[MESOS-3231] Implement http::AuthenticatorManager and http::Authenticator

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Component/s: security
• Labels: mesosphere security
• Epic Link: HTTP based Authentication
• Assignee: Alexander Rojas
• Reporter: Alexander Rojas
• Shepherd: Bernd Mathiske
• Created: 07/Aug/15 12:46
• Updated: 29/Apr/19 09:27
• Resolved: 26/Nov/18 12:22

Description

As proposed in the document Mesos HTTP Authentication Design, a process::http::AuthenticatorManager and process::http::Authenticator are needed.

The process::http::AuthenticatorManager takes care of the logic which is common for all authenticators, while the process::http::Authenticator implements specific authentication schemes (for more details, please head to the design doc).

Tests will be needed too.

Issue Links

• blocks: MESOS-3232 Implement HTTP Basic Authentication for Mesos endpoints
• blocks: MESOS-3233 Allow developers to decide whether a HTTP endpoint should use authentication
• blocks: MESOS-4149 Clean up authentication implementation for quota
• is blocked by: MESOS-3705 HTTP Pipelining doesn't keep order of requests