[AMBARI-16638] Empty audiences list is treated as deny all for JWT auth

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.4.0
• Fix Version/s: 2.4.0
• Component/s: ambari-server
• Assignee: Papirkovskyy Myroslav
• Reporter: Papirkovskyy Myroslav
• Created: 12/May/16 15:28
• Updated: 12/May/16 19:56
• Resolved: 12/May/16 15:39

Description

Currently if ambari.properties contain authentication.jwt.audiences with empty value it is parsed into empty list and leads to denying all tokens.
Should be treated as "allow all" instead.

Issue Links

• links to: ReviewBoard