[kudu-CR] jwt: determine discovery endpoint from token

["Zoltan Chovan (Code Review)" <ge...@cloudera.org>]

Zoltan Chovan has uploaded a new patch set (#10) to the change originally created by Andrew Wong. ( http://gerrit.cloudera.org:8080/18472 )

Change subject: jwt: determine discovery endpoint from token
......................................................................

jwt: determine discovery endpoint from token

This patch introduces a JWT verifier that manages multiple JWKSs,
depending on an account ID included in a given JWT's payload.

The current implementation is somewhat crude, simply instantiating new
JWTHelpers per account ID, thereby creating new threads per account.
Follow-on work will be required to ensure scalability (though it's
unclear how many account IDs to expect in a typical deployment).

Co-authored-by: Zoltan Chovan <zc...@cloudera.com>

Change-Id: I970bcc6d894c0206160196418d549b71c35ac973
---
M src/kudu/integration-tests/security-itest.cc
M src/kudu/rpc/negotiation.cc
M src/kudu/rpc/server_negotiation.cc
M src/kudu/rpc/server_negotiation.h
M src/kudu/server/server_base.cc
M src/kudu/util/jwt-util-test.cc
M src/kudu/util/jwt-util.cc
M src/kudu/util/jwt-util.h
8 files changed, 315 insertions(+), 16 deletions(-)


  git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/72/18472/10
-- 
To view, visit http://gerrit.cloudera.org:8080/18472
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I970bcc6d894c0206160196418d549b71c35ac973
Gerrit-Change-Number: 18472
Gerrit-PatchSet: 10
Gerrit-Owner: Andrew Wong <an...@g.ucla.edu>
Gerrit-Reviewer: Alexey Serbin <al...@apache.org>
Gerrit-Reviewer: Attila Bukor <ab...@apache.org>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Reviewer: Marton Greber <gr...@gmail.com>
Gerrit-Reviewer: Tidy Bot (241)
Gerrit-Reviewer: Wenzhe Zhou <wz...@cloudera.com>
Gerrit-Reviewer: Zoltan Chovan <zc...@cloudera.com>