roryqi commented on code in PR #11079: URL: https://github.com/apache/gravitino/pull/11079#discussion_r3240817687
########## docs/iceberg-rest-service.md: ########## @@ -321,6 +321,48 @@ Please refer the following configuration If you are using Spark to access Iceber --conf spark.sql.catalog.rest.oauth2-server-uri=http://localhost:8177/oauth2/token ``` +##### OAuth 2.0 token refresh for Iceberg REST clients + +Some query engines may encounter OAuth 2.0 token refresh issues when connecting to Gravitino as an Iceberg REST Catalog (IRC). +This usually occurs when the identity provider does not support token exchange, or when a child authentication session inherits the parent session's expiration time. + +For the native Apache Iceberg OAuth 2.0 implementation, the following upstream improvement is relevant: + +| Version | Change | +|-----------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Iceberg 1.11.0+ | Supports disabling token exchange, using client credentials for token renewal, and fixing child `AuthSession` expiration handling so that child sessions use their own token lifetime. | + +###### Native Apache Iceberg OAuth 2.0 implementation Review Comment: Could u remove native? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
