org.apache.hadoop.hive.metastore.auth.jwt

Class JWTValidator

java.lang.Object

org.apache.hadoop.hive.metastore.auth.jwt.JWTValidator

public class JWTValidator
extends Object

This class is used to validate JWT. JWKS is fetched during instantiation and kept in the memory. We disallow JWT signature verification with symmetric key, because that means anyone can get the same key and use it to sign a JWT. This is cloned from JWTValidator in HS2 so as to NOT have any dependency on HS2 code.

Constructor Summary

Constructors

Constructor and Description
JWTValidator(org.apache.hadoop.conf.Configuration conf)

Method Summary

Modifier and Type	Method and Description
String	validateJWTAndExtractUser(String signedJwt)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JWTValidator

public JWTValidator(org.apache.hadoop.conf.Configuration conf)
             throws IOException,
                    ParseException

Throws:

IOException

ParseException

Method Detail

validateJWTAndExtractUser

public String validateJWTAndExtractUser(String signedJwt)
                                 throws ParseException,
                                        AuthenticationException

Throws:

ParseException

AuthenticationException