strata-cli 0.1.7 → 0.1.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 17bd3f24bcacdbae3b7dce1d9af614e28d94d31ced0a3f9d491dccc6a0a0cc9f
-  data.tar.gz: 4ee0c2de9c22a06e6ac0c91e74f04a6a0dd9e76edcdbd2ea5f07c0b028f7fed2
+  metadata.gz: e87ebe6383ea4dea3c2b0a57d47bc8a70cdbad507bcb9233614fb33161f5e71a
+  data.tar.gz: c343df7299ff6959a73e31e68ca3cc959c5e9596dceb671be4d25868c9c04a5e
 SHA512:
-  metadata.gz: 5932b6185ba4683a5a610866dd8bccc22216cf8974a6d03dee14bd0df843c0bb4a909fc679f9e152273059e8745e94b689da2a0688c13be44bd041953110a1cb
-  data.tar.gz: d8d3440b5b02d90bce6c1be4d0f8dd7f18129c45f2635a4119b8c55f23c1393457764479a27c89c2c06e9c377b1d5c251527ddeb6d96cd48434519baf0698022
+  metadata.gz: 1629834279f085c6ef45b74f057f732e722fea8567a98d3ac48e2ae46ce51e0aff46219f41e392940198b5507a8c22d17b20851724c61136ba29d3837f8647b1
+  data.tar.gz: 7b37420ff55bdb3910e702e1cb349741d4aa629a67e14b8bb3651189d2d840916a92ac0dbf7e54473ebcc82c71191d3af702a4eb958252a03f97c3919510fd70

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 ## [Unreleased]
 
+## [0.1.8] - 2026-04-28
+
+### Changed
+
+- **Snowflake authentication**: Removed OAuth flow from CLI prompts and templates; Snowflake now supports `pat` and `kp` only.
+- **Databricks authentication**: Standardized on OAuth M2M (service principal) only; removed U2M flow and auth-mode selection prompt.
+- **CLI credential UX**: Added explicit guidance during Databricks credential collection that service principal `oauth_client_id` and `oauth_client_secret` are expected.
+
 ## [0.1.7] - 2026-04-23
 
 ### Added

data/README.md

@@ -342,14 +342,37 @@ my_snowflake:
   schema: PUBLIC
   role: ACCOUNTADMIN
   auth_mode: pat
+
+my_databricks:
+  adapter: databricks
+  name: Databricks Warehouse
+  host: workspace.cloud.databricks.com
+  warehouse: warehouse_id
+  catalog: main
+  schema: default
+  auth_mode: oauth_m2m
+```
+
+### Databricks authentication
+
+Databricks now requires explicit `auth_mode`.
+
+If you already have Databricks datasources, update `datasources.yml`:
+
+```yaml
+my_databricks:
+  adapter: databricks
+  auth_mode: oauth_m2m
 ```
 
+Use service principal credentials and run `strata ds auth my_databricks` to save `oauth_client_id` and `oauth_client_secret` in `.strata`.
+
 ## Supported Data Warehouse Adapters
 
 - **PostgreSQL** - Full support
 - **MySQL** - Full support
 - **SQL Server** - Full support (including Azure)
-- **Snowflake** - Full support (PAT, Key Pair, OAuth)
+- **Snowflake** - Full support (PAT, Key Pair)
 - **Athena** - AWS Athena support
 - **Trino** - Trino/Presto support
 - **DuckDB** - Embedded analytics database

data/lib/strata/cli/credentials.rb

@@ -16,8 +16,9 @@ module Strata
 
       attr_reader :adapter, :credentials
 
-      def initialize(adapter)
+      def initialize(adapter, datasource_config: nil)
         @adapter = adapter.downcase.strip
+        @datasource_config = datasource_config || {}
         @prompt = TTY::Prompt.new
       end
 
@@ -30,7 +31,7 @@ module Strata
 
         case adapter
         when "snowflake"
-          auth_mode = @prompt.select("Authentication mode:", %w[pat kp oauth], default: "pat")
+          auth_mode = @prompt.select("Authentication mode:", %w[pat kp], default: "pat")
           credentials["auth_mode"] = auth_mode
 
           case auth_mode
@@ -39,18 +40,13 @@ module Strata
           when "kp"
             credentials["username"] = @prompt.ask("Enter Username:")
             credentials["private_key"] = @prompt.ask("Enter Private Key Absolute Path:")
-          when "oauth"
-            credentials["oauth_client_id"] = @prompt.ask("OAuth Client ID:")
-            credentials["oauth_client_secret"] = @prompt.ask("OAuth Client Secret:")
-            credentials["oauth_redirect_uri"] = @prompt.ask("OAuth Redirect URI:", default: "https://localhost:3420/callback")
-            oauth_scope = @prompt.ask("OAuth Scope (optional):")
-            credentials["oauth_scope"] = oauth_scope unless oauth_scope.empty?
           end
         when "athena"
           credentials["access_key_id"] = @prompt.ask("AWS Access Key ID:")
           credentials["secret_access_key"] = @prompt.ask("AWS Secret Access Key:")
         when "databricks"
-          credentials["oauth_client_id"] = @prompt.ask("OAuth Client ID (service principal):")
+          credentials["auth_mode"] = "oauth_m2m"
+          credentials["oauth_client_id"] = @prompt.ask("OAuth Client ID:")
           credentials["oauth_client_secret"] = @prompt.ask("OAuth Client Secret:")
         else
           if required?

data/lib/strata/cli/generators/templates/adapters/databricks.yml

@@ -33,10 +33,11 @@
   # Optional: default schema within that catalog (often "default")
   schema: default
 
-  # OAuth M2M (service principal) is implicit for this adapter in dwh.
-  # Do not set auth_mode here.
+  # Required: Authentication mode
+  # oauth_m2m: service principal (client_credentials)
+  auth_mode: oauth_m2m
   #
-  # Set credentials securely (oauth_client_id + oauth_client_secret) via:
+  # Set credentials securely via:
   #   `strata ds auth <%= @ds_key %>`
   # or they are collected when you run `strata datasource add databricks`.
   #

data/lib/strata/cli/generators/templates/adapters/snowflake.yml

@@ -33,15 +33,9 @@
   # Optional: Role name
   role: ACCOUNTADMIN
 
-  # Required: Authentication mode - one of: pat, kp, oauth
+  # Required: Authentication mode - one of: pat, kp
   # pat: personal_access_token
   # kp: key pair (requires username)
-  # oauth: OAuth (requires setup on snowflake to enable)
-  #   Additional required params
-  #   oauth_client_id: <MYCLIENTID>
-  #   oauth_cleint_secret: <MYCLIENTSECRET>
-  #   oauth_redirect_uri: https://localhost:3420/callback
-  #   oauth_scope: <SCOPE> # optional
   auth_mode: pat
 
   # For Personal Access Token (PAT) authentication:
@@ -53,17 +47,3 @@
   # For Key Pair (KP) authentication, uncomment and set:
   # username: john_doe
   # private_key: /path/to/private_key.pem
-
-  # For OAuth authentication, additional setup required.
-  # https://docs.snowflake.com/en/user-guide/oauth-custom
-  #
-  # Securely save tokens in .strata by running:
-  #   `strata ds auth <%= @ds_key %>`
-  #
-  # This would only work if your snowflake setup allows modification
-  # of the redirect url. Otherwise, you can get access_token and 
-  # refresh_token by other means. Then add it to .strata like so:
-  #
-  # access_token: wrwerjwrljwer
-  # refresh_token: erwerewrwer
-  # expires_at: <%= Time.now %>

data/lib/strata/cli/sub_commands/datasource.rb

@@ -86,7 +86,7 @@ module Strata
           # Collect adapter-specific fields
           adapter_fields(adapter).each do |field, default_value|
             config[field] = if field == "auth_mode"
-              prompt.select("  Authentication mode:", %w[pat kp oauth], default: default_value)
+              default_value
             elsif %w[ssl azure].include?(field)
               prompt.yes?("  #{field.tr("_", " ").capitalize}?", default: default_value)
             elsif field == "port"
@@ -103,11 +103,14 @@ module Strata
           say "\n✔ Added #{adapter} config to datasources.yml", :green
 
           # Automatically collect credentials if required
-          creds = Credentials.new(adapter)
+          creds = Credentials.new(adapter, datasource_config: config)
           if creds.required?
             say "\n  Now let's set up credentials:\n", :yellow
             say "  Note: Credentials are stored securely in the local .strata file", :cyan
             say "  and are NOT committed to the repository (ensured by .gitignore).", :cyan
+            if adapter == "databricks"
+              say "  Databricks uses OAuth M2M with service principal credentials (client ID + client secret).", :cyan
+            end
             say ""
             creds.collect
             creds.write_local(ds_key, self)
@@ -137,7 +140,7 @@ module Strata
           end
 
           adapter = datasources[ds_key]["adapter"]
-          creds = Credentials.new(adapter)
+          creds = Credentials.new(adapter, datasource_config: datasources[ds_key])
 
           unless creds.required?
             say "Credentials not required for #{adapter} adapter.", :yellow
@@ -147,6 +150,9 @@ module Strata
           say "\nEnter credentials for #{ds_key}", :red
           say "  Note: Credentials are stored securely in the local .strata file", :cyan
           say "  and are NOT committed to the repository (ensured by .gitignore).", :cyan
+          if adapter == "databricks"
+            say "  Databricks uses OAuth M2M with service principal credentials (client ID + client secret).", :cyan
+          end
           say ""
           creds.collect
           creds.write_local(ds_key, self)
@@ -343,7 +349,8 @@ module Strata
               "host" => "workspace-id.cloud.databricks.com",
               "warehouse" => "warehouse_id",
               "catalog" => "main",
-              "schema" => "default"
+              "schema" => "default",
+              "auth_mode" => "oauth_m2m"
             }
           else
             {}

data/lib/strata/cli/version.rb

@@ -2,6 +2,6 @@
 
 module Strata
   module CLI
-    VERSION = "0.1.7"
+    VERSION = "0.1.8"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: strata-cli
 version: !ruby/object:Gem::Version
-  version: 0.1.7
+  version: 0.1.8
 platform: ruby
 authors:
 - Ajo Abraham