[HIVE-20555] HiveServer2: Preauthenticated subject for http transport is not retained for entire duration of http communication in some cases

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.3.2, 3.1.0
• Fix Version/s: 3.1.2, 3.2.0, 4.0.0-alpha-1
• Component/s: HiveServer2
• Hadoop Flags: Reviewed
• Assignee: Vaibhav Gumashta
• Reporter: Vaibhav Gumashta
• Created: 13/Sep/18 21:46
• Updated: 21/Oct/22 06:59
• Resolved: 21/Sep/18 23:35

Description

As implemented in HIVE-8705, for http transport, we add the logged in subject's credentials in the http header via a request interceptor. The request interceptor doesn't seem to be getting used for some http traffic (e.g. knox ssl in the same rpc). It would also be better to cache the logged in subject for the duration of the whole session.