Skip to content

Save auth login profiles with the account's primary (SPOG) URL #6854

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Peter-Feng-32 wants to merge 15 commits into
base: main
Choose a base branch
from
+1,472 −27
Open

Save auth login profiles with the account's primary (SPOG) URL #6854

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
3897e85
Look up account primary provisioned (SPOG) URL during auth login
Sep 14, 2026
37e7288
Bound the SPOG provisioned-URL lookup with a 30s timeout
Sep 28, 2026
dadeeb9
Resolve SPOG URL for account selection in the discovery login flow
Sep 28, 2026
5500429
Guard the direct-path SPOG rewrite on a classic account host
Sep 28, 2026
21e9e23
Switch workspace logins to the account's primary (SPOG) URL
Oct 7, 2026
5cc4e9c
Log in through the primary (SPOG) URL after browser workspace selection
Oct 7, 2026
fb1b0f3
Give SPOG workspace profiles workspace-scoped tokens
Oct 8, 2026
1c34f08
Only switch to workspace OAuth from ?o= during auth login
Oct 8, 2026
94c04b7
Note that workspace-scoped SPOG profiles need this CLI version
Oct 8, 2026
6aeaf85
Keep account-level tokens for SPOG profiles
Oct 8, 2026
783c630
Only switch to the primary (SPOG) URL during auth login
Oct 8, 2026
91e3613
Test the account-host SPOG switch and the second login's options
Oct 8, 2026
220231a
Fall back to the workspace host when the SPOG login fails
Oct 8, 2026
4190b57
Merge origin/main into spog-login-poll
Oct 8, 2026
8beac8e
Give SPOG workspace profiles workspace-scoped tokens
Oct 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .nextchanges/cli/spog-provisioned-url.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
* `databricks auth login` now saves profiles with the account's primary (SPOG) URL. Account logins look it up via `/api/2.0/accounts/{account_id}/provisioned-urls/primary`. Workspace logins (via `--host` or the browser flow) look it up via the workspace's `/.well-known/databricks-config?include_primary_url=true` and keep a workspace-scoped token, as does `--host <spog>` with `?o=<workspace-id>` or `--workspace-id`. Such profiles record the workspace's OAuth metadata URL in `discovery_url` and need this CLI version or newer: older versions can't refresh their token and ask you to run `databricks auth login` again. ([#6854](https://github.com/databricks/cli/pull/6854))
309 changes: 287 additions & 22 deletions cmd/auth/login.go
View file
Open in desktop

Large diffs are not rendered by default.

Loading
Loading