[
https://issues.apache.org/jira/browse/SPARK-58901?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
L. C. Hsieh resolved SPARK-58901.
---------------------------------
Fix Version/s: connect-gateway-0.1.0
Resolution: Fixed
Issue resolved by pull request 5
[https://github.com/apache/spark-connect-gateway/pull/5]
> Import scg-auth crate into Spark Connect Gateway
> ------------------------------------------------
>
> Key: SPARK-58901
> URL: https://issues.apache.org/jira/browse/SPARK-58901
> Project: Spark
> Issue Type: Sub-task
> Components: Connect
> Affects Versions: connect-gateway-0.1.0
> Reporter: L. C. Hsieh
> Assignee: L. C. Hsieh
> Priority: Major
> Labels: pull-request-available
> Fix For: connect-gateway-0.1.0
>
>
> Part of importing the Spark Connect Gateway reference implementation into
> apache/spark-connect-gateway as a series of small, bottom-up PRs.
> This adds the scg-auth crate — the authentication layer for the gateway. It
> defines the Authenticator abstraction and the verified Identity attached to an
> authenticated request, a tonic interceptor that runs an authenticator and
> stamps
> the identity onto the request, and several authenticator implementations:
> - AnonymousAuthenticator — used when auth is explicitly disabled
> - StaticTokenAuthenticator — a Bearer-token allowlist
> - JwtAuthenticator — verifies a signed JWT against a local key
> - OidcAuthenticator — verifies JWTs against a remote JWKS endpoint
> scg-auth is a leaf crate (no internal dependencies), so it compiles and tests
> on
> its own (30 unit tests). It is appended to the workspace members list, and is
> a
> prerequisite for the tenant crate and the proxy crate that arrive in later
> PRs.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
