Package org.apache.kafka.common.security.oauthbearer
package org.apache.kafka.common.security.oauthbearer
Provides a
LoginModule
for using OAuth Bearer Token authentication with Kafka clusters.-
ClassDescriptionA
Callback
for use by theSaslServer
implementation when it needs to validate the SASL extensions for the OAUTHBEARER mechanism Callback handlers should use theOAuthBearerExtensionsValidatorCallback.valid(String)
method to communicate valid extensions back to the SASL server.OAuthBearerLoginCallbackHandler
is anAuthenticateCallbackHandler
that acceptsOAuthBearerTokenCallback
andSaslExtensionsCallback
callbacks to perform the steps to request a JWT from an OAuth/OIDC provider using theclientcredentials
.TheLoginModule
for the SASL/OAUTHBEARER mechanism.Theb64token
value as defined in RFC 6750 Section 2.1 along with the token's specific scope and lifetime and principal name.ACallback
for use by theSaslClient
andLogin
implementations when they require an OAuth 2 bearer token.ACallback
for use by theSaslServer
implementation when it needs to provide an OAuth 2 bearer token compact serialization for validation.OAuthBearerValidatorCallbackHandler
is anAuthenticateCallbackHandler
that acceptsOAuthBearerValidatorCallback
andOAuthBearerExtensionsValidatorCallback
callbacks to implement OAuth/OIDC validation.