summaryrefslogtreecommitdiffstats
path: root/yql/essentials/providers/common/structured_token
Commit message (Collapse)AuthorAgeFilesLines
* YQL-20095: Enable readability-isolate-declarationvitya-smirnov2026-04-131-6/+14
| | | | commit_hash:c180c2db4897962cb70063ffdc2ddcd21e5e3418
* support cloud auth for CREATE EXTERNAL DATA SOURCE (yql part)yumkam72026-03-233-0/+70
| | | | | | | | | | | | | structured token will require service_account_id and resource_id and AUTH_METHOD=IAM will require SERVICE_ACCOUNT_ID and INITIAL_TOKEN_SECRET[_NAME|_PATH] Initial token is used on EDS creation for resolving resource_id/cloud_id and verifying database access, then service_account_id and resource_id will be used for delegated token issue (about same as used for async replication) commit_hash:3eec95e2dea61654a1939bd92549222f752d9654
* YQL-20095: Enable modernize-pass-by-valuevitya-smirnov2026-03-022-3/+5
| | | | commit_hash:4939dfad654f18bb31e40711ee0c39063889f17b
* support current user auth in structured tokengrigoriypisar2026-01-293-0/+64
| | | | | | | Added new type of token into structured token: transient\_token This token has special reference (not secret name), which will be replaced in runtime on current user token (instead of token from secret) commit_hash:6a1f7bcee6f96c55d0056b07f0ff1b4337eee32c
* YQL-20086: Enable arcadia and bugprone checksvitya-smirnov2025-11-252-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch enables more Clang Tidy checks for the `yql/essentials` project. I chosen the policy to enable all checks by default because - It will keep us updated when new checks are become available in the DevTools whitelist. - You never know what check will be useful, even if it was not fired now. Why some checks from the https://nda.ya.ru/t/8QnKCVIO7NWhBD were disabled? - `arcadia-taxi-` checks are `userver`-specific. - `bugprone-bool-pointer-implicit-conversion` is not applicable to our codebase as we heavily used to it. - `bugprone-branch-clone` triggered on a code that is not obviously rewrittable and not so poor. - `bugprone-dynamic-static-initializers` are heavily used in our codebase especially in the translator. Static variables with dynamic initialization are so common, so refactor them is too hard and requires huge code rewritting to deliver some hardcoded configuration values via ctors, having them in a one place. - `bugprone-exception-escape` is useful check for programs where the care of exception safety is taken, but we a lot of places where exception can be thrown from the destructor or move-operator. I left a TODO in the `.clang-tidy` to fix this. Maybe will create a ticket. - `bugprone-lambda-function-name` appears when we throw an exception from the lambda. I think, that this is okay and do not see any options to fix it. - `bugprone-macro-parentheses` had false positives at `YQL_ENSURE` second argument and also broke some code, by surrounding `A` at `template <class A>`. - `bugprone-misplaced-widening-cast`, `bugprone-narrowing-conversions`, `bugprone-signed-char-misuse` are disabled because checking arithmetics correctness is hard and non-trivial. I am not sure that it worth spending a lot of time on it as everything seems to work well :o) - `bugprone-reserved-identifier` was triggered on some harmless identifier in computation, so I decided just to turn this off, rather than argue with someone. - `bugprone-suspicious-enum-usage` happend on Arcadia HTTP client usage. Do not think that it is worth to argue with Arcadia HTTP client code owners. - `bugprone-suspicious-memory-comparison` happened in some compuration test. I just decided to trust low-level code authors. - `bugprone-too-small-loop-variable` seems not really a problem and lets you safe some symbols on `static_cast`s. - `bugprone-sizeof-expression` had so many false positives at computation. - `bugprone-unchecked-optional-access` a good check, but optionals are dereferenced everywhere in our codebase. Of course, in a perfect world near each of such dereference should be an assertion with comment why it is a valid action, because when static analysis can not infer that the value is non-null, then it is not an obvious thing for a human also. But we a too far from such code quality now. - `bugprone-undefined-memory-manipulation` is interesting. It argued on some `memcpy` at computation. There was some `UnboxedValues` array and this objects have some logic of memory marking and releasing under an `NDEBUG`. I added a TODO to check this. Maybe will create a ticket. - `bugprone-unhandled-self-assignment` has false positives on non-owning objects such as iterators. commit_hash:c0c0de6b157bf095eb681bdea55ada47845de814
* YQL-20086 invert flagvvvv2025-10-102-4/+0
| | | | commit_hash:a6b640bc576263b62884a0b4187ba79c893e13d9
* YQL-20086 providersvvvv2025-10-077-223/+224
| | | | commit_hash:a675bf6d0296252a9fe2303b8f0a9e88c923087d
* Add function ComposeStructuredTokenJsonForBasicAuthvitalyisaev2025-10-013-1/+32
| | | | commit_hash:46339acbcddf3069f0b2560b892667395f953af7
* YQL-20086 providersvvvv2025-06-194-62/+62
| | | | commit_hash:3f4b66a979b9b87af7cdfd80f139eb132532e910
* Moved other yql/essentials libs YQL-19206vvvv2024-11-078-0/+651
init commit_hash:7d4c435602078407bbf20dd3c32f9c90d2bbcbc0