Trino is unable to resolve groups from JWT's

trinodb / trino

Official repository of Trino, the distributed SQL query engine for big data, formerly known as PrestoSQL (https://trino.io)

https://trino.io

Apache License 2.0

10.51k stars 3.03k forks source link

Trino is unable to resolve groups from JWT's #16155

Open connorlwilkes opened 1 year ago

connorlwilkes commented 1 year ago

Currently there is no functionality to get group information from JWT's passed as raw JWT's rather than those obtained via OIDC.

This feature is helpful for automation of group resolution for service account users and automated processes.

I have raised a PR to resolve this: https://github.com/trinodb/trino/pull/15955

Praveen2112 commented 1 year ago

Hi !! @connorlwilkes Thanks for working on this PR. But unfortunately the process by which we are getting the groups from OAuthAuthenticator has been deprecated due to the following issues -

view SECURITY DEFINER
sessionUser JDBC parameter
identity from view expression for column masking and row filtering.

For additional rationale PTAL at this PR - https://github.com/trinodb/trino/pull/15669.

cc: @kokosing