Uploaded image for project: 'Apache Knox'
  1. Apache Knox
  2. KNOX-2556

Enhance JWTProvider to accept knox.id as Passcode Token

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.6.0
    • Fix Version/s: 1.6.0
    • Component/s: Server
    • Labels:
      None

      Description

      This enhancement enables the use of the previously internal knox.id as a Passcode Token for accessing proxied resources as an Authorization Bearer token or HTTP Basic password. This id has been used to bind incoming KnoxTokens (JWT) that embed such an id to the metadata in the Token State Server in order to provide server side state management.

      The motivation for this is the fact that certain 3rd party BI tooling such as tableau not only have the inability to set a bearer token but also have size limitations on the password field used to collect the username and password credentials.

      We will need to enhance the current JWTProvider to not require an actual JWT but the Passcode Token will represent the same backend metadata.

      This does mean that Passcode Tokens can only be used with the Token State Server functionality enabled for both the KnoxToken service and the JWTProvider federation provider.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                pzampino Philip Zampino
                Reporter:
                lmccay Larry McCay
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 3.5h
                  3.5h