apache / apache/gravitino

[Improvement] Support login with grant_type=authorization_code, when Gravitino use OAuth as authenticator

Open
#5,875 5 comments 0 reactions 0 assignees View on GitHub
improvement
Dominant language
Java
Stars
3.2k
Forks
935
Avg merge
1d 15h
Merged PRs (30d)
315

Description

### What would you like to be improved?

The Client Credentials grant is used for client (server-to-server) authorization, not for authenticating end-users.

Currently, the end-users can't login with Authorization code flow, when I configure KeyCloak as the Identity provider.

### How should we improve?

image

Contributor guide

Open the contributing guide

Research direction

The issue names no files, tests, or entry points. Start by tracing Gravitino's OAuth authentication flow and how Keycloak is configured, then compare the current client-credentials path with the requested authorization-code flow. Done means end-users can log in through Keycloak using grant_type=authorization_code.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authentication
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.