kevinjqliu opened a new issue, #13818:
URL: https://github.com/apache/iceberg/issues/13818

   ### Feature Request / Improvement
   
   **Description**
   Currently, [ADLSFileIO in the Azure 
module](https://github.com/apache/iceberg/blob/main/azure/src/main/java/org/apache/iceberg/azure/adlsv2/ADLSFileIO.java)
 only supports authentication via built-in Azure credential mechanisms such as 
[DefaultAzureCredential, StorageSharedKeyCredential, or SAS 
tokens](https://github.com/apache/iceberg/blob/54f8e58fc845cb82af70750d748ac7b3dee25365/azure/src/main/java/org/apache/iceberg/azure/AzureProperties.java#L126-L147).
 This makes it difficult to integrate with external authentication flows that 
produce an arbitrary access token (e.g., OAuth 2.0 Bearer tokens from non-Azure 
identity providers, custom SSO integrations, or already-acquired Azure AD 
tokens from another process).
   
   It would be valuable if ADLSFileIO could accept a pre-acquired token string 
directly, without requiring the developer to wrap it in a full TokenCredential 
or use environment-based auth.
   
   **Proposed Solution**
   Add a new config `adls.token` to 
[AzureProperties](https://github.com/apache/iceberg/blob/main/azure/src/main/java/org/apache/iceberg/azure/AzureProperties.java)
   Use it to set `DataLakeFileSystemClientBuilder credential(TokenCredential 
credential)`
   
https://learn.microsoft.com/en-us/java/api/com.azure.storage.file.datalake.datalakefilesystemclientbuilder?view=azure-java-stable#com-azure-storage-file-datalake-datalakefilesystemclientbuilder-credential(com-azure-core-credential-tokencredential)
   
   ### Query engine
   
   None
   
   ### Willingness to contribute
   
   - [x] I can contribute this improvement/feature independently
   - [x] I would be willing to contribute this improvement/feature with 
guidance from the Iceberg community
   - [ ] I cannot contribute this improvement/feature at this time


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org
For additional commands, e-mail: issues-h...@iceberg.apache.org

Reply via email to