roryqi commented on code in PR #11079: URL: https://github.com/apache/gravitino/pull/11079#discussion_r3240949997
########## docs/iceberg-rest-service.md: ########## @@ -321,6 +321,48 @@ Please refer the following configuration If you are using Spark to access Iceber --conf spark.sql.catalog.rest.oauth2-server-uri=http://localhost:8177/oauth2/token ``` +##### OAuth 2.0 token refresh for Iceberg REST clients + +Some query engines may encounter OAuth 2.0 token refresh issues when connecting to Gravitino as an Iceberg REST Catalog (IRC). +This usually occurs when the identity provider does not support token exchange, or when a child authentication session inherits the parent session's expiration time. Review Comment: It usually occurs. ########## docs/iceberg-rest-service.md: ########## @@ -321,6 +321,48 @@ Please refer the following configuration If you are using Spark to access Iceber --conf spark.sql.catalog.rest.oauth2-server-uri=http://localhost:8177/oauth2/token ``` +##### OAuth 2.0 token refresh for Iceberg REST clients + +Some query engines may encounter OAuth 2.0 token refresh issues when connecting to Gravitino as an Iceberg REST Catalog (IRC). +This usually occurs when the identity provider does not support token exchange, or when a child authentication session inherits the parent session's expiration time. + +For the native Apache Iceberg OAuth 2.0 implementation, the following upstream improvement is relevant: Review Comment: native. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
