[HBASE-12579] Move obtainAuthTokenForJob() methods out of User

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Component/s: security
• Assignee: Unassigned
• Reporter: Gary Helmling
• Created: 25/Nov/14 23:01
• Updated: 17/Jun/22 18:23
• Resolved: 20/Mar/17 17:57

Description

The User class currently contains some utility methods to obtain HBase authentication tokens for the given user. However, these methods initiate an RPC to the TokenProvider coprocessor endpoint, an action which should not be part of the User class' responsibilities.

This leads to a couple of problems:

1. The way the methods are currently structured, it is impossible to integrate them with normal connection management for the cluster (the TokenUtil class constructs its own HTable instance internally).
2. The User class is logically part of the hbase-common module, but uses the TokenUtil class (part of hbase-server, though it should probably be moved to hbase-client) through reflection, leading to a hidden dependency.

The obtainAuthTokenForJob() methods should be deprecated and the process of obtaining authentication tokens should be moved to use the normal connection lifecycle.

Issue Links

• duplicates: HBASE-12493 User class should provide a way to re-use existing token
• is related to: HBASE-12493 User class should provide a way to re-use existing token