Feat/oauth2 interactive auth - #1

Merged

maltesander merged 16 commits into

stackable-mainfrom

feat/oauth2-interactive-auth

Jul 29, 2026

Commits on Jul 26, 2026

feat: parse Trino OAuth2 WWW-Authenticate challenge
maltesander
committed
0b3772c
fix: parse_www_authenticate must not panic on non-ASCII headers

maltesander
and
claude
committed
9ca9d5c
feat: add OAuth2 auth variant, redirect handler and shared state
maltesander
committed
df51044
feat: poll Trino token server for the OAuth2 bearer token
maltesander
committed
fb95bb8
fix: bound each OAuth2 token poll by poll_timeout to prevent hangs
maltesander
committed
f732bb5
feat: run interactive OAuth2 flow on 401 with single-flight retry
maltesander
committed
9381ae5
docs: changelog, migration and manual e2e for OAuth2 auth
maltesander
committed
d2fb7da
fix: apply OAuth2 auth after cloning so re-auth sends a single Authorization header

maltesander
and
claude
committed
c1824a8
docs: add interactive OAuth2 example and README entry

maltesander
and
claude
committed
d6a60c0
test: add local Trino+Keycloak OAuth2 stack for manual e2e

maltesander
and
claude
committed
0594bbd
fix: use exec-form entrypoint for gen-certs in OAuth2 stack

maltesander
and
claude
committed
ce747c1
fix: set internal-communication.shared-secret so the OAuth2 coordinator starts

maltesander
and
claude
committed
1d0b389
test: default OAuth2 e2e session user to alice to match the principal

maltesander
and
claude
committed
7156f5f
fix: run cargo fmt
maltesander
committed
7aab725
fix: scan every WWW-Authenticate header for the OAuth2 challenge

maltesander
and
claude
committed
4a26063
docs: correct stale OAuth2 token-acquisition comments

maltesander
and
claude
committed
cca0619

Navigation Menu

Uh oh!

Feat/oauth2 interactive auth - #1

Feat/oauth2 interactive auth#1
maltesander merged 16 commits into
stackable-mainfrom
feat/oauth2-interactive-auth

Commits on Jul 26, 2026

feat: parse Trino OAuth2 WWW-Authenticate challenge

fix: parse_www_authenticate must not panic on non-ASCII headers

feat: add OAuth2 auth variant, redirect handler and shared state

feat: poll Trino token server for the OAuth2 bearer token

fix: bound each OAuth2 token poll by poll_timeout to prevent hangs

feat: run interactive OAuth2 flow on 401 with single-flight retry

docs: changelog, migration and manual e2e for OAuth2 auth

fix: apply OAuth2 auth after cloning so re-auth sends a single Authorization header

docs: add interactive OAuth2 example and README entry

test: add local Trino+Keycloak OAuth2 stack for manual e2e

fix: use exec-form entrypoint for gen-certs in OAuth2 stack

fix: set internal-communication.shared-secret so the OAuth2 coordinator starts

test: default OAuth2 e2e session user to alice to match the principal

fix: run cargo fmt

fix: scan every WWW-Authenticate header for the OAuth2 challenge

docs: correct stale OAuth2 token-acquisition comments