apache / apache/polaris

Register table endpoint should honor access delegation

Open
#2,351 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
2.1k
Forks
522
Avg merge
1d 22h
Merged PRs (30d)
137

Description

### Is your feature request related to a problem? Please describe.

The IRC spec for the register-table endpoint does not mention access delegation headers, contrary to the other table endpoints.

Polaris currently does not consider access delegation at all when registering a table. As a consequence, the returned `LoadTableResult` does not contain any config for vended credentials nor for remote signing.

This is bad, because the returned config is unusable if the client is not in possession of valid credentials to access the storage.

### Describe the solution you'd like

Polaris should honor the access delegation headers in the register-table endpoint, and return appropriate config for either vended credentials or remote signing.

### Describe alternatives you've considered

_No response_

### Additional context

This issue came up while developing support for remote signing:

Some context: https://github.com/apache/polaris/pull/2280#discussion_r2272748983

Contributor guide

Open the contributing guide

Research direction

Start with the register-table endpoint and compare its handling of access delegation headers with the other table endpoints, using the IRC specification and the linked remote-signing discussion for context. Done means the endpoint honors the headers and the returned LoadTableResult contains appropriate vended-credentials or remote-signing configuration.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
api, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.