Propagate user token when connecting with OIDC to databases

[datasc24]

Hello,

I set up Superset to login with keycloak and i would like to propagate the token obtained for the user when using sql lab or displaying dashboard to backend databases to authenticate the user with the same token.

Is there a simple way to do this with Superset ?

[dosubot[bot]]

Currently, there isn't a built-in feature in Superset to directly propagate the OIDC token to backend databases as an HTTP header during SQL Lab queries or dashboard rendering. Superset's configuration does not natively support modifying database connection requests to include custom HTTP headers or tokens ^[1][2].

However, you can explore using the SQL_QUERY_MUTATOR function to modify SQL queries before they are sent to the database. This function allows you to intercept and alter the SQL, which might be a starting point for implementing custom logic to handle token propagation, although it doesn't directly support adding HTTP headers ^[3].

For a more integrated solution, you might need to implement custom middleware or extend Superset's functionality to handle token propagation, but this would require significant customization and development effort.

To continue talking to Dosu, mention @dosu.

---

^{Help Dosu learn! Give it feedback: Great Response | Irrelevant Answer | Incorrect Sources | Too Verbose | Hallucination | Other}