Use OAuth to authenticate to bigquery

[mikeyoungyoung]

It would be great to use OAuth to authenticate to BQ. You could expand the user base that way without having to rely on someones ability to create a service account

Details

[zachrenwick]

I support this! I was going to try out evidence on some work data, but the lack of OAuth authentication means I'm blocked- not allowed to use service account credentials.

Seems like business/data analysts are key customer persona of evidence, and they will usually not have access to BigQuery service account keys needed to connect to the database.

[dbrtly]

I'm deleting service-account.json files at my employer. I look silly if I suggest adding one to be able to use evidence.

[dbrtly]

I would anticipate a similar setup to how we use dbt on localhost:

• install and initialise gcloud cli
• configure app to use oauth

That's it.

[dbrtly]

https://docs.getdbt.com/reference/warehouse-setups/bigquery-setup#local-oauth-gcloud-setup

[mcrascal]

Taking a look at this one.

Acceptance criteria as we understand it here:

1. A user who is setting up the connection from the local development environment can use this OAuth method
2. We have affordances for gcp expiring the token in development, and re-requesting authorization during development
3. We have documentation on how to set this up in local development, including reference to tutorial material for setting this up
4. We have documentation on how to set environment variables for deployment targets, given you've taken this approach in local development