io.confluent.kafka.server.plugins.auth

Class PlainSaslAuthenticator

java.lang.Object

io.confluent.kafka.server.plugins.auth.PlainSaslAuthenticator

Direct Known Subclasses:

FileBasedPlainSaslAuthenticator, TopicBasedPlainSaslAuthenticator

public abstract class PlainSaslAuthenticator
extends Object

Field Summary

Fields

Modifier and Type	Field and Description
static String	USER_RESOURCE_ID

Constructor Summary

Constructors

Constructor and Description
PlainSaslAuthenticator(AuthAttemptCache successfulAuthCache, AuthAttemptCache failedAuthCache)

Method Summary

Modifier and Type	Method and Description
io.confluent.kafka.multitenant.MultiTenantPrincipal	authenticate(String username, String password, Optional<org.apache.kafka.common.security.authenticator.PathAwareSniHostName> sniHostName, Optional<String> suppliedClusterId, Optional<String> networkId) Authenticate user by checking username, password, cluster id and network ID.
Optional<String>	clusterId(String username) return cluster Id for the given username/APIKey
void	initialize(List<AppConfigurationEntry> jaasContextEntries)
static io.confluent.kafka.multitenant.MultiTenantPrincipal	multiTenantPrincipal(String username, io.confluent.kafka.server.plugins.auth.MultiTenantSaslConfigEntry userInfo)

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

USER_RESOURCE_ID

public static final String USER_RESOURCE_ID

See Also:

Constant Field Values

Constructor Detail

PlainSaslAuthenticator

public PlainSaslAuthenticator(AuthAttemptCache successfulAuthCache,
                              AuthAttemptCache failedAuthCache)

Method Detail

multiTenantPrincipal

public static io.confluent.kafka.multitenant.MultiTenantPrincipal multiTenantPrincipal(String username,
                                                                                       io.confluent.kafka.server.plugins.auth.MultiTenantSaslConfigEntry userInfo)

authenticate

public io.confluent.kafka.multitenant.MultiTenantPrincipal authenticate(String username,
                                                                        String password,
                                                                        Optional<org.apache.kafka.common.security.authenticator.PathAwareSniHostName> sniHostName,
                                                                        Optional<String> suppliedClusterId,
                                                                        Optional<String> networkId)
                                                                 throws SaslException,
                                                                        org.apache.kafka.common.errors.SaslAuthenticationException

Authenticate user by checking username, password, cluster id and network ID.

Parameters:

username - username

password - password

sniHostName - SNI broker hostname. We store host name in SNI to route to relevant broker.

suppliedClusterId - the cluster id which originates from the SNI header or the PROXY header

networkId - optional network ID of the authenticating client.

Returns:

MultiTenantPrincipal containing authorization id and tenant

Throws:

org.apache.kafka.common.errors.SaslAuthenticationException - if authentication fails. Note that the error string in the SaslAuthenticationException is returned to the client so do not leak information in it.

SaslException - if any unexpected errors are encountered

clusterId

public Optional<String> clusterId(String username)
                           throws SaslException

return cluster Id for the given username/APIKey

Throws:

SaslException

initialize

public void initialize(List<AppConfigurationEntry> jaasContextEntries)