[
https://issues.apache.org/jira/browse/KNOX-3347?focusedWorklogId=1025008&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1025008
]
ASF GitHub Bot logged work on KNOX-3347:
----------------------------------------
Author: ASF GitHub Bot
Created on: 12/Jun/26 22:12
Start Date: 12/Jun/26 22:12
Worklog Time Spent: 10m
Work Description: github-actions[bot] commented on PR #1262:
URL: https://github.com/apache/knox/pull/1262#issuecomment-4695845679
## Test Results
22 tests 22 ✅ 1s ⏱️
1 suites 0 💤
1 files 0 ❌
Results for commit 436a1026.
[test-results]:data:application/gzip;base64,H4sIAGSELGoC/12Myw6CMBBFf4V07aIUOmH8GVP6SCYCNX2sjP9uQazg7p5zk/NkjiYb2bVpLw2LmVIFk4NK5Jcdy5HWS4gv3GLW+s/c6VEMr8Ipmk7ChuDDbkJeanHdp+BH/HobH3IbH2vazzOlAqzvQLVcgATLB+y4cTCiQY4AHQ4WR6lQcdmz1xvY+29p/wAAAA==
Issue Time Tracking
-------------------
Worklog Id: (was: 1025008)
Time Spent: 20m (was: 10m)
> Introduce TokenExchangePrincipal for extending Act claim for token_exchange
> ---------------------------------------------------------------------------
>
> Key: KNOX-3347
> URL: https://issues.apache.org/jira/browse/KNOX-3347
> Project: Apache Knox
> Issue Type: Improvement
> Components: JWT
> Reporter: Larry McCay
> Priority: Major
> Fix For: 3.0.0
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> Currently, the ActorChainPrincipal includes whatever act chain was in the
> Subject token from the token_exchange. The presence of the
> ImpersonatedPrincipal is currently only added by the identity assertion
> provider based on a doAs and proxyuser based impersonation. This is required
> for the new actor to be added to the nested 'act' claim.
> Let's add not the use of the TokenExchangePrincipal to the identity assertion
> logic that sets the ImpersonatedPrincipal in addition to the doAs pattern.
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
