Uploaded image for project: 'Apache Knox'
  1. Apache Knox
  2. KNOX-2383

Knox token is expired upon immediate token request after creation

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 1.5.0
    • Fix Version/s: 1.5.0
    • Component/s: Server
    • Labels:

      Description

      Steps to reproduce

      1. have a topology with JWT federation provider (let's call it tokenbased) and add a valid HDFS UI service in there (the service itself does not really matter, it's just the fastest way in my environment to reproduce the issue). It's important that you make sure knox.token.exp.server-managed is set to true for the JWT federation provider.
      2. get a Knox delegation token using the KNOXTOKEN service. It's important that you make sure knox.token.exp.server-managed is set to true for the KNOXTOKEN service.
      3. right after the previous call, try to hit the HDFS UI via the previously created tokenbased topology

      Current results

      The last action fails as the JWT provider receives the following error:

      HTTP ERROR 400 Bad request: token has expired 

      Expected results

      HDFS UI should have been displayed w/o any issue.

        Attachments

          Activity

            People

            • Assignee:
              smolnar Sandor Molnar
              Reporter:
              smolnar Sandor Molnar

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 40m
                40m

                  Issue deployment