ociforge
How it works

One sign-on, a real database, four ways in.

ociforge gives you read-only access to a live Ocient® cluster loaded with real public datasets. You sign in once with a verified email, and the same identity authenticates you across the web console, the REST API, and the native clients. Here's the whole picture.

1 · Sign-up & single sign-on (Auth0)

Identity is handled by Auth0, a hosted identity provider — ociforge never stores your password. You register with an email address, confirm it via a verification link, and Auth0 creates your SSO account. From then on, every interface logs you in through the same provider.

Under the hood this is OAuth 2.0 / OpenID Connect (OIDC) — the open standard for delegated sign-in. When you connect, you're redirected to Auth0, you authenticate there, and Auth0 hands back a short-lived token that proves who you are. Ocient validates that token and maps you to a database role. No credentials are ever shared with the database or the clients. Two OIDC flows are used:

Authorization-code flow

Used by the browser-based web console and the desktop clients: a browser window opens, you sign in, and the token is delivered back automatically.

Device-grant flow

Used by headless / terminal sessions: the client prints a URL and a short code, you approve it in any browser, and the client picks up the token — no local callback needed.

Every verified user lands in a read-only role on the sandbox database by default — you can query everything and change nothing.

2 · Four ways to connect

The same SSO identity works across all of these — pick whichever fits how you like to work.

Ocient web UI

A full browser-based SQL console hosted by the cluster at db.ociforge.com. Sign in with SSO and run queries, browse schemas, and inspect results without installing anything.

REST / OpenAPI

A documented HTTP endpoint for running SQL over REST — handy for scripts, notebooks, or any language with an HTTP client. The OpenAPI spec and an interactive explorer are published alongside the cluster.

pyocient (Python)

Ocient's official Python driver (DB-API 2.0). Install it with pip install pyocient and connect with an ocient:// URL — adding handshake=SSO drives the same sign-in, so there's no password to manage.

JDBC (Java)

The Ocient JDBC driver plugs into any JVM tool or app, and ships a bundled CLI. Connect with handshake=SSO and the driver walks you through the same token-based sign-in.

Copy-paste connection commands for each client live on your dashboard once you're signed in.

3 · Real data, already loaded

This isn't an empty instance. The sandbox database holds over half a billion rows across three public datasets, so you have something substantial to query from the first minute — including time-series and real GIS geometry that show off what Ocient is built for:

Sign in to browse the full tables, row counts, and schemas.