diqiu50 opened a new pull request, #12022: URL: https://github.com/apache/gravitino/pull/12022
### What changes were proposed in this pull request? Add `authType=oauth2` support to `forwardUser=true` session forwarding. The connector now reads the end-user token forwarded by Trino into session extra-credentials and uses it to build a per-user Gravitino client, instead of only trusting the username via `authType=simple`. REST-backed Iceberg catalogs also get per-user forwarding to the Iceberg REST catalog (IRC). ### Why are the changes needed? `forwardUser=true` only supported `authType=simple`, which isn't enough for deployments that need real per-user authorization. Fix: #12021 ### Does this PR introduce any user-facing change? `gravitino.client.session.forwardUser=true` now also works with `authType=oauth2`. ### How was this patch tested? New/updated unit tests, plus manual end-to-end verification against a local Keycloak + Gravitino (OAuth2) + Iceberg REST catalog setup. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
