VenkataKarthikP opened a new pull request, #18848: URL: https://github.com/apache/iceberg/pull/18848
**Description** Credential refresh rejects responses with multiple S3 or GCS credentials even when they apply to different storage prefixes. Preserve each storage client's prefix and select the longest returned prefix covering it, rejecting missing or ambiguous matches. Clients without prefix context retain the existing single-credential behavior. The refresh changes and regression tests were generated with AI. Fixes https://github.com/apache/iceberg/issues/18825 Test plan: `TestVendedCredentialsProvider` and `TestOAuth2RefreshCredentialsHandler` passed (35 tests), covering prefix selection, unrelated and ambiguous matches, independent client refresh, and unscoped compatibility. --- **AI Disclosure** - Model: GPT-6.1 Sol (gpt-6.1-sol) - Platform/Tool: GitHub Copilot CLI - Human Oversight: cheked diff - Prompt Summary: Investigate #18825 and implement prefix-aware AWS/GCP credential refresh. Follow the issue guidance to verify the issue against existing behavior and the REST spec, compare Azure’s approach, preserve legacy compatibility, keep changes focused, and run regression tests and repository style checks. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
