org.apache.hadoop.hive.llap.security

Class DefaultJwtSharedSecretProvider

java.lang.Object

org.apache.hadoop.hive.llap.security.DefaultJwtSharedSecretProvider

All Implemented Interfaces:

JwtSecretProvider

public class DefaultJwtSharedSecretProvider
extends Object
implements JwtSecretProvider

Default implementation of JwtSecretProvider. 1. It first tries to get shared secret from conf HiveConf.ConfVars#LLAP_EXTERNAL_CLIENT_CLOUD_JWT_SHARED_SECRET using Configuration.getPassword(String). 2. If not found, it tries to read from env var LLAP_EXTERNAL_CLIENT_CLOUD_JWT_SHARED_SECRET_ENV_VAR. If secret is not found even after 1) and 2), init(Configuration) methods throws IllegalStateException. Length of shared secret provided in 1) or 2) should be > 32 bytes. It uses the same encryption and decryption secret which can be used to sign and verify JWT.

Field Summary

Fields

Modifier and Type	Field and Description
static String	LLAP_EXTERNAL_CLIENT_CLOUD_JWT_SHARED_SECRET_ENV_VAR

Constructor Summary

Constructors

Constructor and Description
DefaultJwtSharedSecretProvider()

Method Summary

Modifier and Type	Method and Description
Key	getDecryptionSecret() returns secret for parsing JWT.
Key	getEncryptionSecret() returns secret for signing JWT.
void	init(org.apache.hadoop.conf.Configuration conf) Initializes the provider.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.apache.hadoop.hive.llap.security.JwtSecretProvider

initAndGet

Field Detail

LLAP_EXTERNAL_CLIENT_CLOUD_JWT_SHARED_SECRET_ENV_VAR

public static final String LLAP_EXTERNAL_CLIENT_CLOUD_JWT_SHARED_SECRET_ENV_VAR

See Also:

Constant Field Values

Constructor Detail

DefaultJwtSharedSecretProvider

public DefaultJwtSharedSecretProvider()

Method Detail

getEncryptionSecret

public Key getEncryptionSecret()

Description copied from interface: JwtSecretProvider

returns secret for signing JWT.

Specified by:

getEncryptionSecret in interface JwtSecretProvider

getDecryptionSecret

public Key getDecryptionSecret()

Description copied from interface: JwtSecretProvider

returns secret for parsing JWT.

Specified by:

getDecryptionSecret in interface JwtSecretProvider

init

public void init(org.apache.hadoop.conf.Configuration conf)

Description copied from interface: JwtSecretProvider

Initializes the provider. Should also contain any validations that we want to put on secret, helps us to fail fast.

Specified by:

init in interface JwtSecretProvider

Parameters:

conf - configuration