public class RestAuthorizer
extends java.lang.Object
implements io.confluent.security.authorizer.Authorizer
Authorizer
which connects to the given metadata service Urls
to perform the operations.
An instance of RestAuthorizer can be instantiated by passing configuration properties like below.
Mapconfigs = new HashMap<>(); configs.put(RestClientConfig.BOOTSTRAP_METADATA_SERVER_URLS_PROP, "http://localhost:8080"); Authorizer RestAuthorizer = new RestAuthorizer(); rbacRestAuthorizer.configure(configs);
There are different options available as mentioned in RestClientConfig
like
-RestClientConfig.BOOTSTRAP_METADATA_SERVER_URLS_PROP
. -RestClientConfig.METADATA_SERVER_URL_MAX_AGE_PROP
. -RestClientConfig.BASIC_AUTH_CREDENTIALS_PROVIDER_PROP
. -RestClientConfig.BASIC_AUTH_USER_INFO_PROP
.
This can be used to authorize list of Action
for a given userPrincipal
Constructor and Description |
---|
RestAuthorizer() |
RestAuthorizer(RestClient restClient) |
Modifier and Type | Method and Description |
---|---|
java.util.List<io.confluent.security.authorizer.AuthorizeResult> |
authorize(HttpCredentialProvider credentialProvider,
org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal,
java.lang.String host,
java.util.List<io.confluent.security.authorizer.Action> actions) |
java.util.List<io.confluent.security.authorizer.AuthorizeResult> |
authorize(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal,
java.lang.String host,
java.util.List<io.confluent.security.authorizer.Action> actions) |
java.util.List<io.confluent.security.authorizer.AuthorizeResult> |
authorize(io.confluent.security.authorizer.RequestContext requestContext,
java.util.List<io.confluent.security.authorizer.Action> actions) |
void |
close() |
void |
configure(java.util.Map<java.lang.String,?> configs) |
public RestAuthorizer()
public RestAuthorizer(RestClient restClient)
public void configure(java.util.Map<java.lang.String,?> configs)
configure
in interface org.apache.kafka.common.Configurable
public java.util.List<io.confluent.security.authorizer.AuthorizeResult> authorize(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal, java.lang.String host, java.util.List<io.confluent.security.authorizer.Action> actions)
authorize
in interface io.confluent.security.authorizer.Authorizer
public java.util.List<io.confluent.security.authorizer.AuthorizeResult> authorize(io.confluent.security.authorizer.RequestContext requestContext, java.util.List<io.confluent.security.authorizer.Action> actions)
authorize
in interface io.confluent.security.authorizer.Authorizer
public java.util.List<io.confluent.security.authorizer.AuthorizeResult> authorize(HttpCredentialProvider credentialProvider, org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal, java.lang.String host, java.util.List<io.confluent.security.authorizer.Action> actions)
public void close() throws java.io.IOException
close
in interface java.io.Closeable
close
in interface java.lang.AutoCloseable
java.io.IOException