diqiu50 opened a new pull request, #13078:
URL: https://github.com/apache/gravitino/pull/13078
### What changes were proposed in this pull request?
Set `iceberg.rest-catalog.session=USER` only when the internal Iceberg REST
catalog authenticates with OAuth2, instead of whenever `forwardUser` is
enabled.
### Why are the changes needed?
The per-user session mode makes the Iceberg client exchange a Trino-signed
JWT
for an access token. Without OAuth2 there is no token endpoint, so the client
falls back to `{rest-uri}/v1/oauth/tokens` and every table load fails with
HTTP 404 on Trino 473. It carries no user identity in that case either.
Fix: #13068
### Does this PR introduce _any_ user-facing change?
No new property keys. With `forwardUser=true` and non-OAuth2 authentication,
`iceberg.rest-catalog.session` is no longer set; it can be restored with
`gravitino.iceberg.rest-catalog.session=USER`.
### How was this patch tested?
`TestIcebergCatalogPropertyConverter`, covering both OAuth2 routes, the
explicit
override, and the simple-auth case.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
