[Java][FlightSQL] In authentication, how does flight server get the IP/Hostname of ADBC client

[xinyiZzz]

Describe the usage question you have. Please include as many useful details as possible.

Now I implement CallHeaderAuthenticator in Java, and Override AuthResult authenticate(CallHeaders incomingHeaders).

xxx implements CallHeaderAuthenticator {
@Override
    public AuthResult authenticate(CallHeaders incomingHeaders) {
    }
}

Then, BasicCallHeaderAuthenticator can decode username and password from incomingHeaders. I implements BasicCallHeaderAuthenticator.CredentialValidator and Override AuthResult validate(String username, String password) to complete authentication of username and password.

xxx implements BasicCallHeaderAuthenticator.CredentialValidator {
@Override
    public AuthResult validate(String username, String password) {
    }
}

But in my database(Apache Doris), the client's IP will also participate in authentication, so is there a way to get the ADBC client's IP in Flight Server?

Thanks for your help.

Component(s)

FlightRPC

[xinyiZzz]

I hope for help, thanks~

[aiguofer]

We currently accomplish this with a gRPC ServerInterceptor to add it to the RequestContext (in Kotlin):

class RequestContextKeys {
    companion object {
        const val AUTHORITY = "authority"
        const val SCHEME = "scheme"
        const val PORT = "port"
        const val INCOMING_URL = "incomingUrl"
        const val REQUEST_ID = "request_id"
    }
}

/*
 * Simple interceptor to add more metadata from the call to the RequestContext.
 */
class RequestContextInterceptor : ServerInterceptor {
    override fun <ReqT : Any, RespT : Any> interceptCall(
        call: ServerCall<ReqT, RespT>,
        headers: Metadata,
        next: ServerCallHandler<ReqT, RespT>
    ): ServerCall.Listener<ReqT> {
        RequestContextAdapter.REQUEST_CONTEXT_KEY.get()?.also { requestContext ->
            val authority =
                call.authority ?: throw InternalServiceException("Could not find authority")
            val scheme = if (authority.startsWith("localhost")) "http" else "https"
            val port =
                when {
                    authority.contains(":") -> authority.substringAfter(":")
                    scheme == "https" -> "443"
                    else -> throw InternalServiceException("Could not infer port number")
                }
            val host = authority.substringBefore(":")

            requestContext.put(RequestContextKeys.AUTHORITY, authority)
            requestContext.put(RequestContextKeys.SCHEME, scheme)
            requestContext.put(RequestContextKeys.PORT, port)
            requestContext.put(RequestContextKeys.INCOMING_URL, "$scheme://$host:$port")
        }
        return next.startCall(call, headers)
    }
}

We can then access it anywhere using:

val requestContext = RequestContextAdapter.REQUEST_CONTEXT_KEY.get()
requestContext.get(RequestContextKeys.INCOMING_URL)

[aiguofer]

Oh sorry, I just realized you're talking about the IP/Host of the client, not the one they requested. However, you could follow a similar pattern to add w/e info you want from the call. You can get the caller IP: https://stackoverflow.com/questions/36124618/how-to-get-client-ip-from-request-metadata-with-grpc-java

[xinyiZzz]

Oh sorry, I just realized you're talking about the IP/Host of the client, not the one they requested. However, you could follow a similar pattern to add w/e info you want from the call. You can get the caller IP: https://stackoverflow.com/questions/36124618/how-to-get-client-ip-from-request-metadata-with-grpc-java

Thanks! @aiguofer, I'll try it.