[HIVE-25575] Add support for JWT authentication in HTTP mode

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.0.0
• Component/s: HiveServer2, JDBC
• Labels: pull-request-available
• Target Version/s: 4.0.0
• Assignee: Yu-Wen Lai
• Reporter: Shubham Chaurasia
• Created: 29/Sep/21 11:54
• Updated: 25/Mar/22 06:16
• Resolved: 24/Mar/22 17:40

Description

It would be good to support JWT auth mechanism in hive. In order to implement it, we would need the following -

On HS2 side -
1. Accept JWT in Authorization: Bearer header.
2. Fetch JWKS from a public endpoint to verify JWT signature, to start with we can fetch on HS2 start up.
3. Verify JWT Signature.

On JDBC Client side -
1. Hive jdbc client should be able to accept jwt in JDBC url. (will add more details)
2. Client should also be able to pick up JWT from an env var if it's defined.

Issue Links

• links to: GitHub Pull Request #3006