[KNOX-2800] Knox tokens created for impersonated user doesn't honor configured per user limit value

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3.0
• Fix Version/s: 2.0.0
• Assignee: Sandor Molnar
• Reporter: J.Andreina
• Created: 06/Sep/22 11:19
• Updated: 08/Sep/22 07:25
• Resolved: 08/Sep/22 07:25

Description

Steps
1. Set below configurations
gateway.knox.token.limit.per.user = 5
gateway.knox.token.user.limit.exceeded.action = REMOVE_OLDEST
knox.token.proxyuser.hrt_qa.users=hrt_1
knox.token.proxyuser.hrt_qa.hosts=*
2. Login to token generation page as hrt_qa user
3. Fetch 10 token with impersonation field set to "hrt_1"

Expected Result:

hrt_qa should be allowed to create only 5 tokens with impersonated user set to hrt_1

Issue:

Tokens created for impersonated user doesnt honor configured per user limit value

ie. hrt_qa user is able to create any number of tokens as hrt_1

Issue Links

• links to: GitHub Pull Request #631