Open phoebusm opened 1 year ago
Azure AD supports five types of credentials for authentication and it will not be practical to support passing all five types of credentials from user as
All five AD credentials request all return the same access token for connection, which has a relatively simple structure:
struct AccessToken final
{
/**
* @brief Token string.
*
*/
std::string Token;
/**
* @brief A point in time after which the token expires.
*
*/
DateTime ExpiresOn;
};
The suggested design will be, user can specify Token
and ExpiresOn
on the connection string and a nested struct will be added to the protobuf so these can be passed to the C++ layer.
Concerns:
The development will be put on-hold until the study of other authentication listed on https://github.com/man-group/ArcticDB/issues/898 is done, to maximise code-reuse and provide a uniform and simple API for all authentication
Parent ticket: https://github.com/man-group/ArcticDB/issues/898
Add Azure AD Authentication support Reading material: https://learn.microsoft.com/en-us/python/api/azure-identity/azure.identity.defaultazurecredential?view=azure-python https://github.com/Azure/azure-sdk-for-cpp/blob/main/sdk/identity/azure-identity/README.md#credential-classes