Results of 1 - 10 of about 11 for auth (0.003 sec.)
- Security 13852
- This page covers Quack's security posture end to end: what the server exposes, what stays local, the role of a TLS-terminating reverse proxy, and the authentication / authorization callbacks the server runs on every connection and every que
.... Because of this, the extension ships with conservative defaults that prevent accidental exposure: The server requires an authentication token , which the client has to supply on every connection. Unless a token is passed explicitly or supplied by a...from the client side too. See Securing Quack with a Reverse Proxy for nginx and Caddy recipes (production and local-test). Authentication and Authorization For every database call, there are two distinct decisions to be made: Authentication : who is...Establishes identity, usually by having the caller supply a credential (e.g., a token, a password, a client certificate). Authorization : may they do this? Establishes whether an already authenticated caller is allowed to run a particular query, aga... - https://man.mtool.work/duckdb/2.0/quack/security.html
- PostgreSQL Extension and the Secret Manager 9548
- User credentials and other PostgreSQL database connection details can be stored using the DuckDB Secrets Manager . The following syntax can be used to create a secret: CREATE SECRET ( TYPE postgres, HOST '127.0.0.1', PORT 5432, DATABASE pos
...s are named after the corresponding connection options of libpq : HOST HOSTADDR PORT DBNAME USER PASSWORD PASSFILE REQUIRE_AUTH CHANNEL_BINDING CONNECT_TIMEOUT CLIENT_ENCODING OPTIONS APPLICATION_NAME FALLBACK_APPLICATION_NAME KEEPALIVES KEEPALIVES_I...VERSION KRBSRVNAME GSSLIB GSSDELEGATION SCRAM_CLIENT_KEY SCRAM_SERVER_KEY SERVICE TARGET_SESSION_ATTRS LOAD_BALANCE_HOSTS OAUTH_ISSUER OAUTH_CLIENT_ID OAUTH_CLIENT_SECRET OAUTH_SCOPE The following options are renamed to the corresponding keys: DATABA...options, the full connection URI can be specified instead: URI – connection URI Additional option is used for AWS RDS IAM authentication, see details in the next section below: AWS_RDS_SECRET – the name of the secret of type rds AWS RDS IAM Authenti... - https://man.mtool.work/duckdb/2.0/core_extensions/postgres/secrets.html
- HTTP(S) Support 9388
- With the httpfs extension, it is possible to directly query files over the HTTP(S) protocol. This works for all files supported by DuckDB or its various extensions, and provides read-only access. SELECT * FROM 'https://domain.tld/file.exten
...is also supported: SELECT * FROM read_parquet([ 'https://domain.tld/file1.parquet', 'https://domain.tld/file2.parquet' ]); Authenticating To authenticate for an HTTP(S) endpoint, create an HTTP secret using the Secrets Manager : CREATE SECRET http_au...th ( TYPE http, BEARER_TOKEN '⟨token⟩' ); Or: CREATE SECRET http_auth ( TYPE http, EXTRA_HTTP_HEADERS MAP { 'Authorization': 'Bearer ⟨token⟩' } ); HTTP Proxy DuckDB supports HTTP proxies. You... - https://man.mtool.work/duckdb/2.0/core_extensions/httpfs/https.html
- Cloudflare R2 Import 9033
- Prerequisites For Cloudflare R2, the S3 Compatibility API allows you to use DuckDB's S3 support to read and write from R2 buckets. This requires the httpfs extension , which can be installed using the INSTALL SQL command. This only needs to
...be run once. Credentials and Configuration You will need to generate an S3 auth token and create an R2 secret in DuckDB: CREATE SECRET ( TYPE r2, KEY_ID '⟨AKIAIOSFODNN7EXAMPLE⟩', SECRET '⟨wJalrXUtnFEMI/... - https://man.mtool.work/duckdb/2.0/guides/network_cloud_storage/cloudflare_r2_imp...
- Reference 9033
- This page lists the functions, settings, and log types exposed by the quack extension . For a tour of the protocol, start with the Overview . Function Reference Server Management Function Description quack_serve(⟨listen_uri⟩, ...) Start a s
...which defaults to quack:localhost when omitted. Localhost-only by default. Returns the listen URI, the listen URL, and the authentication token. See the quack_serve parameters below. quack_stop(listen_uri) Stop the server listening on listen_uri . qu...en on. allow_other_hostname BOOLEAN false Allow binding to a non-local hostname, e.g., 0.0.0.0 . token VARCHAR (generated) Authentication token clients have to present (minimum 4 characters). If omitted, the token of the default quack secret is used...se a Quack URI into a STRUCT(host, port, ipv6, ssl, url) entry. quack_check_token(sid, client_token, server_token) Default authentication callback, compares the client-supplied token against the server's stored token. quack_nop_authorization(sid, que... - https://man.mtool.work/duckdb/2.0/quack/reference.html
- Fastly Object Storage Import 8695
- Prerequisites For Fastly Object Storage, the S3 Compatibility API allows you to use DuckDB's S3 support to read and write from Fastly buckets. This requires the httpfs extension , which can be installed using the INSTALL SQL command. This o
...nly needs to be run once. Credentials and Configuration You will need to generate an S3 auth token and create an S3 secret in DuckDB: CREATE SECRET my_secret ( TYPE s3, KEY_ID '⟨AKIAIOSFODNN7EXAMPLE⟩', SECRET '⟨wJal... - https://man.mtool.work/duckdb/2.0/guides/network_cloud_storage/fastly_object_sto...
- DuckDB_% Metadata Functions 8695
- DuckDB offers a collection of table functions that provide metadata about the current database. These functions reside in the main schema and their names are prefixed with duckdb_ . The resultset returned by a duckdb_ table function may be
...identifier for the CRS. BIGINT crs_name A unique name that identifies the CRS. (Typically, this value is identical to the auth_name and auth_code , separated by a colon) VARCHAR auth_name The name of the authorithy that defined the CRS. VARCHAR auth..._code The code that defined the CRS within its authority. VARCHAR projjson The projjson encoding of the CRS. VARCHAR wkt2_2019 The Well-Known Text (WKT) representation of the... - https://man.mtool.work/duckdb/2.0/sql/meta/duckdb_table_functions.html
- Geometry Data Type 7663
- Name Description GEOMETRY Geospatial entity The GEOMETRY data type is used to store and manipulate geometric objects, such as points, lines, and polygons. The GEOMETRY type was part of the spatial extension but became a built-in data type i
...┬───────────────────────────────────────┐ │ database_name │ database_oid │ schema_name │ schema_oid │ crs_oid │ crs_name │ auth_name │ auth_code │ projjson │ wkt2_2019 │ │ varchar │ int64 │ varchar │ int64 │ int64 │ varchar │ varchar │ varchar │ varc... - https://man.mtool.work/duckdb/2.0/sql/data_types/geometry.html
- Catalogs 7326
- The iceberg extension supports attaching Iceberg REST Catalogs. Attaching a catalog is required for writing to Iceberg . Before attaching an Iceberg REST Catalog, you must install the iceberg extension by following the instructions located
...e Polaris , Lakekeeper , SeaweedFS and Google Cloud BigLake . Attaching an Iceberg REST Catalog Most Iceberg REST Catalogs authenticate via OAuth2. You can use the existing DuckDB secret workflow to store login credentials for the OAuth2 service. CRE...ATE SECRET iceberg_secret ( TYPE iceberg, CLIENT_ID '⟨admin⟩', CLIENT_SECRET '⟨password⟩', OAUTH2_SERVER_URI '⟨http://iceberg_rest_catalog_url.com/v1/oauth/tokens⟩' ); If you already have a Bearer token, you can pass it...event ambiguity URI '⟨https://rest_endpoint.com⟩' ); To see the available tables run SHOW ALL TABLES; A REST Catalog with OAuth2 authorization can also be attached with just an ATTACH statement. For the complete list of ATTACH and CREATE SECRET optio... - https://man.mtool.work/duckdb/2.0/core_extensions/iceberg/catalogs.html
- Quack Remote Protocol 7326
- The Quack extension turns a DuckDB instance into a server that other DuckDB instances (clients) can connect to over HTTP. This page covers the protocol at a glance and walks through basic usage on both sides of the wire. For the full list o
...f functions, settings, and logging knobs, see the Reference . For configuring TLS and authentication / authorization, see Security . For user guides, see Guides . Quack in a Nutshell In short, the Quack protocol a...rve() without it also listens on quack:localhost . quack_serve returns the listen URI, the HTTP URL, and, when the default authentication function is in use, the auth_token that clients need to connect. To choose the token yourself, pass the token pa...l catalog and query it by qualifying table names. quack_query(uri, query) : stateless querying . In all cases, you need to authenticate . The client picks plain HTTP automatically for local URIs ( localhost , 127.0.0.1 , ::1 ) and HTTPS otherwise. Ei... - https://man.mtool.work/duckdb/2.0/quack/overview.html
DuckDB 2.0 Documentation / man.mtool.work