adutra opened a new pull request, #18754:
URL: https://github.com/apache/iceberg/pull/18754

   Add a dependency-free `AuthManager` that sets an `Authorization: Bearer` 
header on REST requests, as defined in RFC 6750. 
   
   The token is either read from a local file that is re-read periodically, or 
provided statically in the configuration. Obtaining and renewing the token is 
left to an external producer, such as a Kubernetes projected service account 
token or a sidecar.
   
   The manager is selected with `rest.auth.type=bearer`. Tokens are validated 
against the RFC 6750 grammar, so that a malformed file cannot corrupt the 
Authorization header. If a reload fails, the last valid token is kept.
   
   When `rest.auth.type` is not set, the legacy `token` property now infers the 
Bearer manager, instead of the OAuth2 manager (the `credential` property 
however still infers the OAuth2 manager).
   
   Fixes #13550.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to