4a3f7
Gerrit-Change-Number: 24448
Gerrit-PatchSet: 13
Gerrit-Owner: Anubhav Jindal <[email protected]>
Gerrit-Reviewer: Anubhav Jindal <[email protected]>
Gerrit-Reviewer: Impala Public Jenkins <[email protected]>
Gerrit-Reviewer: Jason Fehr <[email protected]>
