cache passcode for python snowflake connector

Question

To connect with my snowflake db, I authenticate using a passcode (with Duo) since MFA is enabled

con = snowflake.connector.connect(
    user='',
    password='',
    account='',
    warehouse='',
    database='',
    schema='',
    passcode='011415'
)

However, every time, I want to run my python script, I need to refresh the passcode from the Duo app and re-enter the new one in the script.

Is there any way I can avoid repeating the step everytime? Can the passcode be cahced?

For example, when I use Dbeaver, it sends a notification to my Duo app and once I approve it, I dont need to re-authenticate there for the next 24 hours, unless I turn off the computer of course.

PJGaetan · Accepted Answer · 2023-06-06 23:37:35Z

2

I was looking for an answer as well, if anyone is looking for it in the future.

This solution is not in the official doc, but you can use client_request_mfa_token. DBT uses the same kind of pattern for their snowflake connector.

Note that as per the doc, you have a 4 hour caching period max.

With certain Snowflake-provided clients, you can cache MFA tokens for up to four hours. For more information, see Using MFA Token Caching to Minimize the Number of Prompts During Authentication — Optional.

kawrgs = {
    "authenticator": "externalbrowser",
    "client_request_mfa_token": True,
    # ...

}
with snowflake.connector.connect(**kawrgs):
    pass

answered Jun 6, 2023 at 23:37

PJGaetan

462 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Lukasz Szozda · Accepted Answer · 2022-10-05 19:26:01Z

0

Python Connector - Using Multi-Factor Authentication (MFA)

Snowflake supports caching MFA tokens, including combining MFA token caching with SSO.

Using MFA Token Caching to Minimize the Number of Prompts During Authentication — Optional

MFA token caching can help to reduce the number of prompts that must be acknowledged while connecting and authenticating to Snowflake, especially when multiple connection attempts are made within a relatively short time interval.

A cached MFA token is valid for up to four hours.

answered Oct 5, 2022 at 19:26

Lukasz Szozda

181k26 gold badges278 silver badges326 bronze badges

Collectives™ on Stack Overflow

cache passcode for python snowflake connector

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related