You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@impala.apache.org by mi...@apache.org on 2026/09/30 17:14:47 UTC

(impala) 02/04: IMPALA-15448: Executor Webserver JWT/OAuth Auth Removal

This is an automated email from the ASF dual-hosted git repository.

asf-gitbox-commits pushed a commit to annotated tag 4.5.3-rc1
in repository https://gitbox.apache.org/repos/asf/impala.git

commit 7a83df63ff8b303f01c8c18fa5e0ebcc0172d7c0
Author: jasonmfehr <jf...@cloudera.com>
AuthorDate: Mon Sep 28 11:04:30 2026 -0700

    IMPALA-15448: Executor Webserver JWT/OAuth Auth Removal
    
    Removes non-functioning JWT/OAuth authentication from the executor's
    debug webservers.
    
    Manually tested using a combination of LDAP and JWT/OAuth auth.
    
    Change-Id: I805461fbb73d579a00d5ab9dbca312199d1d2d9f
---
 be/src/util/jwt-util.cc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/be/src/util/jwt-util.cc b/be/src/util/jwt-util.cc
index 8843790de..9f102ad02 100644
--- a/be/src/util/jwt-util.cc
+++ b/be/src/util/jwt-util.cc
@@ -911,7 +911,8 @@ Status JWTHelper::Verify(const JWTDecodedToken* decoded_token) const {
     return Status(TErrorCode::JWT_VERIFY_FAILED, "Unsecured JWT");
   } else if (jwks_mgr_ == nullptr) {
     // Skip to signature validation if JWKS file or url is not specified.
-    return Status::OK();
+    return Status(TErrorCode::NOT_IMPLEMENTED_ERROR,
+        "Token auth not supported on this daemon.");
   }
 
   JWKSSnapshotPtr jwks = GetJWKS();