ydb-platform / ydb-platform/ydb-python-sdk
feature: [SSO] support OIDC auth
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 102
- Forks
- 75
- Avg merge
- 1d 23h
- Merged PRs (30d)
- 13
Description
Feature Request
Describe the Feature Request
Currently, there is no implementation of OIDC authentication in the python SDK. Because of this, CP had to do its own knee-jerk implementation. Now we need to approach this issue wisely and support OIDC authentication (similar to IAM and StaticCreds) compatible with the current CP code.
Describe Preferred Solution
The code in the Control Plane should be able to use OIDC authentication on an equal footing with IAM authentication and Static Credentials.
Describe Alternatives
-
Related Code
CP server and worker: https://nda.ya.ru/t/CunYmWLb7nN7im
CP agent: https://nda.ya.ru/t/Snl7dJJR7nN7nz
Additional Context
Documentaion: https://nda.ya.ru/t/bpZjCdUU7nN6mU
If the feature request is approved, would you be willing to submit a PR?
No
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the Python SDK's existing IAM and StaticCreds authentication implementations, then read the linked Control Plane server, worker, agent, and documentation references. Define OIDC authentication so the Control Plane can use it on an equal footing with IAM and Static Credentials, and verify compatibility with the current Control Plane code.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authentication
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100