io.druid.server.security

Interface Escalator

All Known Implementing Classes:

BasicHTTPEscalator, KerberosEscalator, NoopEscalator

public interface Escalator

This interface provides methods needed for escalating internal system requests with priveleged authentication credentials. Each Escalator is associated with a specific authentication scheme, like Authenticators.

Method Summary

Modifier and Type	Method and Description
AuthenticationResult	createEscalatedAuthenticationResult()
HttpClient	createEscalatedClient(HttpClient baseClient) Return a client that sends requests with the format/information necessary to authenticate successfully against this Escalator's authentication scheme using the identity of the internal system user.

Method Detail

createEscalatedClient

HttpClient createEscalatedClient(HttpClient baseClient)

Return a client that sends requests with the format/information necessary to authenticate successfully against this Escalator's authentication scheme using the identity of the internal system user.

This HTTP client is used for internal communications between Druid nodes, such as when a broker communicates with a historical node during query processing.

Parameters:

baseClient - Base HTTP client for internal Druid communications

Returns:

metamx HttpClient that sends requests with the credentials of the internal system user

createEscalatedAuthenticationResult

AuthenticationResult createEscalatedAuthenticationResult()

Returns:

an AuthenticationResult representing the identity of the internal system user.