Authentication in Druid?

[rohit kochar]

We are evaluating Druid for our real time processing requirements and were wondering if Druid supports any kind of user authentication?

We are interested in role based user authentication where certain user can only do read operations and others can do all operations??

Thanks

Rohit

[Himanshu]

Druid does not have built-in authentication/authorization, but it allows you to plugin arbitrary servlet filters on the http endpoints. You can write a extension with your "auth" filter that can authenticate the requests coming to druid.

You can find example of servlet filter extension in the unit tests at https://github.com/druid-io/druid/blob/master/server/src/test/java/io/druid/server/initialization/BaseJettyTest.java#L120
Also, you can take a look at https://github.com/himanshug/druid-pwd-provider-extn-sample to see how to write a druid extension.

--
You received this message because you are subscribed to the Google Groups "Druid User" group.
To unsubscribe from this group and stop receiving emails from it, send an email to druid-user+...@googlegroups.com.
To post to this group, send email to druid...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/druid-user/3d355ce5-33d0-43dc-9961-b7e49ad6fcc2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[charles.allen]

Note that even with authorization at the servlet level, there is no inherent security between datasources. Meaning that if you can query anything you can query everything.