[
https://issues.apache.org/jira/browse/NIFI-8363?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17319445#comment-17319445
]
ASF subversion and git services commented on NIFI-8363:
-------------------------------------------------------
Commit 052c60dc53385828eb0015b165249ddece40c00d in nifi's branch
refs/heads/main from David Handermann
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=052c60d ]
NIFI-8363 Added Single User Login Identity Provider and Authorizer (#4968)
* NIFI-8363 Added Single User Login Identity Provider and Authorizer
- Reads and writes username and hashed password in login-identity-providers.xml
- Generates random username using java.util.UUID.randomUUID()
- Generates random password using java.security.SecureRandom with Base64
encoding
- Writes generated password hash using bcrypt
* NIFI-8363 Updated SingleUserAuthorizer to require
SingleUserLoginIdentityProvider
* NIFI-8363 Added handling of null login identity provider property
> Implement Default Single User LoginIdentityProvider
> ---------------------------------------------------
>
> Key: NIFI-8363
> URL: https://issues.apache.org/jira/browse/NIFI-8363
> Project: Apache NiFi
> Issue Type: Sub-task
> Components: Security
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Major
> Labels: authentication, security
> Time Spent: 2h 10m
> Remaining Estimate: 0h
>
> Supporting default authenticated access to NiFi requires implementing a new
> {{LoginIdentityProvider}} and related classes to generate and store a random
> default username and password.
> The provider implementation should have the following features:
> * Support one username and password account record
> * Use java.util.UUID to generate a username when no existing account is found
> * Use java.security.SecureRandom to generate a password when no existing
> account is found
> * Store the generated password using a secure hashing algorithm
> * Write the generated username and password to the log once after initial
> generation
> This provider is intended for initial configuration of a standalone NiFi
> system. Adjustment of default NiFi properties should be implemented
> separately following implementation of default HTTPS access.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
