Package org.apache.polaris.service.credentials.connection

Class BearerConnectionCredentialVendor

java.lang.Object
org.apache.polaris.service.credentials.connection.BearerConnectionCredentialVendor
All Implemented Interfaces:
org.apache.polaris.core.credentials.connection.ConnectionCredentialVendor
@RequestScoped @Priority(100) public class BearerConnectionCredentialVendor extends Object implements org.apache.polaris.core.credentials.connection.ConnectionCredentialVendor
Connection credential vendor for Bearer token authentication.

This vendor handles Bearer token authentication by reading the bearer token from the secrets manager and providing it for connecting to external catalogs.

The vendor provides only the bearer token. When connecting to the remote catalog, Iceberg SDK will use this token as-is in HTTP Authorization headers. Bearer tokens typically have a limited lifetime and should be refreshed by the user when they expire.

This is the default implementation with @Priority(CredentialVendorPriorities.DEFAULT). Custom implementations can override this by providing a higher priority value.

  • Constructor Details

    • BearerConnectionCredentialVendor

      @Inject public BearerConnectionCredentialVendor(org.apache.polaris.core.secrets.UserSecretsManager secretsManager)

  • Method Details

    • getConnectionCredentials

      @Nonnull public org.apache.polaris.core.credentials.connection.ConnectionCredentials getConnectionCredentials(@Nonnull org.apache.polaris.core.connection.ConnectionConfigInfoDpo connectionConfig)
      Specified by:
      getConnectionCredentials in interface org.apache.polaris.core.credentials.connection.ConnectionCredentialVendor