public class SpiffeIdPrincipalExtractor extends Object implements org.apache.kafka.common.Configurable
MultiTenantPrincipalBuilder level.
The rules for principal extraction are specified via ConfluentConfigs.SPIFFE_ID_PRINCIPAL_EXTRACTION_RULES.
When handling incoming OAuth requests from SPIRE-enabled applications, the Spiffe ID is matched against a set of configured rules.
Principals are then extracted based on the matching rules.| Modifier and Type | Field and Description |
|---|---|
static org.slf4j.Logger |
log |
| Constructor and Description |
|---|
SpiffeIdPrincipalExtractor() |
SpiffeIdPrincipalExtractor(String spiffeIdPrincipalMappingRules) |
| Modifier and Type | Method and Description |
|---|---|
void |
configure(Map<String,?> configs) |
List<String> |
extractPrincipals(String spiffeId) |
static SpiffeIdPrincipalExtractor |
fromRules(String spiffeIdPrincipalMappingRules) |
int |
principalExtractionRulesCount() |
String |
toString() |
public SpiffeIdPrincipalExtractor()
public SpiffeIdPrincipalExtractor(String spiffeIdPrincipalMappingRules)
public void configure(Map<String,?> configs)
configure in interface org.apache.kafka.common.Configurablepublic static SpiffeIdPrincipalExtractor fromRules(String spiffeIdPrincipalMappingRules)
public int principalExtractionRulesCount()