Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-10880

Move HTTP delegation tokens out of URL querystring to a header

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: 2.4.1
    • Fix Version/s: 2.6.0
    • Component/s: security
    • Labels:
      None
    • Target Version/s:
    • Hadoop Flags:
      Reviewed

      Description

      Following up on a discussion in HADOOP-10799.

      Because URLs are often logged, delegation tokens may end up in LOG files while they are still valid.

      We should move the tokens to a header.

      We should still support tokens in the querystring for backwards compatibility.

        Attachments

        1. HADOOP-10880.patch
          16 kB
          Alejandro Abdelnur
        2. HADOOP-10880.patch
          16 kB
          Alejandro Abdelnur
        3. HADOOP-10880.patch
          16 kB
          Alejandro Abdelnur
        4. HADOOP-10880.patch
          16 kB
          Alejandro Abdelnur
        5. HADOOP-10880.patch
          16 kB
          Alejandro Abdelnur

          Issue Links

            Activity

              People

              • Assignee:
                tucu00 Alejandro Abdelnur
                Reporter:
                tucu00 Alejandro Abdelnur
              • Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: