[
https://issues.apache.org/jira/browse/HADOOP-10417?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Tsz Wo Nicholas Sze updated HADOOP-10417:
-----------------------------------------
Component/s: security
> There is no token for anonymous authentication
> ----------------------------------------------
>
> Key: HADOOP-10417
> URL: https://issues.apache.org/jira/browse/HADOOP-10417
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Reporter: Tsz Wo Nicholas Sze
>
> According to [~tucu00], if ANONYMOUS is enabled, then there is a token
> (cookie) and the response is 200. However, it never sets cookie when the
> token is ANONYMOUS in the code below.
> {code}
> //AuthenticationFilter.doFilter(..)
> if (newToken && !token.isExpired() && token !=
> AuthenticationToken.ANONYMOUS) {
> String signedToken = signer.sign(token.toString());
> createAuthCookie(httpResponse, signedToken, getCookieDomain(),
> getCookiePath(), token.getExpires(), isHttps);
> }
> {code}
--
This message was sent by Atlassian JIRA
(v6.2#6252)
