Following up on a discussion in
Because URLs are often logged, delegation tokens may end up in LOG files while they are still valid.
We should move the tokens to a header.
We should still support tokens in the querystring for backwards compatibility.
- is blocked by
HADOOP-10771 Refactor HTTP delegation support out of httpfs to common
HADOOP-10835 Implement HTTP proxyuser support in HTTP authentication client/server libraries