Package org.apache.kafka.common.security.oauthbearer
Provides a
LoginModule
for using OAuth Bearer Token authentication with Kafka clusters.-
Interface Summary Interface Description OAuthBearerToken Theb64token
value as defined in RFC 6750 Section 2.1 along with the token's specific scope and lifetime and principal name. -
Class Summary Class Description OAuthBearerExtensionsValidatorCallback ACallback
for use by theSaslServer
implementation when it needs to validate the SASL extensions for the OAUTHBEARER mechanism Callback handlers should use theOAuthBearerExtensionsValidatorCallback.valid(String)
method to communicate valid extensions back to the SASL server.OAuthBearerLoginCallbackHandler OAuthBearerLoginCallbackHandler
is anAuthenticateCallbackHandler
that acceptsOAuthBearerTokenCallback
andSaslExtensionsCallback
callbacks to perform the steps to request a JWT from an OAuth/OIDC provider using theclientcredentials
.OAuthBearerLoginModule TheLoginModule
for the SASL/OAUTHBEARER mechanism.OAuthBearerTokenCallback ACallback
for use by theSaslClient
andLogin
implementations when they require an OAuth 2 bearer token.OAuthBearerValidatorCallback ACallback
for use by theSaslServer
implementation when it needs to provide an OAuth 2 bearer token compact serialization for validation.OAuthBearerValidatorCallbackHandler OAuthBearerValidatorCallbackHandler
is anAuthenticateCallbackHandler
that acceptsOAuthBearerValidatorCallback
andOAuthBearerExtensionsValidatorCallback
callbacks to implement OAuth/OIDC validation.