[jira] [Created] (FLINK-11589) Introduce service provider pattern for user to dynamically load SecurityFactory classes

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Created] (FLINK-11589) Introduce service provider pattern for user to dynamically load SecurityFactory classes

Shang Yuanchun (Jira)
Rong Rong created FLINK-11589:
---------------------------------

             Summary: Introduce service provider pattern for user to dynamically load SecurityFactory classes
                 Key: FLINK-11589
                 URL: https://issues.apache.org/jira/browse/FLINK-11589
             Project: Flink
          Issue Type: Sub-task
          Components: Security
            Reporter: Rong Rong
            Assignee: Rong Rong


Currently there are only 3 security modules in Flink - Hadoop, Zookeeper and JaaS, all of which are pre-loaded to the Flink security runtime with one hard-coded path for instantiating SecurityContext, which is used invoke use code with PrivilegedExceptionAction.

We propose to introduce a [service provider pattern|https://docs.oracle.com/javase/tutorial/ext/basics/spi.html] to allow users to dynamically load {{SecurityModuleFactory}} or even introduce a new {{SecurityContextFactory}} so that all the security runtime context can be set by dynamically loading any 3rd party JAR. and discover them through property configurations.

This is especially useful in a corporate environment where proprietary security technologies are involved.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)