singhpk234 commented on issue #2581:
URL: https://github.com/apache/polaris/issues/2581#issuecomment-3299568570

   Thank you for the ticket @adutra for my understanding : 
   this would mean now a client (without OAuth) when hits the Application 
server lets say for loadTable would be given the following metadata : 
   
   ```
   {
     "resource": "<>/namespace/ns/table/tbl",
     "authorization_server": "<as_url>"
   }
   ```
   
   Now its up to client to obtain OAuth token by contacting the AS and obtain a 
token (will it always be on-behalf token, my guess is not ?) now post obtaining 
the token the client with the token will come back to the resource server to 
get Authenticated ?
   
   wondering what are the some workflows which will be enabled by this ? is 
just that the burden of configuring the right Auth Server is taken away from 
the client 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@polaris.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to