Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
PlantUML
border1
titleREST SSO Flow (LDAP)
hide footbox
autonumber

participant "Client" as cli
participant "Knox\nTS/SSO" as sso
participant "LDAP" as idp
participant "Knox\nGW" as gw
participant "Hadoop\n(eg NN)" as svc
 
activate cli

cli -> sso: /authenticate.POST(username,password)
  activate sso 
  sso -> idp: authenticate(username,password)
  sso -> idp: lookupGroups():groups
  cli <-- sso: jwt-bearer-token[username,groups]
  deactivate sso
 
cli -> gw: /cluster/service.GET(jwt-bearer-token)
  activate gw
  gw -> svc: /service.GET(username)
  gw <-- svc: results
  cli <-- gw: results
  deactivate gw
deactivate cli