[MESOS-7247] HTTP Authenticator modules should be able to redirect users

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: agent, libprocess, master
• Labels: mesosphere
• Assignee: Unassigned
• Reporter: Silas Snider
• Created: 15/Mar/17 00:08
• Updated: 12/Jan/18 09:20

Description

RIght now, Autheticator modules can only respond with an Unauthorized HTTP status code if they need to get auth information from the client. This works for Basic auth, but not for authentication types like oauth, which expect the server to redirect the client to the right authorization provider URL.

We should change AuthenticationResult to allow arbitrary http responses to allow for more flexibility here.