lasdf1234 opened a new issue, #11682: URL: https://github.com/apache/gravitino/issues/11682
### Describe the proposal Gravitino built-in IdP supports HTTP Basic authentication on the server (`idp-basic` plugin), but the Web UI does not provide a username/password login flow today. Login pages only handle `simple` and `oauth` modes; see [How to use built-in IDP](https://gravitino.apache.org/docs/security/how-to-use-built-in-idp#web-ui). This epic tracks end-to-end work to let operators sign in to the Web UI with built-in IdP Basic credentials when the server is configured for IdP Basic authentication (`gravitino.authenticators` configured without `simple`). **Scope** - Backend: expose whatever the Web UI needs to detect Basic/IdP mode and authenticate API calls after login. - Frontend: add Basic login UX in Web UI (v1 and/or v2 as agreed by maintainers). **Out of scope (for this epic)** - Replacing enterprise IdPs (Keycloak, Azure AD, etc.). - Changing connector/client Basic auth flows (REST API, Spark/Flink/Trino connectors already documented separately). **Related** - Built-in IdP docs: `docs/security/how-to-use-built-in-idp.md` - Authentication docs: `docs/security/how-to-authenticate.md#basic-mode` ### Task list - [ ] #11680 - [ ] #11681 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
