[FEATURE] Support kerberos authentication for ThriftHttp protocol
- Dominant language
- Scala
- Stars
- 2.4k
- Forks
- 1k
- PR merge metrics
- No merged PRs in 30d
Description
### Code of Conduct
- [x] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)
### Search before asking
- [x] I have searched in the [issues](https://github.com/apache/kyuubi/issues?q=is%3Aissue) and found no similar issues.
### Describe the feature
Support kerberos authentication for ThriftHttp protocol
### Motivation
Document saids that it supports various protocols, but THRIFT_HTTP does not work with kerberos authentication.
- THRIFT_BINARY - HiveServer2 compatible thrift binary protocol.
- THRIFT_HTTP - HiveServer2 compatible thrift http protocol.
- REST - Kyuubi defined REST API(experimental).
- MYSQL - MySQL compatible text protocol(experimental).
- TRINO - Trino compatible http protocol(experimental).
### Describe the solution
_No response_
### Additional context
_No response_
### Are you willing to submit PR?
- [x] Yes. I would be willing to submit a PR with guidance from the Kyuubi community to improve.
- [ ] No. I cannot submit a PR at this time.
Contributor guide
Research direction
No file, test, or entry point is named. Start by tracing the THRIFT_HTTP authentication path and comparing it with the documented THRIFT_BINARY Kerberos behavior; done means THRIFT_HTTP works with Kerberos authentication and the relevant tests or documentation demonstrate that support.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- scala
- Domain
- authentication, backend-api-design
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100