[3.0] Gh 0035 Oozie authentication module

[angeloh]

GH-35 Oozie authentication module

[angeloh]

Andreas,

1. The token is not required to be there. It can be null.
2. It will pick only one provider and do the authenticate(). If it fails, return exception. A server could contain many providers and client's connection might hang if continue to try rest of providers.
3. Yes, providers are created statically. The configuration can be defined in oozie-site.xml and read it within the provider. For example, you can put one configuration 'oozie.auth.a.xxx' in oozie-site.xml, when this provider is instantiated by AuthenticationProviderFactory, the value can be read from the argument 'Configuration'.

[angeloh]

Hi Tucu,

Comments for your questions:

1. OozieAuthFilter is getting the value by calling HttpServletResponseWrapper.getUserPrincipal(). I am not sure if I answer your question correctly?
2. wiki is created here. https://github.com/yahoo/oozie/wiki/Oozie-Authentication-Specification
   Also, it is in Oozie docs too.

3&4 are addressed in last two commits. Client code too.