Package org.apache.kafka.common.security.oauthbearer
package org.apache.kafka.common.security.oauthbearer
Provides a
LoginModule for using OAuth Bearer Token authentication with Kafka clusters.-
ClassDescriptionA
Callbackfor use by theSaslServerimplementation when it needs to validate the SASL extensions for the OAUTHBEARER mechanism Callback handlers should use theOAuthBearerExtensionsValidatorCallback.valid(String)method to communicate valid extensions back to the SASL server.OAuthBearerLoginCallbackHandleris anAuthenticateCallbackHandlerthat acceptsOAuthBearerTokenCallbackandSaslExtensionsCallbackcallbacks to perform the steps to request a JWT from an OAuth/OIDC provider using theclientcredentials.TheLoginModulefor the SASL/OAUTHBEARER mechanism.Theb64tokenvalue as defined in RFC 6750 Section 2.1 along with the token's specific scope and lifetime and principal name.ACallbackfor use by theSaslClientandLoginimplementations when they require an OAuth 2 bearer token.ACallbackfor use by theSaslServerimplementation when it needs to provide an OAuth 2 bearer token compact serialization for validation.OAuthBearerValidatorCallbackHandleris anAuthenticateCallbackHandlerthat acceptsOAuthBearerValidatorCallbackandOAuthBearerExtensionsValidatorCallbackcallbacks to implement OAuth/OIDC validation.