sungwy commented on code in PR #2680:
URL: https://github.com/apache/polaris/pull/2680#discussion_r2382356651


##########
runtime/defaults/src/main/resources/application.properties:
##########
@@ -193,6 +193,15 @@ polaris.oidc.principal-roles-mapper.type=default
 # polaris.storage.gcp.token=token
 # polaris.storage.gcp.lifespan=PT1H
 
+# Polaris authorization implementation settings
+# Which authorizer to use: "default" (PolarisAuthorizerImpl) or "opa" 
(OpaPolarisAuthorizer)
+polaris.authorization.implementation=default
+
+# OPA Authorizer Configuration: effective only if 
polaris.authorization.implementation=opa
+# polaris.authorization.opa.url=http://localhost:8181

Review Comment:
   @dimas-b it's not required by default, but you can enable mTLS or Token 
based authentication for use with `basic` authorization that involves 
describing the policy with rego :) :
   
   
https://www.openpolicyagent.org/docs/security#token-based-authentication-example



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to