[HADOOP-9836] Token definition and API

• Type: Sub-task
• Status: Patch Available
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.0.0-alpha1
• Component/s: security
• Labels: BB2015-05-TBR Rhino
• Assignee: Yi Liu
• Reporter: Yi Liu
• Created: 06/Aug/13 03:26
• Updated: 12/May/16 18:26

Description

We need to define common token attributes and APIs for TokenAuth framework which makes the arbitrary token format can be adopted into the framework.
This JIRA is a sub-task of TokenAuth framework. Common token properties, APIs and facilities that identity/access token requires will be defined. In this JIRA, we'll:
• Define Token generation API, includes Token serialization/deserialization, Token encryption/sign and Token revoke/expire/renew.
• Define Token validation API, includes Token decryption/verify and Token check(timestamp, audience, etc)
• Define Token Attribute API, includes attributes setting, query and so on.
• Define required attributes and optional attributes for identity token and access token.
• Implement Token Utilities, such as print/debug.

Issue Links

• Is contained by: HADOOP-9796 Pluggable TokenAuth framework and core facilities