diqiu50 opened a new issue, #13967: URL: https://github.com/apache/gravitino/issues/13967
### Version main ### Describe what's wrong When the Spark connector routes an Iceberg catalog through the Iceberg REST service (IRC), `IcebergRestOAuthConfig.resolve` only bridges OAuth2 and Basic. With `spark.sql.gravitino.authType=token`, nothing is passed, so the routed catalog calls IRC without an `Authorization` header and every Iceberg operation fails with 401, although catalogs load fine. With `kerberos`, nothing is passed either and the failure is silent and late, whereas the Trino connector rejects it at registration. ### Error message and/or stacktrace 401 from IRC on the first query against a routed Iceberg table; the message does not mention the auth mode. ### How to reproduce 1. Start a Spark session with `spark.sql.gravitino.authType=token` and a valid token. 2. Query a table of a Gravitino-routed Iceberg catalog on an IRC that requires authentication. ### Additional context Same gap as #13933 (Basic), fixed by #13935. Expected: carry the same identity to IRC, or fail at startup naming the auth mode. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
