[IMPALA-8898] Delete cookies on 401

• Type: Improvement
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: Impala 3.4.0
• Fix Version/s: Impala 3.4.0
• Component/s: Clients
• Epic Color: ghx-label-12
• Assignee: Thomas Tauber-Marshall
• Reporter: Thomas Tauber-Marshall
• Created: 28/Aug/19 00:30
• Updated: 09/Oct/19 00:28
• Resolved: 09/Oct/19 00:28

Description

IMPALA-8584 added support for cookie based authentication over the hs2 http server. When we return a 401 from there, we should also delete the cookie by returning a cookie with an empty value and an expiration time in the past.

This helps ensure clients don't attempt to authenticate with the same invalid cookie multiple times.