Jason Fehr has uploaded a new patch set (#25) to the change originally created
by gaurav singh. ( http://gerrit.cloudera.org:8080/22424 )
Change subject: IMPALA-13675: OAuth AuthN Support for Impala Shell
......................................................................
IMPALA-13675: OAuth AuthN Support for Impala Shell
This patch adds support to fetch access tokens
from the OAuth Server using the OAuth client_id and
client_secret if the access token is not provided.
It covers the flow: client_credentials.
The client_secret can either be passed as a file or
be prompted to enter.
Added a test param for impala shell oauth_mock_response_cmd
to mock oauth server response only to be used for testing.
Also suppressed existing option hs2_x_forward from the
impala --help output.
Testing(okta oauth server):
- Added custom_cluster tests in test_shell_jwt_auth.py:
test_oauth_auth_with_clientid_and_secret_success
test_oauth_auth_with_clientid_and_secret_failure
- Tested manually by providing --oauth_client_id <client_id>
and --oauth_client_secret_cmd="cat password_file.txt"
- Tested manually by providing --oauth_client_id <client_id>
and no --oauth_client_secret_cmd, thereby prompting the
user to enter the client_secret.
Change-Id: I84e26d54f6a53696660728efb239ffd43de4c55d
---
M bin/rat_exclude_files.txt
M shell/impala_shell.py
M shell/option_parser.py
A testdata/jwt/oauth_client_secret
A testdata/jwt/okta_oauth_payload_invalid
A testdata/jwt/okta_oauth_payload_valid
M tests/custom_cluster/test_shell_jwt_auth.py
7 files changed, 180 insertions(+), 7 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/24/22424/25
--
To view, visit http://gerrit.cloudera.org:8080/22424
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I84e26d54f6a53696660728efb239ffd43de4c55d
Gerrit-Change-Number: 22424
Gerrit-PatchSet: 25
Gerrit-Owner: gaurav singh <gsi...@cloudera.com>
Gerrit-Reviewer: Abhishek Rawat <ara...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <impala-public-jenk...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: gaurav singh <gsi...@cloudera.com>
