[AMBARI-13992] SSO users, when unauthenticated, should be forwarded to the Knox login URL

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.3.0
• Fix Version/s: 2.3.0
• Component/s: ambari-web
• Assignee: Antonenko Alexander
• Reporter: Antonenko Alexander
• Created: 20/Nov/15 12:31
• Updated: 20/Nov/15 16:41
• Resolved: 20/Nov/15 13:14

Description

When the end-user tries to invoke any Ambari UI page (other than, local-user login page), it will do the following:
As it is now, call to the BE API
If the user is authenticated, BE will respond normally and if not it will send a 403 with the Knxo-sso endpoint in the error.
UI will redirect the request to pre-defined “Knox-SSO-EndPoint” with appropriate request context (original user requested url)