From dev-return-32123-archive-asf-public=cust-asf.ponee.io@geode.apache.org Fri Oct 4 17:59:05 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id B71E9180651 for ; Fri, 4 Oct 2019 19:59:04 +0200 (CEST) Received: (qmail 22273 invoked by uid 500); 4 Oct 2019 17:59:03 -0000 Mailing-List: contact dev-help@geode.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@geode.apache.org Delivered-To: mailing list dev@geode.apache.org Received: (qmail 22001 invoked by uid 99); 4 Oct 2019 17:59:02 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 04 Oct 2019 17:59:02 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id 343C51A4282 for ; Fri, 4 Oct 2019 17:59:02 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.3 X-Spam-Level: * X-Spam-Status: No, score=1.3 tagged_above=-999 required=6.31 tests=[HTML_MESSAGE=2, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=disabled Received: from mx1-he-de.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id rf7pW4MKfNHI for ; Fri, 4 Oct 2019 17:58:59 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=148.163.153.148; helo=mx0b-00296801.pphosted.com; envelope-from=jiliao@pivotal.io; receiver= Received: from mx0b-00296801.pphosted.com (mx0b-00296801.pphosted.com [148.163.153.148]) by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 79EF07DE1B for ; Fri, 4 Oct 2019 17:58:58 +0000 (UTC) Received: from pps.filterd (m0114585.ppops.net [127.0.0.1]) by mx0b-00296801.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id x94Hoof5007396 for ; Fri, 4 Oct 2019 17:58:57 GMT Received: from mail-qk1-f199.google.com (mail-qk1-f199.google.com [209.85.222.199]) by mx0b-00296801.pphosted.com with ESMTP id 2v9yp8yjj5-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT) for ; Fri, 04 Oct 2019 17:58:57 +0000 Received: by mail-qk1-f199.google.com with SMTP id h4so7038173qkd.18 for ; Fri, 04 Oct 2019 10:58:57 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=wFmiGtJRZFateZWOWxdDcv0GzWY52jPWoP2pN7J6ieQ=; b=V5TmSi3THq9bvsFKsqBhW7u13MK1JbM1IGKffKRJjUn35JCzuII7p9agAfsg3cEF6A w/7EC7pMbNObjzEESA/+vz8n/UuSyKbNJiP2JhcyrinblwAEWZyWcImb4SPhJdo7u3Q7 DeoR0aJvrXPwMmuZfOyLqriuw3Y7uq6rwRtw1UK/aI9DSqIuasgtEpU+tJhh2iGS7kQ2 0nRIm92LyaedbwEu9ZDGipmzhBjmU818Lx3qe6jhbfxAqdtU07mD1gYzYUu+DBh3rTcq KDU9FzgrW854u8K1QcWB77Kq68gCuu0ua28jfeHcB0V3ugmXB4FSuMvpPUKbjBPVTvZm 91LA== X-Gm-Message-State: APjAAAValtbZ5uqJ1y8xIj4vhiDtJZDtc6GpiEdO6TLKaYvFNoxMOU0B vELKRsU1eGFfp8MuFHjGPQoxLW+G5omdPpFCK/1TS0/Z43ToQ1ThxwcZYg7CSkJHxekN+RTE9ha osfia8RledtIAKAsSU4oC4olky60a8Z3SjNQqkFSv1hBLQHlpL3X4PG0= X-Received: by 2002:a37:4e55:: with SMTP id c82mr11513163qkb.437.1570211936627; Fri, 04 Oct 2019 10:58:56 -0700 (PDT) X-Google-Smtp-Source: APXvYqymZ5piehnNaaT2MEeMZzYScMlpqqVOEQ0eGnj4gvGBZFjxyxR/zMcYEEIwEOcg434K6qBTYWq7ilKVjWO9dgk= X-Received: by 2002:a37:4e55:: with SMTP id c82mr11513136qkb.437.1570211936345; Fri, 04 Oct 2019 10:58:56 -0700 (PDT) MIME-Version: 1.0 From: Jinmei Liao Date: Fri, 4 Oct 2019 10:58:45 -0700 Message-ID: Subject: Token based authentication support added in Geode Develop To: geode Cc: Pulkit Chandra , David Jahn Content-Type: multipart/alternative; boundary="000000000000b037760594197489" X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,1.0.8 definitions=2019-10-04_10:2019-10-03,2019-10-04 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 lowpriorityscore=0 phishscore=0 adultscore=0 clxscore=1015 mlxlogscore=953 bulkscore=0 priorityscore=1501 malwarescore=0 spamscore=0 impostorscore=0 suspectscore=1 mlxscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1908290000 definitions=main-1910040149 --000000000000b037760594197489 Content-Type: text/plain; charset="UTF-8" Hi, all JWT token based authentication support is added to Geode develop branch. Currently only management v2 rest api can use this (we can add dev rest there too if requested). In order to turn on token based auth for management rest api, you will need to do these two things: 1. start your locator with this property: *security-auth-token-enabled-components = all (or management)* 2. implement your SecurityManager to authenticate the jwt token passed in. The jwt token will be available in the properties using the key "security-token". Let me know if you have any questions. -- Cheers Jinmei --000000000000b037760594197489--