{"action":"created","issue":{"url":"https://api.github.com/repos/apache/incubator-pulsar/issues/1169","repository_url":"https://api.github.com/repos/apache/incubator-pulsar","labels_url":"https://api.github.com/repos/apache/incubator-pulsar/issues/1169/labels{/name}","comments_url":"https://api.github.com/repos/apache/incubator-pulsar/issues/1169/comments","events_url":"https://api.github.com/repos/apache/incubator-pulsar/issues/1169/events","html_url":"https://github.com/apache/incubator-pulsar/pull/1169","id":294057070,"number":1169,"title":"Proxy forward auth data","user":{"login":"jai1","id":8659452,"avatar_url":"https://avatars1.githubusercontent.com/u/8659452?v=4","gravatar_id":"","url":"https://api.github.com/users/jai1","html_url":"https://github.com/jai1","followers_url":"https://api.github.com/users/jai1/followers","following_url":"https://api.github.com/users/jai1/following{/other_user}","gists_url":"https://api.github.com/users/jai1/gists{/gist_id}","starred_url":"https://api.github.com/users/jai1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jai1/subscriptions","organizations_url":"https://api.github.com/users/jai1/orgs","repos_url":"https://api.github.com/users/jai1/repos","events_url":"https://api.github.com/users/jai1/events{/privacy}","received_events_url":"https://api.github.com/users/jai1/received_events","type":"User","site_admin":false},"labels":[{"id":399568951,"url":"https://api.github.com/repos/apache/incubator-pulsar/labels/type/enhancement","name":"type/enhancement","color":"84b6eb","default":false}],"state":"open","locked":false,"assignee":{"login":"jai1","id":8659452,"avatar_url":"https://avatars1.githubusercontent.com/u/8659452?v=4","gravatar_id":"","url":"https://api.github.com/users/jai1","html_url":"https://github.com/jai1","followers_url":"https://api.github.com/users/jai1/followers","following_url":"https://api.github.com/users/jai1/following{/other_user}","gists_url":"https://api.github.com/users/jai1/gists{/gist_id}","starred_url":"https://api.github.com/users/jai1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jai1/subscriptions","organizations_url":"https://api.github.com/users/jai1/orgs","repos_url":"https://api.github.com/users/jai1/repos","events_url":"https://api.github.com/users/jai1/events{/privacy}","received_events_url":"https://api.github.com/users/jai1/received_events","type":"User","site_admin":false},"assignees":[{"login":"jai1","id":8659452,"avatar_url":"https://avatars1.githubusercontent.com/u/8659452?v=4","gravatar_id":"","url":"https://api.github.com/users/jai1","html_url":"https://github.com/jai1","followers_url":"https://api.github.com/users/jai1/followers","following_url":"https://api.github.com/users/jai1/following{/other_user}","gists_url":"https://api.github.com/users/jai1/gists{/gist_id}","starred_url":"https://api.github.com/users/jai1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jai1/subscriptions","organizations_url":"https://api.github.com/users/jai1/orgs","repos_url":"https://api.github.com/users/jai1/repos","events_url":"https://api.github.com/users/jai1/events{/privacy}","received_events_url":"https://api.github.com/users/jai1/received_events","type":"User","site_admin":false}],"milestone":null,"comments":0,"created_at":"2018-02-02T23:43:53Z","updated_at":"2018-02-06T04:02:35Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/apache/incubator-pulsar/pulls/1169","html_url":"https://github.com/apache/incubator-pulsar/pull/1169","diff_url":"https://github.com/apache/incubator-pulsar/pull/1169.diff","patch_url":"https://github.com/apache/incubator-pulsar/pull/1169.patch"},"body":"======\r\n\r\nCurrently the proxy extracts and forwards the client Principal to the broker. Client Principal is a modifiable string i.e can be changed or manufactured by the Proxy.\r\n\r\nWhat we want to do instead is to send the clientAuthData to the broker - which is in most cases digitally signed. The broker will extract the client principal from the clientAuthData and reauthenticate the client.\r\n\r\nIn order to enforce this behavior we have introduced two new flags:-\r\n- authenticateOriginalAuthData on the broker \r\n- forwardClientAuthData on the Proxy\r\n\r\n======\r\n\r\n@msb-at-yahoo "},"comment":{"url":"https://api.github.com/repos/apache/incubator-pulsar/issues/comments/363304239","html_url":"https://github.com/apache/incubator-pulsar/pull/1169#issuecomment-363304239","issue_url":"https://api.github.com/repos/apache/incubator-pulsar/issues/1169","id":363304239,"user":{"login":"jai1","id":8659452,"avatar_url":"https://avatars1.githubusercontent.com/u/8659452?v=4","gravatar_id":"","url":"https://api.github.com/users/jai1","html_url":"https://github.com/jai1","followers_url":"https://api.github.com/users/jai1/followers","following_url":"https://api.github.com/users/jai1/following{/other_user}","gists_url":"https://api.github.com/users/jai1/gists{/gist_id}","starred_url":"https://api.github.com/users/jai1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jai1/subscriptions","organizations_url":"https://api.github.com/users/jai1/orgs","repos_url":"https://api.github.com/users/jai1/repos","events_url":"https://api.github.com/users/jai1/events{/privacy}","received_events_url":"https://api.github.com/users/jai1/received_events","type":"User","site_admin":false},"created_at":"2018-02-06T04:02:35Z","updated_at":"2018-02-06T04:02:35Z","author_association":"CONTRIBUTOR","body":"@saandrews - have addressed your comments \r\n@rdhabalia @merlimat - Please review this PR when you find time\r\n"}}
{"actor":{"display_login":"jai1"}}