[Question] What are System Integrators?

[cwperks]

Related to: opensearch-project/OpenSearch#10260

There is a suite of tests called SystemIntegratorTests that uses a UserInjectorPlugin that installs a custom HttpTransport called org.opensearch.security.http.UserInjectingServerTransport.

The purpose of this transport is to wrap a RestHandler and inject a user into the threadcontext if a specific HttpHeader is present.

This plugin works with the SecurityPlugin installed (albeit the Security plugin is not used as an HttpTransport so no SSL is configured) and can inject a user into the ThreadContext that get's picked up by the SecurityPlugin.

In #3418, the SystemIntegratorTests started failing because it was configured to use the HttpTransport from the UserInjectorPlugin instead of the HttpTransport from the SecurityPlugin.

In order to facilitate moving authn to a step in the netty pipeline before decompression, then the security plugin must be the configured HttpTransport and no other plugin.

[stephen-crawford]

[Triage] Hi @cwperks, sounds like you got an answer to this question. Please feel free to amend this information to the architecture guide and then close this issue.

[stephen-crawford]

Closing this issue. Thank you for your investigation :)