[KNOX-2150] Unable to submit Hive jobs using Knox JWTProvider

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Component/s: KnoxSSO
• Assignee: Unassigned
• Reporter: Neeraj Verma
• Created: 18/Dec/19 01:53
• Updated: 30/Jun/20 18:17
• Resolved: 30/Jun/20 18:17

Description

While trying to submit Hive Job over JDBC with JWTProvider  ,  I faced 2 issues

1. Space not supported between "Bearer ey.."
2. if we remove space then http Authorization header is overwritten by default Basic token .

 

beeline -u "jdbc:hive2://localhost:8443/;ssl=true;AllowSelfSignedCerts=1;AllowAllHostNames=1;sslTrustStore=/Users/abc/knox/install/knox-1.3.0/data/security/keystores/gateway.jks;;AuthMech=0;trustStorePassword=knox;transportMode=http;httpPath=gateway/tokenbased/hive;http.header.Authorization=Bearer eyJraWQiOiJp...df"

 

 

Issue Links

• relates to: HIVE-22655 Unable to pass Bearer Token in http.header.Authorization in JDBC Header
• relates to: KNOX-2149 Knox JWTTokenProvider - JWT verification with OIDC provider by invoking JWKS verification url