Uploaded image for project: 'Kafka'
  1. Kafka
  2. KAFKA-7169

Add support for Custom SASL extensions in OAuth authentication

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Minor
    • Resolution: Fixed
    • None
    • 2.1.0
    • None
    • None

    Description

      KIP: here

      Kafka currently supports non-configurable SASL extensions in its SCRAM authentication protocol for delegation token validation. It would be useful to provide configurable SASL extensions for the OAuthBearer authentication mechanism as well, such that clients could attach arbitrary data for the principal authenticating into Kafka. This way, a custom principal can hold information derived from the authentication mechanism, which could prove useful for better tracing and troubleshooting, for example. This can be done in a way which allows for easier extendability in future SASL mechanisms.

      Attachments

        Activity

          People

            enether Stanislav Kozlovski
            enether Stanislav Kozlovski
            Ron Dagostino Ron Dagostino
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: