This repo provides a custom authenticator for Hive which requires a valid JWT token for a user to represent the password. The plugin is done via Pluggable Authentication which specifies the changes required to the hive site files.
See the aws-analytical-env repository for where it is used.