[jira] [Updated] (HADOOP-10709) Reuse Filters across web apps

["Benoy Antony (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HADOOP-10709?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Benoy Antony updated HADOOP-10709:
----------------------------------

    Attachment: HADOOP-10709.patch

The approach taken is as follows:

# _HttpServer2_ keeps a cache of Filters mapped to names. 
e.g. “authentication” -> AuthenticationFilter

#. _NameNodeHttpServer_ is enhanced to accept a set of Authenticationfilters.  This can be an AuthenticationFIlter class or a name. 
eg. org.apache.hadoop.hdfs.web.TokenAuthFilter,authentication

3. _AuthenticationFilter_ is enhanced to look for SKIP attribute to decide whether to skip its authentication.
4. _TokenAuthFilter_ is added which looks for delegation token in the http request. If delegation token is present, it sets the SKIP attribute in the httprequest.

> Reuse Filters across web apps
> -----------------------------
>
>                 Key: HADOOP-10709
>                 URL: https://issues.apache.org/jira/browse/HADOOP-10709
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>            Reporter: Benoy Antony
>            Assignee: Benoy Antony
>         Attachments: HADOOP-10709.patch
>
>
> Currently, we need to define separate authentication filters for webhdfs and general webui. This also involves defining parameters for those filters.
> It will be better if one could reuse filters for web apps if desired. 



--
This message was sent by Atlassian JIRA
(v6.2#6252)