[jira] [Updated] (HADOOP-10193) hadoop-auth's PseudoAuthenticationHandler can consume getInputStream

["Alejandro Abdelnur (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HADOOP-10193?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alejandro Abdelnur updated HADOOP-10193:
----------------------------------------

       Resolution: Fixed
    Fix Version/s:     (was: 3.0.0)
                   2.3.0
     Hadoop Flags: Reviewed
           Status: Resolved  (was: Patch Available)

Thanks Greg. Committed to trunk, branch-2 & branch-2.3

> hadoop-auth's PseudoAuthenticationHandler can consume getInputStream
> --------------------------------------------------------------------
>
>                 Key: HADOOP-10193
>                 URL: https://issues.apache.org/jira/browse/HADOOP-10193
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>            Reporter: Gregory Chanan
>            Assignee: Gregory Chanan
>            Priority: Minor
>             Fix For: 2.3.0
>
>         Attachments: HADOOP-10193.patch, HADOOP-10193v2.patch
>
>
> I'm trying to use the AuthenticationFilter in front of Apache Solr.  The issue I'm running into is that the PseudoAuthenticationHandler calls ServletRequest.getParameter which affects future calls to ServletRequest.getInputStream.  I.e. from the javadoc:
> {code}
> If the parameter data was sent in the request body, such as occurs with an HTTP POST request, then reading the body directly via getInputStream() or getReader() can interfere with the execution of this method. 
> {code}
> Solr calls getInputStream after the filter and errors result.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)