mirror of https://github.com/apache/kafka.git
8c5d7e0408
This KIP adds the following functionality related to SASL/OAUTHBEARER: 1) Allow clients (both brokers when SASL/OAUTHBEARER is the inter-broker protocol as well as non-broker clients) to flexibly retrieve an access token from an OAuth 2 authorization server based on the declaration of a custom login CallbackHandler implementation and have that access token transparently and automatically transmitted to a broker for authentication. 2) Allow brokers to flexibly validate provided access tokens when a client establishes a connection based on the declaration of a custom SASL Server CallbackHandler implementation. 3) Provide implementations of the above retrieval and validation features based on an unsecured JSON Web Token that function out-of-the-box with minimal configuration required (i.e. implementations of the two types of callback handlers mentioned above will be used by default with no need to explicitly declare them). 4) Allow clients (both brokers when SASL/OAUTHBEARER is the inter-broker protocol as well as non-broker clients) to transparently retrieve a new access token in the background before the existing access token expires in case the client has to open new connections. |
||
|---|---|---|
| .. | ||
| documentation | ||
| images | ||
| js | ||
| streams | ||
| api.html | ||
| configuration.html | ||
| connect.html | ||
| design.html | ||
| documentation.html | ||
| ecosystem.html | ||
| implementation.html | ||
| introduction.html | ||
| migration.html | ||
| ops.html | ||
| protocol.html | ||
| quickstart.html | ||
| security.html | ||
| toc.html | ||
| upgrade.html | ||
| uses.html | ||