aws / aws/amazon-redshift-python-driver

Caching access token during BrowserIdcAuthPlugin authentication for subsequent/parallel session requests

未關閉
#265 1 則留言 4 個 reaction 已指派 0 人 在 GitHub 檢視
主要語言
Python
星號
220
分支
86
PR 合併指標
30 天內沒有已合併 PR

描述

Currently, running SQL queries via `BrowserIdcAuthPlugin` is done on a per-session basis. This can be tiresome when running queries across different sessions in parallel (e..g, dbt), where multiple browser pop-ups are triggered throughout the run duration. I would like to add a feature to cache the access token received during the token exchange process, so that future sessions will reuse the cached token instead of re-initializing a new session.

As the proposal involves storing the access token locally (whether it be via file/memory, plain-text/encrypted, etc.), would this be a security issue? Not sure if it would be a hard blocker before I open a PR for this feature proposal.

貢獻指南

開啟貢獻指南

研究方向

首先,追蹤 BrowserIdcAuthPlugin 的驗證在權杖交換與工作階段初始化路徑中的流程。定義快取範圍與儲存安全性需求,然後驗證後續工作階段與平行工作階段會重複使用有效權杖,而不會反覆觸發瀏覽器彈出視窗。

由索引模型根據 Issue 內容生成。

評估

技術堆疊
aws, python
領域
authentication, backend, security
Issue 類型
功能
難度
5/5
預估耗時
一週以上
活躍度
停滯
描述清晰度
基本清楚
新手友好度
35/100

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。