[jira] [Work logged] (KNOX-2210) Gateway-level configuration for server-managed Knox token state

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/KNOX-2210?focusedWorklogId=384041&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-384041 ]

ASF GitHub Bot logged work on KNOX-2210:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 09/Feb/20 04:15
            Start Date: 09/Feb/20 04:15
    Worklog Time Spent: 10m 
      Work Description: pzampino commented on pull request #259: KNOX-2210 - Gateway-level configuration for server-managed Knox token…
URL: https://github.com/apache/knox/pull/259
 
 
   … state
   
   ## What changes were proposed in this pull request?
   
   Added gateway-level default configuration for the server-managed token state, which can be overridden by service and provider level params.
   
   ## How was this patch tested?
   
   Added tests for the AbstractJWTFilter functionality and augmented TokenServiceResourceTest.
 
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Issue Time Tracking
-------------------

            Worklog Id:     (was: 384041)
    Remaining Estimate: 0h
            Time Spent: 10m

> Gateway-level configuration for server-managed Knox token state
> ---------------------------------------------------------------
>
>                 Key: KNOX-2210
>                 URL: https://issues.apache.org/jira/browse/KNOX-2210
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>    Affects Versions: 1.4.0
>            Reporter: Philip Zampino
>            Assignee: Philip Zampino
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Currently, use of the token state service by Knox Token service deployments and JWT providers is configured independently. This is due to the fact that there can be multiple deployments of the Knox Token service (i.e., multiple topologies), and each can choose whether server-management of token state is desired.
> However, in the simplest deployment scenarios, there is a single topology providing the Knox Token service, and one or more topologies with providers that verify those tokens for authentication. In these cases, would be simpler to have a single gateway-level configuration property that enables/disables the use of the TokenStateService for all KnoxToken service deployments and JWT provider deployments.
> The KnoxToken service and the providers should check for a topology-level override (e.g., service param, provider param), which should be applied if present. In the absence of an topology-level override, the gateway-level configuration property should be referenced and applied.
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)