[simplesagar]

Summary

The Snowflake guide's Copy the OAuth credentials step read lowercase JSON keys (secret_values:oauth_client_id). SYSTEM$SHOW_OAUTH_CLIENT_SECRETS actually returns uppercase keys:

{"OAUTH_CLIENT_SECRET_2":"…","OAUTH_CLIENT_SECRET":"…","OAUTH_CLIENT_ID":"…"}

Snowflake JSON element names are case-sensitive, so the old query did more than look inconsistent: it returned NULL for both credentials. The lowercase casing came from the function reference's output table, which lists the names in lowercase and has no sample output.

Changes

• external.md: the query reads "OAUTH_CLIENT_ID" and "OAUTH_CLIENT_SECRET", and the copy steps name the uppercase result columns. The step also adds:
  • a recovery line for NULL cells,
  • a sanitized raw-output example,
  • a table mapping each Snowflake key to its Speakeasy field (OAUTH_CLIENT_SECRET_2 is marked not used).
• research.md: the credential facts, field mapping table, walkthrough, and Speakeasy values now use the returned casing. Provenance records the casing source and notes the lowercase discrepancy in the function reference.
• meta.yaml: adds the Snowflake Knowledge Base article as a provider-support source and re-stamps the function-reference and semi-structured-querying observations.

go/generated is not touched; the regen workflow syncs it after merge.

Sources

• Snowflake KB: How To Generate renewed access_token using Refresh_Token in OAuth2: first-party sample output with uppercase keys.
• Querying semi-structured data: "the column name is case-insensitive but element names are case-sensitive."
• The dbt Snowflake OAuth setup guide also reads secrets:"OAUTH_CLIENT_ID".

Verification

• go run ./cmd/lint-guide ../guides/snowflake reports no findings, and the go/internal/gen generator succeeds (the same check as guide-validate CI).
• No Snowflake account was available, so I ran the old and new queries in fakesnow, a DuckDB-backed Snowflake emulator, against the documented output string:
  • the old query returned (None, None);
  • the new query returned the client ID and primary secret under OAUTH_CLIENT_ID and OAUTH_CLIENT_SECRET.
• Still open: confirming against a live Snowflake account.

  

Fixes AIM-683

[linear-code]

AIM-683