What is the recommended way for authentication and authorization for programmatic query access to a pinot table? We are thinking of having multiple tables per tenant and would like to be able to control access at a table level. What is the recommended mechanism for access logging?

Afaik, OSS has basic auth only cc: @Alexander Pucher

Has anyone figured out a way to configure jwt token based auth? At this point, I am thinking of having a rest api that validates jwt token, and issue the sql query provided in the body of the api call on behalf of the user and return the response back. The thin api layer also makes sure that the user is authorized to query the table. Unfortunately this doesn't allow us to use oss sdk for programmatic access. Is this what folks are doing? Any suggestions or feedback is highly appreciated.

Auth is defined as an interface in Pinot. You can plug-in your own implementation there, instead of creating a thin layer

Thanks. I'll look into it.