[KAFKA-14212] Fetch error response when hitting public OAuth/OIDC provider

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 3.4.0, 3.3.2
• Assignee: Sushant Mahajan
• Reporter: Sushant Mahajan
• Created: 09/Sep/22 14:19
• Updated: 22/Nov/22 08:30
• Resolved: 20/Sep/22 07:23

Description

The class org.apache.kafka.common.security.oauthbearer.secured.HttpAccessTokenRetriever is used to send client creds to public OAuth/OIDC provider and fetch the response, possibly including the access token.

However, if there is an error - the exact error message from the provider is not currently being retrieved.

The error message can help the client easily diagnose if failure to fetch token is due to some misconfiguration on their side.

Issue Links

• links to: GitHub Pull Request #12651