[
https://issues.apache.org/jira/browse/SPARK-58901?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
L. C. Hsieh updated SPARK-58901:
--------------------------------
Description:
Part of importing the Spark Connect Gateway reference implementation into
apache/spark-connect-gateway as a series of small, bottom-up PRs.
This adds the scg-auth crate — the authentication layer for the gateway. It
defines the Authenticator abstraction and the verified Identity attached to an
authenticated request, a tonic interceptor that runs an authenticator and stamps
the identity onto the request, and several authenticator implementations:
- AnonymousAuthenticator — used when auth is explicitly disabled
- StaticTokenAuthenticator — a Bearer-token allowlist
- JwtAuthenticator — verifies a signed JWT against a local key
- OidcAuthenticator — verifies JWTs against a remote JWKS endpoint
scg-auth is a leaf crate (no internal dependencies), so it compiles and tests on
its own (30 unit tests). It is appended to the workspace members list, and is a
prerequisite for the tenant crate and the proxy crate that arrive in later PRs.
was:
Part of importing the Spark Connect Gateway reference implementation into
apache/spark-connect-gateway as a series of small, bottom-up PRs.
This adds the scg-auth crate — the authentication layer for the gateway. It
defines the Authenticator abstraction and the verified Identity attached to an
authenticated request, a tonic interceptor that runs an authenticator and stamps
the identity onto the request, and several authenticator implementations:
- AnonymousAuthenticator — used when auth is explicitly disabled
- AnonymousAuthenticator — used when auth is explicitly disabled
- StaticTokenAuthenticator — a Bearer-token allowlist
- JwtAuthenticator — verifies a signed JWT against a local key
- OidcAuthenticator — verifies JWTs against a remote JWKS endpoint
scg-auth is a leaf crate (no internal dependencies), so it compiles and tests on
its own (30 unit tests). It is appended to the workspace members list, and is a
prerequisite for the tenant crate and the proxy crate that arrive in later PRs.
> Import scg-auth crate into Spark Connect Gateway
> ------------------------------------------------
>
> Key: SPARK-58901
> URL: https://issues.apache.org/jira/browse/SPARK-58901
> Project: Spark
> Issue Type: Sub-task
> Components: Connect
> Affects Versions: connect-gateway-0.1.0
> Reporter: L. C. Hsieh
> Assignee: L. C. Hsieh
> Priority: Major
>
> Part of importing the Spark Connect Gateway reference implementation into
> apache/spark-connect-gateway as a series of small, bottom-up PRs.
> This adds the scg-auth crate — the authentication layer for the gateway. It
> defines the Authenticator abstraction and the verified Identity attached to an
> authenticated request, a tonic interceptor that runs an authenticator and
> stamps
> the identity onto the request, and several authenticator implementations:
> - AnonymousAuthenticator — used when auth is explicitly disabled
> - StaticTokenAuthenticator — a Bearer-token allowlist
> - JwtAuthenticator — verifies a signed JWT against a local key
> - OidcAuthenticator — verifies JWTs against a remote JWKS endpoint
> scg-auth is a leaf crate (no internal dependencies), so it compiles and tests
> on
> its own (30 unit tests). It is appended to the workspace members list, and is
> a
> prerequisite for the tenant crate and the proxy crate that arrive in later
> PRs.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
