Skip to content

fix(flightsql): protect configured authorization metadata - #1153

Open
fallintoplace wants to merge 1 commit into
apache:mainfrom
fallintoplace:fix/flightsql-auth-params
Open

fix(flightsql): protect configured authorization metadata#1153
fallintoplace wants to merge 1 commit into
apache:mainfrom
fallintoplace:fix/flightsql-auth-params

Conversation

@fallintoplace

Copy link
Copy Markdown
Contributor

What

The Flight SQL credential metadata was populated with configured authentication and then overwritten by arbitrary connection parameters. A parameter named authorization could replace a configured token or basic credential. Parameters are now copied first and configured authentication is applied last.

Test

  • go test ./arrow/flight/flightsql/driver -run TestRequestMetadataKeepsConfiguredAuthorization -count=1

@fallintoplace
fallintoplace marked this pull request as ready for review August 8, 2026 15:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant