Hi all, Two weeks ago at Community Over Code in Glasgow, we held a brief meeting to discuss authentication in the Iceberg REST client. Many thanks to everyone who participated!
We agreed that there is a pressing need for improved OAuth2 support. But unfortunately, progress on OAuth2Manager v2 has been slow, mostly due to scope creep. To unblock progress, we came up with two key initiatives: 1) Downscope OAuth2Manager v2: deliver a focused, standards-compliant OAuth2Manager containing minimal functionality, but done right. 2) Introduce a new BearerAuthManager: it reads tokens directly from a local file, effectively separating token production from token consumption. Its opinionated design has the potential to unlock many OAuth2 features quickly, while remaining lightweight and dependency-free. In short, users would keep OAuth2Manager if they need in-process authentication, but would have the alternative of switching to BearerAuthManager for its flexibility. I am beginning to execute on these initiatives, starting with the simpler one: the BearerAuthManager. Here is the design document: [1]. Note that this feature has been requested a year ago: [13550]. Please let me know your thoughts! (I will start a separate discussion for the downscoped OAuth2Manager). Thanks, Alex [1]: https://docs.google.com/document/d/1SJpdaQP4cGKWpgUfCuRNeomA0c7c2tDyDtu8MjI5yXk/edit?usp=sharing [13550]: https://github.com/apache/iceberg/issues/13550
