Addressing security questions in the Iceberg REST specification

Hi all, Iceberg REST implementations, either accessible on the public internet or inside an organization, are usually being secured using appropriate authorization mechanisms. The Nessie team is looking at implementing the Iceberg REST specification and have some questions around the security

Re: Addressing security questions in the Iceberg REST specification

I do not know enough details about OAuth to make comments about this issue, but just regarding the statement "OAuth2 is the only mechanism supported by the Iceberg client", AWS Sigv4 auth is also supported, at least in the Java client implementation

Re: Addressing security questions in the Iceberg REST specification

I think Jack makes a good point with AWS SigV4 Authentication. I suppose, in REST Catalog implementations that support that auth method, the /v1/oauth/token Catalog REST endpoint is redundant. Cheers, Dmitri. On Thu, May 23, 2024 at 9:20 AM Jack Ye wrote: > I do not know enough details about OA

Iceberg Summit Video not accessible from non-registered users

Hi, My co-workers who did not register for the iceberg summit would like to check the videos. However, it seems the registration is closed hence they are not able to access the videos. Is there a way to release the video in a way non-registered users can view it? Thanks Pucheng

Re: Iceberg Summit Video not accessible from non-registered users

I heard the recordings will be uploaded to Youtube in a few weeks for public access. On Thu, May 23, 2024 at 5:46 PM Pucheng Yang wrote: > Hi, > > My co-workers who did not register for the iceberg summit would like to > check the videos. However, it seems the registration is closed hence they >