aws / aws/amazon-redshift-python-driver

Caching access token during BrowserIdcAuthPlugin authentication for subsequent/parallel session requests

Open
#265 1 comment 4 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
220
Forks
86
PR merge metrics
No merged PRs in 30d

Description

Currently, running SQL queries via `BrowserIdcAuthPlugin` is done on a per-session basis. This can be tiresome when running queries across different sessions in parallel (e..g, dbt), where multiple browser pop-ups are triggered throughout the run duration. I would like to add a feature to cache the access token received during the token exchange process, so that future sessions will reuse the cached token instead of re-initializing a new session.

As the proposal involves storing the access token locally (whether it be via file/memory, plain-text/encrypted, etc.), would this be a security issue? Not sure if it would be a hard blocker before I open a PR for this feature proposal.

Contributor guide

Open the contributing guide

Research direction

Start by tracing BrowserIdcAuthPlugin authentication through the token exchange and session initialization paths. Define the cache scope and storage security requirements, then verify that subsequent and parallel sessions reuse a valid token without triggering repeated browser pop-ups.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, python
Domain
authentication, backend, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.