{"repo":"DataZooDE/quack-oauth","free":true,"listed":false,"github":"https://github.com/DataZooDE/quack-oauth","clone":"git clone https://github.com/DataZooDE/quack-oauth.git","description":"Extensions providing OAuth and OpenID primitives for authentication and authorization for the DuckDB quack server.","language":"C++","stars":24,"topics":["authentication","authorization","duckdb-extension","oauth","openid","duckdb-quack"],"license":"MIT","category":"auth-billing-email","readme_excerpt":"quack-oauth DuckDB extension that adds OAuth 2.1 / OIDC authentication and a claims-driven authorization model to the [ duckdb-quack ][quack] client/server protocol. Replaces quack's stub auth callbacks with real JWKS-signature / RFC 7662 introspection / Google-style tokeninfo validation, then applies a policy (default-scope-based, or a SQL table inside your server's DuckDB) to gate ATTACH / SELECT / COPY operations. [quack]: https://github.com/duckdb/duckdb-quack Status : end-to-end green against live Keycloak — including real-client → real-server traffic through the quack wire protocol. JWKS, introspection, client credentials, refresh, device code, default policy, SQL-table policy, audit. Recorded-replay coverage for Microsoft Entra and Google. Quick install Install with two lines of DuckDB SQL (DuckDB must be started with the -unsigned flag, since the extension binary is not signed by the DuckDB Foundation): This pulls the right binary for your platform from our public distribution bucket (Linux amd64/arm64, macOS amd64/arm64, Windows amd64, plus the wasm32 trio). No build toolchain, no vcpkg, no submodules required. Building from source is documented at the bottom of this file for contributors and packagers. Why duckdb-quack lets one DuckDB instance serve another over a wire protocol. The protocol exposes two callback hooks — authentication and authorization — but ships stubs ( quack check token does a shared- secret comparison; quack nop authorization always allows). For","default_branch":null,"files":null,"tree":[],"storefront":"/r/DataZooDE","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/DataZooDE/quack-oauth/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}