You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@spark.apache.org by "L. C. Hsieh (Jira)" <ji...@apache.org> on 2026/08/21 07:30:00 UTC

[jira] [Resolved] (SPARK-58901) Import scg-auth crate into Spark Connect Gateway

     [ https://issues.apache.org/jira/browse/SPARK-58901?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

L. C. Hsieh resolved SPARK-58901.
---------------------------------
    Fix Version/s: connect-gateway-0.1.0
       Resolution: Fixed

Issue resolved by pull request 5
[https://github.com/apache/spark-connect-gateway/pull/5]

> Import scg-auth crate into Spark Connect Gateway
> ------------------------------------------------
>
>                 Key: SPARK-58901
>                 URL: https://issues.apache.org/jira/browse/SPARK-58901
>             Project: Spark
>          Issue Type: Sub-task
>          Components: Connect
>    Affects Versions: connect-gateway-0.1.0
>            Reporter: L. C. Hsieh
>            Assignee: L. C. Hsieh
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: connect-gateway-0.1.0
>
>
> Part of importing the Spark Connect Gateway reference implementation into
> apache/spark-connect-gateway as a series of small, bottom-up PRs.
> This adds the scg-auth crate — the authentication layer for the gateway. It
> defines the Authenticator abstraction and the verified Identity attached to an
> authenticated request, a tonic interceptor that runs an authenticator and stamps
> the identity onto the request, and several authenticator implementations: 
>   - AnonymousAuthenticator — used when auth is explicitly disabled
>   - StaticTokenAuthenticator — a Bearer-token allowlist
>   - JwtAuthenticator — verifies a signed JWT against a local key
>   - OidcAuthenticator — verifies JWTs against a remote JWKS endpoint
> scg-auth is a leaf crate (no internal dependencies), so it compiles and tests on
> its own (30 unit tests). It is appended to the workspace members list, and is a
> prerequisite for the tenant crate and the proxy crate that arrive in later PRs.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org