[jira] [Commented] (IOTDB-700) Add OpenID Connect based JWT Access as alternative to Username / Password

["Julian Feinauer (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/IOTDB-700?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17115096#comment-17115096 ] 

Julian Feinauer commented on IOTDB-700:
---------------------------------------

I started working on this. It seems like it is sufficient to subclass the BasicAuthorizer and the BasicUserManager at the points where username / password is checked and rewrite it to validate the given JWT and extract the username from there.

> Add OpenID Connect based JWT Access as alternative to Username / Password
> -------------------------------------------------------------------------
>
>                 Key: IOTDB-700
>                 URL: https://issues.apache.org/jira/browse/IOTDB-700
>             Project: Apache IoTDB
>          Issue Type: New Feature
>          Components: Server
>            Reporter: Julian Feinauer
>            Priority: Major
>
> Currently login is only able via username / password backed by local file. In integrated setups it would be nice to allow JWT based access so that one can use the same Authentification over mutliple systems. Authorization (Roles / Groups) would still be done in IoTDB. So only the login process is migrated to another system.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)