Status

Current state: Under Discussion

Discussion thread: here (<- link to https://mail-archives.apache.org/mod_mbox/flink-dev/)

JIRA: here (<- link to https://issues.apache.org/jira/browse/FLINK-XXXX)

...

Please keep the discussion on the mailing list rather than commenting on the wiki (wiki discussions get unwieldy fast).

Table of Contents

Table of Contents
maxLevel 2

Motivation

Today, Flink relies entirely on network isolation to protect itself from unauthorized access.  Unfettered access to Flink allows:

...

A service may be able to use the incoming user token for fine grained access control.   See Out-of-band Verification of an RS256 Authentication JWT.