DependencyTrack / DependencyTrack/dependency-track

Support passwordless / token-based authentication for external databases

Open
#5,568 1 comment 0 reactions 0 assignees View on GitHub
enhancement p3 size/M spike / research
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

- Dependency-Track requires a static username + password for external database connections.

- The application cannot acquire or refresh short-lived access tokens (e.g., Azure AD, AWS IAM, GCP IAM).

- This makes it impossible to use passwordless / identity-based database authentication models provided by cloud-managed PostgreSQL service

### Proposed Behavior

- Allow Dependency-Track to use token-based / passwordless database authentication (e.g., Azure AD, AWS IAM, GCP IAM).

- Support acquiring short-lived access tokens through the appropriate cloud identity libraries and using them for database connections.

- Handle token refresh so connections remain valid without requiring static passwords.

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.