diff --git a/NEXT_CHANGELOG.md b/NEXT_CHANGELOG.md index 371e9845e..144619463 100755 --- a/NEXT_CHANGELOG.md +++ b/NEXT_CHANGELOG.md @@ -5,6 +5,8 @@ ### Breaking Changes ### New Features and Improvements +* Add support for fine-grained scopes in OAuth auth types: M2M and OIDC. +* Partial support for fine-grained scopes in U2M (`databricks-cli`) auth type. Last token minted is used by all profiles sharing the same host, regardless of scopes set in the profile. ### Bug Fixes @@ -18,4 +20,4 @@ * Add `SparseCheckout` field for [jobs.GitSource](https://pkg.go.dev/github.com/databricks/databricks-sdk-go/service/jobs#GitSource). * Add `DisableAutoOptimization`, `MaxRetries`, `MinRetryIntervalMillis` and `RetryOnTimeout` fields for [jobs.RunTask](https://pkg.go.dev/github.com/databricks/databricks-sdk-go/service/jobs#RunTask). * Add `DisableAutoOptimization`, `MaxRetries`, `MinRetryIntervalMillis` and `RetryOnTimeout` fields for [jobs.SubmitTask](https://pkg.go.dev/github.com/databricks/databricks-sdk-go/service/jobs#SubmitTask). -* Add `EdgegridAkamai` enum value for [catalog.CredentialType](https://pkg.go.dev/github.com/databricks/databricks-sdk-go/service/catalog#CredentialType). \ No newline at end of file +* Add `EdgegridAkamai` enum value for [catalog.CredentialType](https://pkg.go.dev/github.com/databricks/databricks-sdk-go/service/catalog#CredentialType). diff --git a/config/config.go b/config/config.go index 6405cdad4..2b0f66e90 100644 --- a/config/config.go +++ b/config/config.go @@ -141,9 +141,9 @@ type Config struct { // Scopes is a list of OAuth scopes to request when authenticating. // // WARNING: - // - This feature is still in development and may not work as expected - // - This feature is EXPERIMENTAL and may change or be removed without notice. - // - Do NOT use this feature in production environments. + // - Support in the `databricks-cli` auth type is limited as the U2M token + // cache currently does NOT support differentiated caching for scopes. + // There might be unexpected behaviour if multiple profiles have the same host. // // Notes: // - If Scopes is nil or empty, the default ["all-apis"] scope will be used for backward compatibility. @@ -151,7 +151,6 @@ type Config struct { // unless you set DisableOAuthRefreshToken to true. // - You cannot set Scopes via environment variables. // - The scopes list will be sorted in-place during configuration resolution. - // - The U2M token cache currently does NOT support differentiated caching for scopes. Scopes []string `name:"scopes" auth:"-"` // DisableOAuthRefreshToken controls whether a refresh token should be requested