LoginSign Up
← Back to all sparks
S

snowflakeauth

ANALYTICS
Velocity0.0

Authentication Helpers for 'Snowflake'

github.com/posit-dev/snowflakeauth ↗

Eight months from first release to keyring caching and workload identity.

authenticationsnowflakeoidckeyringr-package
◆Current state
snowflakeauth handles authentication to Snowflake from R, reading the same connections.toml and config.toml files the Python connector and Snowflake CLI use. Since its June 2025 first release it has added JWT key-path configuration, externalbrowser login, on-disk connection caching in the system keyring, and workload identity authentication for the OIDC provider. Roughly a release per quarter, each adding a login method the surrounding ecosystem already assumed.
◆Where it's heading
The package is closing the gap between R and Snowflake's other first-party clients one authentication mode at a time, moving from key-pair through interactive browser login to machine identity. Workload identity for OIDC is the notable direction: it targets code running in CI and managed compute where no human and no stored secret is present. A parallel thread of work on error messages, three separate fixes in 0.2.1 alone, suggests the maintainers treat confusing configuration failures as a real defect class.
◆Prediction
Expect the remaining Snowflake authentication modes to keep arriving, with workload identity likely extended past the single OIDC provider it currently supports.

◆Recent moves

  1. 5mo ago

    Keyring connection caching and OIDC workload identity added

    Adds on-disk connection caching through the system keyring and workload identity authentication for the OIDC provider. The furthest step yet toward unattended machine authentication, though only one provider is covered.

    View source ↗
  2. 7mo ago

    externalbrowser login supported; config error messages rewritten

    Adds interactive browser authentication and rewrites three classes of misleading configuration error. The error-message work is a recurring theme for a package whose failures are almost all setup failures.

    View source ↗
  3. 11mo ago

    JWT key paths and verbose connection logging

    Promotes jose and openssl to required dependencies, accepts private_key_path for JWT authentication, and adds verbose connection loading. Fills in the key-pair path that the initial release left partly configured.

    View source ↗
  4. 1y ago

    First release, reading Snowflake's own connections.toml files

    The initial release, deliberately compatible with the configuration files the Python connector and Snowflake CLI already use. That compatibility choice is what every later release builds authentication modes on top of.

    View source ↗