[HADOOP-9808] Web SSO support for TokenAuth

• Type: Task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Labels: TokenAuth
• Assignee: Kai Zheng
• Reporter: Kai Zheng
• Created: 01/Aug/13 01:06
• Updated: 14/Sep/14 17:59

Description

This is to support web browser SSO for Hadoop web interfaces, with the following scope:

• Define web SSO flow. Based on the flow illustrated in TokenAuth design doc, this web SSO flow would be defined involving related parties including Authentication Service, Identity Token Service, Access Token Service and Hadoop web interface.
• Define token authn filter/handler API that frontends Hadoop web interface and interacts with related services in TokenAuth to do authentication and token exchange.
• Define and implement basic facilities to allow plugin of token authn filter/handler implementations.

Issue Links

• Is contained by: HADOOP-9796 Pluggable TokenAuth framework and core facilities