[HADOOP-17793] Better token validation

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.4.0, 2.10.2, 3.2.3, 3.3.2
• Fix Version/s: 3.4.0, 2.10.2, 3.2.3, 3.3.2
• Component/s: security
• Labels: pull-request-available
• Target Version/s: 3.4.0, 2.10.2, 3.2.3, 3.3.2
• Hadoop Flags: Reviewed
• Assignee: Artem Smotrakov
• Reporter: Artem Smotrakov
• Created: 08/Jul/21 07:36
• Updated: 11/Feb/24 14:22
• Resolved: 10/Jul/21 06:08

Description

`MessageDigest.isEqual()` should be used for checking tokens.

Issue Links

• relates to: HADOOP-14001 Improve delegation token validity checking
• links to: GitHub Pull Request #3189