[AMBARI-25470] Strengthen Login Security

• Type: Epic
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: ambari-server, ambari-web
• Labels: security
• Epic Name: Strengthen Login Security
• Assignee: Unassigned
• Reporter: Szabolcs Beki
• Created: 31/Jan/20 12:10
• Updated: 20/Mar/20 08:49

Description

Ambari UI uses basic authentication mechanism. The goal of this epic to investigate more secure alternatives and implement one of it. Additionally, Ambari UI login currently uses GET method as it request type. This has to be changed to post.