Michael Smith has submitted this change and it was merged. ( 
http://gerrit.cloudera.org:8080/24767 )

Change subject: IMPALA-15216: Fix bearer token signature check in SAML auth
......................................................................

IMPALA-15216: Fix bearer token signature check in SAML auth

This fix is done downstream first to avoid early public
exposure.

Testing:
- added test to check that modified bearer tokens are rejected
- added test to check that repeated bearer tokens are rejected
  (this already worked before the patch)

Change-Id: I9d5f2bc9036a2de0f7efbc9e13cb5eb9c123d7fd
Reviewed-on: http://gerrit.cloudera.org:8080/24767
Reviewed-by: Joe McDonnell <[email protected]>
Tested-by: Michael Smith <[email protected]>
---
M 
fe/src/main/java/org/apache/impala/authentication/saml/HiveSamlAuthTokenGenerator.java
M tests/custom_cluster/test_saml2_sso.py
2 files changed, 45 insertions(+), 21 deletions(-)

Approvals:
  Joe McDonnell: Looks good to me, approved
  Michael Smith: Verified

--
To view, visit http://gerrit.cloudera.org:8080/24767
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: branch-4.5.2
Gerrit-MessageType: merged
Gerrit-Change-Id: I9d5f2bc9036a2de0f7efbc9e13cb5eb9c123d7fd
Gerrit-Change-Number: 24767
Gerrit-PatchSet: 2
Gerrit-Owner: Michael Smith <[email protected]>
Gerrit-Reviewer: Csaba Ringhofer <[email protected]>
Gerrit-Reviewer: Impala Public Jenkins <[email protected]>
Gerrit-Reviewer: Joe McDonnell <[email protected]>
Gerrit-Reviewer: Michael Smith <[email protected]>
Gerrit-Reviewer: Steve Carlin <[email protected]>

Reply via email to