Skip to content

Commit f07cd23

Browse files
replace Optional<String> with boolean
1 parent 1325d3b commit f07cd23

File tree

3 files changed

+11
-10
lines changed

3 files changed

+11
-10
lines changed

x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authz/PreAuthorizationUtils.java

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,6 @@
2323

2424
import java.util.Arrays;
2525
import java.util.Map;
26-
import java.util.Optional;
2726
import java.util.Set;
2827

2928
public final class PreAuthorizationUtils {
@@ -120,15 +119,15 @@ private static boolean shouldPreAuthorizeChildActionOfParent(final String parent
120119
public static boolean shouldRemoveParentAuthorizationFromThreadContext(
121120
String childAction,
122121
SecurityContext securityContext,
123-
Optional<String> remoteClusterAlias
122+
boolean isRemoteClusterRequest
124123
) {
125124
final ParentActionAuthorization parentAuthorization = securityContext.getParentAuthorization();
126125
if (parentAuthorization == null) {
127126
// Nothing to remove.
128127
return false;
129128
}
130129

131-
if (remoteClusterAlias.isPresent()) {
130+
if (isRemoteClusterRequest) {
132131
// We never want to send the parent authorization header to remote clusters.
133132
return true;
134133
}

x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/transport/SecurityServerTransportInterceptor.java

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -146,7 +146,11 @@ public <T extends TransportResponse> void sendRequest(
146146
assertNoCrossClusterAccessHeadersInContext();
147147
final Optional<String> remoteClusterAlias = remoteClusterCredentialsResolver.apply(connection)
148148
.map(RemoteClusterAliasWithCredentials::clusterAlias);
149-
if (PreAuthorizationUtils.shouldRemoveParentAuthorizationFromThreadContext(action, securityContext, remoteClusterAlias)) {
149+
if (PreAuthorizationUtils.shouldRemoveParentAuthorizationFromThreadContext(
150+
action,
151+
securityContext,
152+
remoteClusterAlias.isPresent()
153+
)) {
150154
securityContext.executeAfterRemovingParentAuthorization(original -> {
151155
sendRequestInner(
152156
sender,

x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authz/PreAuthorizationUtilsTests.java

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -24,8 +24,6 @@
2424
import org.elasticsearch.xpack.core.security.user.User;
2525
import org.elasticsearch.xpack.security.authz.RBACEngine.RBACAuthorizationInfo;
2626

27-
import java.util.Optional;
28-
2927
import static org.elasticsearch.xpack.core.security.test.TestRestrictedIndices.RESTRICTED_INDICES;
3028
import static org.elasticsearch.xpack.security.authz.PreAuthorizationUtils.maybeSkipChildrenActionAuthorization;
3129
import static org.elasticsearch.xpack.security.authz.PreAuthorizationUtils.shouldRemoveParentAuthorizationFromThreadContext;
@@ -73,7 +71,7 @@ public void testShouldRemoveParentAuthorizationFromThreadContext() {
7371
shouldRemoveParentAuthorizationFromThreadContext(
7472
randomWhitelistedChildAction(parentAction),
7573
securityContextWithParentAuthorization,
76-
Optional.empty()
74+
false
7775
),
7876
equalTo(false)
7977
);
@@ -83,7 +81,7 @@ public void testShouldRemoveParentAuthorizationFromThreadContext() {
8381
shouldRemoveParentAuthorizationFromThreadContext(
8482
randomWhitelistedChildAction(parentAction),
8583
new SecurityContext(Settings.EMPTY, new ThreadContext(Settings.EMPTY)),
86-
Optional.ofNullable(randomBoolean() ? "my_remote_cluster" : null)
84+
randomBoolean()
8785
),
8886
equalTo(false)
8987
);
@@ -94,7 +92,7 @@ public void testShouldRemoveParentAuthorizationFromThreadContext() {
9492
shouldRemoveParentAuthorizationFromThreadContext(
9593
randomWhitelistedChildAction(parentAction),
9694
securityContextWithParentAuthorization,
97-
Optional.of("my_remote_cluster")
95+
true
9896
),
9997
equalTo(true)
10098
);
@@ -106,7 +104,7 @@ public void testShouldRemoveParentAuthorizationFromThreadContext() {
106104
shouldRemoveParentAuthorizationFromThreadContext(
107105
randomAlphaOfLengthBetween(3, 8),
108106
securityContextWithParentAuthorization,
109-
Optional.ofNullable(randomBoolean() ? "my_remote_cluster" : null)
107+
randomBoolean()
110108
),
111109
equalTo(true)
112110
);

0 commit comments

Comments
 (0)