[HADOOP-9809] REST SSO support for TokenAuth

• Type: Task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Labels: TokenAuth
• Assignee: Kai Zheng
• Reporter: Kai Zheng
• Created: 01/Aug/13 01:09
• Updated: 14/Sep/14 18:00

Description

This is to support REST SSO to access Hadoop services implemented in REST style, with the following scope:

• Define REST SSO flow. Based on the related flow illustrated in TokenAuth design doc, this REST SSO flow would be defined involving related parties including Authentication Service, Identity Token Service, Access Token Service and Hadoop REST service.
• Define token authn filter/handler API that frontends Hadoop REST service and interacts with related services in TokenAuth to do authentication and token exchange.
• Define token authn authenticator API for REST client, and optionally implement authenticator for REST client.
• Define and implement basic facilities to allow plugin of token authn filter/handler implementations.

Issue Links

• Is contained by: HADOOP-9796 Pluggable TokenAuth framework and core facilities