[ 
https://issues.apache.org/jira/browse/NIFI-1497?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15154598#comment-15154598
 ] 

ASF subversion and git services commented on NIFI-1497:
-------------------------------------------------------

Commit a7195b5fe9f4db7e688761297e47b0cc7612ee3e in nifi's branch 
refs/heads/support/nifi-0.5.x from [~mcgilman]
[ https://git-wip-us.apache.org/repos/asf?p=nifi.git;h=a7195b5 ]

NIFI-1497: - Introducing a one time use password service for use in query 
parameters when accessing UI extensions and downloading resources. - Using one 
time use tokens when accessing ui extensions and downloading resources. - 
Ensuring appropriate roles when accessing component details through the web 
context for custom UIs. - Addressing typo in class name. - Ensuring appropriate 
roles when accessing content through the content access. - Code clean up. - 
Refactoring some basic scripts for accessing JWT tokens so UI extensions can 
reuse common functionality.

Signed-off-by: Bryan Bende <bbe...@apache.org>


> Access token not included in all requests
> -----------------------------------------
>
>                 Key: NIFI-1497
>                 URL: https://issues.apache.org/jira/browse/NIFI-1497
>             Project: Apache NiFi
>          Issue Type: Bug
>          Components: Core UI
>            Reporter: Matt Gilman
>            Assignee: Matt Gilman
>             Fix For: 0.5.1
>
>         Attachments: 0001-NIFI-1497.patch
>
>
> Some requests do not have the access token included with them (specifically 
> custom UIs and view content). Without the access token, the request will fail 
> with Access Denied.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to