opendal icon indicating copy to clipboard operation
opendal copied to clipboard
verified publisher icon apache

new feature: Support for client secret auth against azdls

Open twuebi opened this issue 1 year ago • 2 comments

Feature Description

It seems that azdls-service currently only supports sas / sharedkey / imds auth but it doesn't support the client_secret auth method which would work with app registration / entra id.

Problem and Solution

This feature enables using azdls with microsoft app registration. It should either take care of refreshing / logging in again, e.g. via some background task / checking expiry before issuing a request or expose the means to refresh tokens to the user, e.g. via some Arc<RwLock<Token>> which is exposed on the api.

Additional Context

No response

Are you willing to contribute to the development of this feature?

  • [x] Yes, I am willing to contribute to the development of this feature.

twuebi avatar Jul 30 '24 07:07 twuebi

I've started by opening a PR against reqsign which adds support for client-secret authentication https://github.com/Xuanwo/reqsign/pull/457

twuebi avatar Jul 30 '24 15:07 twuebi

Hi @Xuanwo, do you think we could create a reqsign release with client-secret authentication support? We could then continue with the work here in opendal.

twuebi avatar Sep 17 '24 12:09 twuebi

Hi, @twuebi, sorry for the long wait. @TennyZhuang helped cherry-pick https://github.com/Xuanwo/reqsign/pull/457 to v0.16.x branch, and I will release new version based on this. You can continue your work now.

Xuanwo avatar Nov 04 '24 07:11 Xuanwo