KNOX-2982 - Having one disabled one enabled identity-assertion providers doesn't work

[zeroflag]

What changes were proposed in this pull request?

When there are multiple providers in one topology, knox gets the first one, without checking if it's enabled or disabled.

Therefore having 2 identity-assertion providers where the first is disabled and the 2nd is enabled, doesn't work.

We should find the first enabled provider instead.

How was this patch tested?

1st provider enabled

<provider>
    <role>identity-assertion</role>
    <name>SwitchCase</name>
    <enabled>true</enabled>
    <param>
        <name>principal.case</name>
        <value>upper</value>
    </param>
    <param> 
        <name>group.principal.case</name>
        <value>upper</value>
    </param>    
</provider>

2nd provider disabled:

<provider>
  <role>identity-assertion</role>
  <name>Regex</name>
  <enabled>false</enabled>
  <param>
    <name>input</name>
    <value>ad(.*)</value>
  </param>  
  <param>   
    <name>output</name>
    <value>{1}max</value>
  </param>      
</provider>

curl -vk -u admin:admin-password https://localhost:8443/gateway/sandbox/hive

24/01/09 14:04:50 ||eddb35a8-c6d7-4ae7-9d50-b0b3e50fddaa|audit|127.0.0.1|HIVE|admin|ADMIN||identity-mapping|principal|admin|success|Effective User: ADMIN
24/01/09 14:04:50 ||eddb35a8-c6d7-4ae7-9d50-b0b3e50fddaa|audit|127.0.0.1|HIVE|admin|ADMIN||identity-mapping|principal|ADMIN|success|Groups: []

1st provider disabled

<provider>
    <role>identity-assertion</role>
    <name>SwitchCase</name>
    <enabled>false</enabled>
    <param>
        <name>principal.case</name>
        <value>upper</value>
    </param>
    <param> 
        <name>group.principal.case</name>
        <value>upper</value>
    </param>    
</provider>

2nd provider enabled:

<provider>
  <role>identity-assertion</role>
  <name>Regex</name>
  <enabled>true</enabled>
  <param>
    <name>input</name>
    <value>ad(.*)</value>
  </param>  
  <param>   
    <name>output</name>
    <value>{1}max</value>
  </param>      
</provider>

curl -vk -u admin:admin-password https://localhost:8443/gateway/sandbox/hive

24/01/09 14:06:26 ||2d376454-b232-4011-85bd-cdbc526962e6|audit|127.0.0.1|HIVE|admin|minmax||identity-mapping|principal|admin|success|Effective User: minmax
24/01/09 14:06:26 ||2d376454-b232-4011-85bd-cdbc526962e6|audit|127.0.0.1|HIVE|admin|minmax||identity-mapping|principal|minmax|success|Groups: []

Both disabled:

curl -vk -u admin:admin-password https://localhost:8443/gateway/sandbox/hive
24/01/10 13:37:15 ||2badf91c-5922-4577-8b59-78dff76558f1|audit|127.0.0.1|HIVE|admin|||authentication|uri|/gateway/sandbox/hive|success|Groups: []

[smolnar82]

LGTM, just had a small question.