org.apache.hadoop.security

Class AuthenticationWithProxyUserFilter

java.lang.Object

org.apache.hadoop.security.authentication.server.AuthenticationFilter

org.apache.hadoop.security.AuthenticationWithProxyUserFilter

All Implemented Interfaces:

javax.servlet.Filter

public class AuthenticationWithProxyUserFilter
extends org.apache.hadoop.security.authentication.server.AuthenticationFilter

Extend the function of AuthenticationFilter to support authorizing proxy user. If the query string contains doAs parameter, then check the proxy user, otherwise do the next filter.

Field Summary

Fields inherited from class org.apache.hadoop.security.authentication.server.AuthenticationFilter

AUTH_TOKEN_VALIDITY, AUTH_TYPE, CONFIG_PREFIX, COOKIE_DOMAIN, COOKIE_PATH, SIGNATURE_SECRET, SIGNATURE_SECRET_FILE, SIGNER_SECRET_PROVIDER, SIGNER_SECRET_PROVIDER_ATTRIBUTE

Constructor Summary

Constructors

Constructor and Description
AuthenticationWithProxyUserFilter()

Method Summary

Modifier and Type	Method and Description
protected void	doFilter(javax.servlet.FilterChain filterChain, javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) This method provide the ability to do pre/post tasks in filter chain.
static String	getDoAs(javax.servlet.http.HttpServletRequest request) Get proxy user from query string.

Methods inherited from class org.apache.hadoop.security.authentication.server.AuthenticationFilter

constructSecretProvider, createAuthCookie, destroy, doFilter, getAuthenticationHandler, getConfiguration, getConfiguration, getCookieDomain, getCookiePath, getRequestURL, getToken, getValidity, init, initializeAuthHandler, initializeSecretProvider, isCustomSignerSecretProvider, isRandomSecret

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthenticationWithProxyUserFilter

public AuthenticationWithProxyUserFilter()

Method Detail

doFilter

protected void doFilter(javax.servlet.FilterChain filterChain,
                        javax.servlet.http.HttpServletRequest request,
                        javax.servlet.http.HttpServletResponse response)
                 throws IOException,
                        javax.servlet.ServletException

This method provide the ability to do pre/post tasks in filter chain. Override this method to authorize proxy user between AuthenticationFilter and next filter.

Overrides:

doFilter in class org.apache.hadoop.security.authentication.server.AuthenticationFilter

Parameters:

filterChain - the filter chain object.

request - the request object.

response - the response object.

Throws:

IOException

javax.servlet.ServletException

getDoAs

public static String getDoAs(javax.servlet.http.HttpServletRequest request)

Get proxy user from query string.

Parameters:

request - the request object

Returns:

proxy user