Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement Oauth2.0 in Trino and refactor Trino controllers #1475

Closed
4 tasks done
rohank07 opened this issue Dec 14, 2022 · 1 comment
Closed
4 tasks done

Implement Oauth2.0 in Trino and refactor Trino controllers #1475

rohank07 opened this issue Dec 14, 2022 · 1 comment
Assignees

Comments

@rohank07
Copy link
Contributor

rohank07 commented Dec 14, 2022

Configure to enable OAuth 2.0 authentication over HTTPS for the Web UI, python-client and Trino CLI
Ref: https://trino.io/docs/current/security/oauth2.html

@rohank07 rohank07 mentioned this issue Dec 14, 2022
54 tasks
@rohank07 rohank07 self-assigned this Dec 14, 2022
@rohank07 rohank07 changed the title Investigate Oauth2.0 in Trino Implement Oauth2.0 in Trino and refactor Trino controllers Dec 23, 2022
@rohank07
Copy link
Contributor Author

Trino is now configured using Oauth2.0 and JWT auth. JWT is configured for the Trino schema controller to be able to create schemas for profiles. An admin (user: Rohan Katkar) is able to pass in its JWT token to the Authorization header in the REST API call to authenticate.

On the trino side only the admin's JWT token can be read. This is configured via the user-mapping file http-server.authentication.jwt.user-mapping.file=/etc/mapping/user-mapping.json

user-mapping.json: | { "rules": [ { "pattern": "^system:serviceaccount:([^:]+):default$", "user": "Rohan Katkar" } ] }

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant