Skip to content

feat: browser-based OAuth login flow (DX-118868)#15

Draft
aniket-s-kulkarni wants to merge 1 commit intodremio:mainfrom
aniket-s-kulkarni:aniket/DX-118868-oauth-browser-login
Draft

feat: browser-based OAuth login flow (DX-118868)#15
aniket-s-kulkarni wants to merge 1 commit intodremio:mainfrom
aniket-s-kulkarni:aniket/DX-118868-oauth-browser-login

Conversation

@aniket-s-kulkarni
Copy link
Copy Markdown
Collaborator

@aniket-s-kulkarni aniket-s-kulkarni commented Apr 14, 2026 •
edited by atlassian Bot
Loading

Summary

  • Adds design spec for browser-based OAuth login as an alternative to PAT authentication
  • OAuth Authorization Code + PKCE flow: discovery → DCR → browser auth → token storage → auto-refresh on 401
  • New commands: dremio login / dremio logout
  • Tokens stored in ~/.config/dremioai/oauth_tokens.yaml (mode 600)

Jira: DX-118868

Test plan

  • Phase 1: Unit tests for oauth.py and token_store.py
  • Phase 2: Tests for optional PAT / auth_method in auth.py
  • Phase 3: Tests for 401 intercept + token refresh in client.py
  • Phase 4: Integration tests for login/logout commands and setup wizard
  • Phase 5: Manual E2E test against real Dremio instance

🤖 Generated with Claude Code

@aniket-s-kulkarni @claude
docs: add design spec for browser-based OAuth login (DX-118868)
ee9c7b5 
Adds a design document covering the OAuth Authorization Code + PKCE flow
for CLI authentication as an alternative to PAT-based setup.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@aniket-s-kulkarni