lasdf1234 opened a new pull request, #11226: URL: https://github.com/apache/gravitino/pull/11226
## Summary - Add `basic` authenticator in `plugins:idp-basic` with `BasicAuthenticator`, relational IdP user lookup, and Argon2id password verification. - Initialize configured service admins at server startup via `ServerPluginBootstrap` SPI (`IdpServerPluginBootstrap` + `ServiceAdminInitializer`) and `GRAVITINO_INITIAL_ADMIN_PASSWORD`. - Add Java client `withBasicAuth` / `BasicTokenProvider` and document Basic mode in `docs/security/how-to-authenticate.md`. - Bundle `idp-basic` (and Bouncy Castle) into the Gravitino distribution and standalone Iceberg REST server libs. ## Why are the changes needed? Implements built-in IdP Basic authentication for Gravitino (#10959, #10963, #10964, #10965). Fix: #10959 Fix: #10963 Fix: #10964 Fix: #10965 ## User-facing changes - New authenticator mode: `gravitino.authenticators=basic` (requires relational entity store). - New env var for first-time service admin passwords: `GRAVITINO_INITIAL_ADMIN_PASSWORD` (JSON array of `username:password`). - Java client: `GravitinoClient.builder(uri).withBasicAuth(user, password)`. ## Test plan - [x] `./gradlew :plugins:idp-basic:test -PskipITs -PskipDockerTests=true` - [x] `./gradlew :server-common:test --tests "*BasicAuthentication*" -PskipITs -PskipDockerTests=true` - [x] `./gradlew :clients:client-java:test --tests "*BasicTokenProvider*" -PskipITs` Made with [Cursor](https://cursor.com) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
