public class EmbeddedAuthorizer extends java.lang.Object implements Authorizer
Modifier and Type | Field and Description |
---|---|
protected ConfluentAuthorizerConfig |
authorizerConfig |
protected java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> |
brokerUsers |
protected java.lang.String |
interBrokerListener |
protected static org.slf4j.Logger |
log |
protected java.util.Set<Provider> |
providersCreated |
Constructor and Description |
---|
EmbeddedAuthorizer() |
Modifier and Type | Method and Description |
---|---|
AccessRuleProvider |
accessRuleProvider(java.lang.String providerName) |
protected java.util.List<AccessRuleProvider> |
accessRuleProviders() |
AuditLogProvider |
auditLogProvider() |
java.util.List<AuthorizeResult> |
authorize(RequestContext requestContext,
java.util.List<Action> actions)
Performs authorization for each of the provided `actions` and returns the result of each
authorization.
|
void |
close() |
void |
configure(java.util.Map<java.lang.String,?> configs) |
protected void |
configureProviders(java.util.List<AccessRuleProvider> accessRuleProviders,
GroupProvider groupProvider,
MetadataProvider metadataProvider,
AuditLogProvider auditLogProvider) |
void |
configureServerInfo(org.apache.kafka.server.authorizer.AuthorizerServerInfo serverInfo) |
GroupProvider |
groupProvider() |
protected boolean |
isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal principal,
Action action) |
MetadataProvider |
metadataProvider() |
protected boolean |
ready() |
protected Scope |
scope() |
java.util.concurrent.CompletableFuture<java.lang.Void> |
start(org.apache.kafka.server.authorizer.AuthorizerServerInfo serverInfo,
java.util.Map<java.lang.String,?> interBrokerListenerConfigs,
java.lang.Runnable initTask) |
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
authorize
protected static final org.slf4j.Logger log
protected final java.util.Set<Provider> providersCreated
protected ConfluentAuthorizerConfig authorizerConfig
protected java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> brokerUsers
protected java.lang.String interBrokerListener
public void configure(java.util.Map<java.lang.String,?> configs)
configure
in interface org.apache.kafka.common.Configurable
public void configureServerInfo(org.apache.kafka.server.authorizer.AuthorizerServerInfo serverInfo)
public java.util.List<AuthorizeResult> authorize(RequestContext requestContext, java.util.List<Action> actions)
Authorizer
authorize
in interface Authorizer
requestContext
- Request context including principal and additional context for auditingactions
- List of actions being authorized including the resource and operation
for each action.public GroupProvider groupProvider()
public AccessRuleProvider accessRuleProvider(java.lang.String providerName)
public MetadataProvider metadataProvider()
protected java.util.List<AccessRuleProvider> accessRuleProviders()
public AuditLogProvider auditLogProvider()
public java.util.concurrent.CompletableFuture<java.lang.Void> start(org.apache.kafka.server.authorizer.AuthorizerServerInfo serverInfo, java.util.Map<java.lang.String,?> interBrokerListenerConfigs, java.lang.Runnable initTask)
protected void configureProviders(java.util.List<AccessRuleProvider> accessRuleProviders, GroupProvider groupProvider, MetadataProvider metadataProvider, AuditLogProvider auditLogProvider)
protected boolean ready()
protected boolean isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal principal, Action action)
public void close()
close
in interface java.io.Closeable
close
in interface java.lang.AutoCloseable
protected Scope scope()