[MINOR][HIVE] Pick up HIVE-22708 HTTP transport fix

Pick up the HTTP fix from https://issues.apache.org/jira/browse/HIVE-22708

This is a small but important fix to digest handling we should pick up from Hive.

No.

Existing tests

Closes #27273 from srowen/Hive22708.

Authored-by: Sean Owen <[email protected]>
Signed-off-by: Dongjoon Hyun <[email protected]>

Author: srowen

sql/hive-thriftserver/src/main/java/org/apache/hive/service/CookieSigner.java

@@ -81,7 +81,7 @@ public String verifyAndExtract(String signedStr) {
     if (LOG.isDebugEnabled()) {
       LOG.debug("Signature generated for " + rawValue + " inside verify is " + currentSignature);
     }
-    if (!originalSignature.equals(currentSignature)) {
+    if (!MessageDigest.isEqual(originalSignature.getBytes(), currentSignature.getBytes())) {
       throw new IllegalArgumentException("Invalid sign, original = " + originalSignature +
         " current = " + currentSignature);
     }