Databricks token validation in Okera

Question

How does Okera validate Databricks tokens passed to it?

Answer

To validate Databricks tokens passed to Okera, we have two options:

1. Okera requires the public key from DataBricks so we can verify the signature. Then, Okera will call the group resolution hook which does not need further authentication.  
2. Alternatively, you can build a REST endpoint that takes responsibility for verifying the token. This method has a REST endpoint that accepts the JWT and validates the token. Okera then performs user to group mappings based on the pertinent configuration values.