You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@knox.apache.org by "Larry McCay (JIRA)" <ji...@apache.org> on 2017/02/01 01:23:52 UTC

[jira] [Commented] (KNOX-861) Support pluggable validator for Header pre authentication provider

    [ https://issues.apache.org/jira/browse/KNOX-861?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15847854#comment-15847854 ] 

Larry McCay commented on KNOX-861:
----------------------------------

Hi [~kamrul] - this looks pretty good at first glance.
I will need to test it in the next day or so and review in greater detail.

This will be a really nice improvement for establishing trust in various ways before accepting the asserted identity from the header.


> Support pluggable validator for Header pre authentication  provider
> -------------------------------------------------------------------
>
>                 Key: KNOX-861
>                 URL: https://issues.apache.org/jira/browse/KNOX-861
>             Project: Apache Knox
>          Issue Type: Improvement
>          Components: Server
>            Reporter: Mohammad Kamrul Islam
>            Assignee: Mohammad Kamrul Islam
>             Fix For: 0.12.0
>
>         Attachments: KNOX-861.patch
>
>
> Currently there are two validators : IPValidator, DefaultValidator, IPValidator validates the source IP.   DefaultValidator is basically a no-auth.
> The proposal is to provide a pluggable validator to support any custom validation logic. Another requirement is to maintain the backward compatibility of any existing features.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)