backkem commented on issue #1380:
URL: https://github.com/apache/arrow-adbc/issues/1380#issuecomment-1863237888

   It is feasible. However, it would be distinguishing between `Bearer xxx` for 
initial auth and `Bearer 123` for the session-bound auth. While feasible, it 
would seem less error prone to make the difference explicit by handling the 
initial auth in the handshake call.
   
   Technically the same is true for Basic auth. You could use a middleware to 
detect the basic auth token and handle it accordingly. I think it makes sense 
to handle that explicitly, so why not use the handshake or all 'initial 
authentication' needs.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to