[HADOOP-16572] S3A DT support to warn when loading expired token

• Type: Sub-task
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 3.3.0
• Component/s: fs/s3

Environment

CLI with HADOOP_TOKEN_PATH pointing at a file from the day before, containing an assumed Role DT, which was being loaded ahead of any setting in the XML file

• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 13/Sep/19 12:45
• Updated: 03/Dec/24 13:39

Description

(This just cost me half an hour as somehow as working CLI command stopped working since the day before, and I've been playing with endpoints and signing before I realised it)

If the DT provider code loads a token from a file, it doesn't check or warn for an expired token -all you get is a 400 Bad request failure

This not at all obvious.

Proposed

• WARN if now > expiry
• extra entry in troubleshooting for 400