[HIVE-13418] HiveServer2 HTTP mode should support X-Forwarded-Host header for authorization/audits

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.1.0
• Component/s: Authorization, HiveServer2
• Labels: pull-request-available
• Assignee: Thejas Nair
• Reporter: Thejas Nair
• Created: 04/Apr/16 19:49
• Updated: 04/Jun/20 21:35
• Resolved: 01/Jun/16 21:34

Description

Apache Knox acts as a proxy for requests coming from the end users. In these cases, the IP address that HiveServer2 passes to the authorization/audit plugins via the HiveAuthzContext object only the IP address of the proxy, and not the end user.

For auditing purposes, the IP address of the end user and any proxies in between are useful.
HiveServer2 should pass the information from 'X-Forwarded-Host' header to the HiveAuthorizer plugins.

Issue Links

• is related to: RANGER-962 Ranger plugin should have an option to use X-Forwarded-For address
• links to: GitHub Pull Request #69