[[nebius IAM integration]]

[UgnineSirdis]

Server

• Support nb-cloud iam integration (authorize/authenticate): Done, Support Nebius IAM in server #2495

Support RFC 8693 in SDK and CLI

Need to support https://www.rfc-editor.org/rfc/rfc8693 for token exchange, with two options:

• Explicit parameter setting using classes to construct JWT token and OAuth2 Token Exchange credentials provider for YDB driver
• Read parameters from environment variables, variable names must be the same for every SDK

SDKs:

• Go
  • Explicit setting: Done, Implement OAuth 2.0 Token Exchange credentials provider in Go SDK ydb-go-sdk#1194
  • Read setting from config file: Done, Load OAuth 2.0 token exchange credentials provider from config file ydb-go-sdk#1321
  • Env vars: Done, Implement creation of OAuth 2.0 token exchange credentials from env ydb-go-sdk-auth-environ#5
• Python
  • Explicit setting: Done, Implement OAuth 2.0 Token Exchange credentials provider ydb-python-sdk#417
  • Read setting from config file: Done, Load OAuth 2.0 token exchange credentials provider from config file ydb-python-sdk#453
  • Env vars: Done, Load OAuth 2.0 token exchange credentials provider from config file ydb-python-sdk#453
• C++
  • Explicit setting: Done, Implement OAuth 2.0 Token Exchange credentials provider in C++ SDK #4250
  • Read setting from config file: Done, OAuth2 token exchange in ydb cli #5140
  • Env vars: Done, OAuth2 token exchange in ydb cli #5140
• Java
  • Explicit setting: Done, Add support of OAuth 2.0 Token Exchange ydb-java-sdk#272
  • Read setting from config file: Done, Load OAuth 2.0 token exchange credentials provider from config file ydb-java-sdk#296
  • Env vars: In progress

YDB CLI: Done, #5140

• Explicit setting of the parameters from the command line
• Prioritised env vars consideration
• Support in profiles

Documentation

• Write about loading provider from config file (methods)