Return-Path: X-Original-To: apmail-hadoop-common-issues-archive@minotaur.apache.org Delivered-To: apmail-hadoop-common-issues-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 13A3210A23 for ; Thu, 1 Aug 2013 01:12:50 +0000 (UTC) Received: (qmail 46787 invoked by uid 500); 1 Aug 2013 01:12:47 -0000 Delivered-To: apmail-hadoop-common-issues-archive@hadoop.apache.org Received: (qmail 46750 invoked by uid 500); 1 Aug 2013 01:12:47 -0000 Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: common-issues@hadoop.apache.org Delivered-To: mailing list common-issues@hadoop.apache.org Received: (qmail 46684 invoked by uid 99); 1 Aug 2013 01:12:47 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Aug 2013 01:12:47 +0000 Date: Thu, 1 Aug 2013 01:12:47 +0000 (UTC) From: "Kai Zheng (JIRA)" To: common-issues@hadoop.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Assigned] (HADOOP-9808) Web SSO support for TokenAuth MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HADOOP-9808?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng reassigned HADOOP-9808: --------------------------------- Assignee: Kai Zheng > Web SSO support for TokenAuth > ----------------------------- > > Key: HADOOP-9808 > URL: https://issues.apache.org/jira/browse/HADOOP-9808 > Project: Hadoop Common > Issue Type: Sub-task > Components: security > Reporter: Kai Zheng > Assignee: Kai Zheng > Labels: TokenAuth > Fix For: 3.0.0 > > > This is to support web browser SSO for Hadoop web interfaces, with the following scope: > > * Define web SSO flow. Based on the flow illustrated in TokenAuth design doc, this web SSO flow would be defined involving related parties including Authentication Service, Identity Token Service, Access Token Service and Hadoop web interface. > * Define token authn filter/handler API that frontends Hadoop web interface and interacts with related services in TokenAuth to do authentication and token exchange. > * Define and implement basic facilities to allow plugin of token authn filter/handler implementations. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira