Results of 1 - 8 of about 8 for authorization (0.002 sec.)
- Security 13320
- This page covers Quack's security posture end to end: what the server exposes, what stays local, the role of a TLS-terminating reverse proxy, and the authentication / authorization callbacks the server runs on every connection and every que
...e too. See Securing Quack with a Reverse Proxy for nginx and Caddy recipes (production and local-test). Authentication and Authorization For every database call, there are two distinct decisions to be made: Authentication : who is the caller? Establishes iden...tity, usually by having the caller supply a credential (e.g., a token, a password, a client certificate). Authorization : may they do this? Establishes whether an already authenticated caller is allowed to run a particular query, against a pa...rticular set of objects. Quack runs these as two separate hooks: the authentication when a client first connects and the authorization before each query the client wants to issue. Default Configuration Both hooks ship with built-in defaults that are suitabl... - https://man.mtool.work/duckdb/2.0/quack/security.html
- Iceberg Options 10338
- This page lists the options of the iceberg extension: the parameters accepted by the Iceberg functions , the options of the ATTACH and CREATE SECRET statements used to connect to a catalog , and the global settings. ATTACH Options To make a
...Iceberg Catalog type, sets certain default parameters. Cannot be combined with URI (or its deprecated alias ENDPOINT ) or AUTHORIZATION_TYPE . AUTHORIZATION_TYPE VARCHAR OAUTH2 OAUTH2 , SIGV4 , NONE The Authorization layer of the Iceberg Catalog to attach to...d for connecting to these catalogs. S3 Tables The parameters set by using the S3_TABLES ENDPOINT_TYPE are: Parameter Value AUTHORIZATION_TYPE SIGV4 SIGV4_REGION The REGION section of the ARN provided as the ATTACH path. URI s3tables.⟨region⟩.amazonaws.com/ice...be set to the path of an existing S3/AWS SECRET . The parameters set by using the GLUE ENDPOINT_TYPE are: Parameter Value AUTHORIZATION_TYPE SIGV4 URI glue.⟨region⟩.amazonaws.com/iceberg using the region from the found SECRET REMOVE_FILES_ON_DELETE false (un... - https://man.mtool.work/duckdb/2.0/core_extensions/iceberg/iceberg_options.html
- Reference 8621
- This page lists the functions, settings, and log types exposed by the quack extension . For a tour of the protocol, start with the Overview . Function Reference Server Management Function Description quack_serve(⟨listen_uri⟩, ...) Start a s
...er_token) Default authentication callback, compares the client-supplied token against the server's stored token. quack_nop_authorization(sid, query) Default authorization callback, always allows. quack_clear_cache() Clear the cache. This also forces the DuckD...s All settings are regular DuckDB session / global options. Set with SET ⟨name⟩ = ⟨value⟩ or SET GLOBAL . Authentication / Authorization The auth callbacks are evaluated on a fresh server-side connection every time, so the two settings below are global-scoped...of a 3-arg scalar function (sid, client_token, server_token) -> BOOLEAN used by the server to authenticate clients. quack_authorization_function VARCHAR quack_nop_authorization Name of a 2-arg scalar function (sid, query) -> BOOLEAN (or -> VARCHAR , returnin... - https://man.mtool.work/duckdb/2.0/quack/reference.html
- Catalogs 8368
- The iceberg extension supports attaching Iceberg REST Catalogs. Attaching a catalog is required for writing to Iceberg . Before attaching an Iceberg REST Catalog, you must install the iceberg extension by following the instructions located
...ambiguity URI '⟨https://rest_endpoint.com⟩' ); To see the available tables run SHOW ALL TABLES; A REST Catalog with OAuth2 authorization can also be attached with just an ATTACH statement. For the complete list of ATTACH and CREATE SECRET options, see the Ice...cn . For such regions, attach the catalog by passing an explicit URI (with the correct host for your region) together with AUTHORIZATION_TYPE 'sigv4' , instead of using ENDPOINT_TYPE . To check whether the attachment worked, list all tables: SHOW ALL TABLES;..., connect to the catalog: ATTACH '⟨account_id⟩' AS glue_catalog ( TYPE iceberg, URI 'glue.⟨region⟩.amazonaws.com/iceberg', AUTHORIZATION_TYPE 'sigv4' ); Or alternatively: ATTACH '⟨account_id⟩' AS glue_catalog ( TYPE iceberg, ENDPOINT_TYPE 'glue' ); Warning As... - https://man.mtool.work/duckdb/2.0/core_extensions/iceberg/catalogs.html
- Azure Extension 8205
- The azure extension lets DuckDB read and write files in Azure Blob Storage and Azure Data Lake Storage (ADLS) Gen2. Installing and Loading The azure extension will be transparently autoloaded on first use from the official extension reposit
...ist of header names (case-insensitive) whose values are redacted in the HTTP log, for both requests and responses. VARCHAR Authorization azure_read_transfer_concurrency Maximum number of threads the Azure client can use for a single parallel read. Values abov...ckdb_logs_parsed('HTTP'); Logged requests show the DuckDB User-Agent header. The values of the sig query parameter and the Authorization header are replaced by REDACTED . To change what is redacted, set azure_http_logging_redact_query_params and azure_http_lo...gging_redact_headers . A new value replaces the default list, so include sig or Authorization if you still want them redacted: SET azure_http_logging_redact_headers = 'Authorization;x-ms-date'; Warning The Azure exte... - https://man.mtool.work/duckdb/2.0/core_extensions/azure.html
- HTTP(S) Support 7862
- With the httpfs extension, it is possible to directly query files over the HTTP(S) protocol. This works for all files supported by DuckDB or its various extensions, and provides read-only access. SELECT * FROM 'https://domain.tld/file.exten
...SECRET http_auth ( TYPE http, BEARER_TOKEN '⟨token⟩' ); Or: CREATE SECRET http_auth ( TYPE http, EXTRA_HTTP_HEADERS MAP { 'Authorization': 'Bearer ⟨token⟩' } ); HTTP Proxy DuckDB supports HTTP proxies. You can add an HTTP proxy using the Secrets Manager : CRE... - https://man.mtool.work/duckdb/2.0/core_extensions/httpfs/https.html
- Securing DuckDB 7735
- DuckDB is a powerful analytical database engine. It can read and write files, access the network, load extensions, and use system resources. Like any powerful tool, these capabilities require appropriate configuration when working with sens
...her_hostname . Note that duckdb -serve stores its token in a persistent (unencrypted) quack secret. For authentication and authorization hooks, see the Quack security page . Reporting Vulnerabilities If you discover a potential vulnerability, please report it... - https://man.mtool.work/duckdb/2.0/operations_manual/securing_duckdb/overview.htm...
- Quack Remote Protocol 7735
- The Quack extension turns a DuckDB instance into a server that other DuckDB instances (clients) can connect to over HTTP. This page covers the protocol at a glance and walks through basic usage on both sides of the wire. For the full list o
...f functions, settings, and logging knobs, see the Reference . For configuring TLS and authentication / authorization, see Security . For user guides, see Guides . Quack in a Nutshell In short, the Quack protocol and its interactions work a... - https://man.mtool.work/duckdb/2.0/quack/overview.html
PREV
1
NEXT
DuckDB 2.0 Documentation / man.mtool.work