apache/kyuubi

[FEATURE] Support http bearer token authentication

Open

#6,590 opened on Aug 6, 2024

View on GitHub
 (0 comments) (0 reactions) (0 assignees)Scala (2,332 stars) (996 forks)batch import
good first issuekind:featurepriority:major

Description

Code of Conduct

Search before asking

  • I have searched in the issues and found no similar issues.

Describe the feature

The same with celeborn https://github.com/apache/celeborn/blob/main/service/src/main/scala/org/apache/celeborn/server/common/http/authentication/BearerAuthenticationHandler.scala

To support bearer token authentication.

Motivation

Bearer token authentication is widely used.

Describe the solution

Refer: https://github.com/apache/celeborn/blob/main/service/src/main/scala/org/apache/celeborn/server/common/http/authentication/BearerAuthenticationHandler.scala https://github.com/apache/celeborn/pull/2440

Additional context

No response

Are you willing to submit PR?

  • Yes. I would be willing to submit a PR with guidance from the Kyuubi community to improve.
  • No. I cannot submit a PR at this time.

Contributor guide

Tech stack
scalarest api
Domain
authenticationbackend
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
Scala programmingHTTP authentication basicsFamiliarity with Kyuubi HTTP server code
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
70
Research direction
Study the referenced BearerAuthenticationHandler in celeborn (see links). Locate the existing HTTP authentication mechanism in Kyuubi (e.g., look for files under server/common/http/authentication). Implement a similar BearerAuthenticationHandler class in Kyuubi, following the pattern of existing handlers. Ensure it integrates with the HTTP server configuration.