[[new IAM integration]]

[UgnineSirdis]

Server

• Support nb-cloud iam integration (authorize/authenticate): Done, https://github.com/ydb-platform/ydb/pull/2495

Support RFC 8693 in SDK and CLI

Need to support https://www.rfc-editor.org/rfc/rfc8693 for token exchange, with two options:

• Explicit parameter setting using classes to construct JWT token and OAuth2 Token Exchange credentials provider for YDB driver
• Read parameters from environment variables, variable names must be the same for every SDK

SDKs:

• Go
  • Explicit setting: Done, https://github.com/ydb-platform/ydb-go-sdk/pull/1194
  • Read setting from config file: In progress
  • Env vars: To be done
• Python
  • Explicit setting: Done, https://github.com/ydb-platform/ydb-python-sdk/pull/417
  • Read setting from config file: To be done
  • Env vars: To be done
• C++
  • Explicit setting: Done, https://github.com/ydb-platform/ydb/pull/4250
  • Read setting from config file: Done, https://github.com/ydb-platform/ydb/pull/5140
  • Env vars: To be done
• Java
  • Explicit setting: Done https://github.com/ydb-platform/ydb-java-sdk/issues/272
  • Read setting from config file: To be done
  • Env vars: To be done

YDB CLI: Done, https://github.com/ydb-platform/ydb/pull/5140

• Explicit setting of the parameters from the command line
• Prioritised env vars consideration
• Support in profiles