[IMPALA-10876] Support to download JWKS from a given URL

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Impala 4.1.0
• Epic Link: Impala JWT Support
• Epic Color: ghx-label-2
• Assignee: Wenzhe Zhou
• Reporter: Wenzhe Zhou
• Created: 20/Aug/21 19:03
• Updated: 11/Oct/22 18:49
• Resolved: 28/Sep/21 04:59

Description

In IMPALA-10489, we added JWT support for Impala. The implementation assume the JWKS for JWT verification are provided as a local json file, which is specified with starting flag. In some deployment scenarios, JWKS for JWT verification are provided as URL, for example, URL for a Knox endpoint. In such case, Impala should be able to download the JWKS from the given URL. 

libcurl was added to Impala native toolchain so that we could call libcurl's API to download JWKS from the given URL.