Hello Tidy Bot, Kudu Jenkins,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/19910
to look at the new patch set (#6).
Change subject: [jwt] switching JWT verification to KeyBasedJwtVerifier
......................................................................
[jwt] switching JWT verification to KeyBasedJwtVerifier
Switching JWT verification to use KeyBasedJwtVerifier instead of
PerAccountKeyBasedJwtVerifier, as the latter relies on having an oidc
discovery endpoint available even if a jwks_url is set. Fixing the jwks
discovery via an OIDC server will be done in a followup patch.
As the KeyBasedJwtVerifier is initialized on Master startup, if the
loading of the JWKS is not working the Master will not able to start,
e.g. the url is unavailable, or the certificate set in
--jwks_ca_certificate is not valid.
Change-Id: Ic1f166807bfcf7051bda7843e186eacfbe379eba
---
M src/kudu/integration-tests/security-itest.cc
M src/kudu/mini-cluster/external_mini_cluster.cc
M src/kudu/rpc/negotiation-test.cc
M src/kudu/server/server_base.cc
M src/kudu/util/jwt-util-test.cc
M src/kudu/util/jwt-util.cc
M src/kudu/util/jwt-util.h
M src/kudu/util/mini_oidc.cc
M src/kudu/util/mini_oidc.h
9 files changed, 93 insertions(+), 62 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/10/19910/6
--
To view, visit http://gerrit.cloudera.org:8080/19910
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: Ic1f166807bfcf7051bda7843e186eacfbe379eba
Gerrit-Change-Number: 19910
Gerrit-PatchSet: 6
Gerrit-Owner: Zoltan Chovan <[email protected]>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Reviewer: Tidy Bot (241)
