L. C. Hsieh created SPARK-58901:
-----------------------------------
Summary: Import scg-auth crate into Spark Connect Gateway
Key: SPARK-58901
URL: https://issues.apache.org/jira/browse/SPARK-58901
Project: Spark
Issue Type: Sub-task
Components: Connect
Affects Versions: connect-gateway-0.1.0
Reporter: L. C. Hsieh
Assignee: L. C. Hsieh
Part of importing the Spark Connect Gateway reference implementation into
apache/spark-connect-gateway as a series of small, bottom-up PRs.
This adds the scg-auth crate — the authentication layer for the gateway. It
defines the Authenticator abstraction and the verified Identity attached to an
authenticated request, a tonic interceptor that runs an authenticator and stamps
the identity onto the request, and several authenticator implementations:
- AnonymousAuthenticator — used when auth is explicitly disabled
- AnonymousAuthenticator — used when auth is explicitly disabled
- StaticTokenAuthenticator — a Bearer-token allowlist
- JwtAuthenticator — verifies a signed JWT against a local key
- OidcAuthenticator — verifies JWTs against a remote JWKS endpoint
scg-auth is a leaf crate (no internal dependencies), so it compiles and tests on
its own (30 unit tests). It is appended to the workspace members list, and is a
prerequisite for the tenant crate and the proxy crate that arrive in later PRs.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
