io.confluent.kafka.clients.plugins.auth.oauth

Class SpireJwtLoginCallbackHandler

java.lang.Object

io.confluent.kafka.clients.plugins.auth.oauth.SpireJwtLoginCallbackHandler

All Implemented Interfaces:

CallbackHandler, org.apache.kafka.common.security.auth.AuthenticateCallbackHandler

Direct Known Subclasses:

MockSpireJwtLoginCallbackHandler

public class SpireJwtLoginCallbackHandler
extends Object
implements org.apache.kafka.common.security.auth.AuthenticateCallbackHandler

A CallbackHandler that recognizes OAuthBearerTokenCallback and retrieves SPIFFE JWT from Spire Agent that is running at the endpoint provided via the sasl.oauthbearer.token.spire.agent.endpoint. It also attaches the logical cluster this client is allowed to work with as a SASL extension.

For example:

     sasl.oauthbearer.token.spire.agent.endpoint='<>'
     sasl.jaas.config= org.apache.kafka.common.security.oauthbearer.OAuthBearerLoginModule required \
     logicalCluster='';
 

This class should be explicitly set via the sasl.login.callback.handler.class client configuration property.

Field Summary

Fields

Modifier and Type	Field and Description
static String	SASL_OAUTHBEARER_TOKEN_SPIRE_AGENT_ENDPOINT

Constructor Summary

Constructors

Constructor and Description
SpireJwtLoginCallbackHandler()

Method Summary

Modifier and Type	Method and Description
void	close()
void	configure(Map<String,?> configs, String saslMechanism, List<AppConfigurationEntry> jaasConfigEntries)
void	handle(Callback[] callbacks)

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

SASL_OAUTHBEARER_TOKEN_SPIRE_AGENT_ENDPOINT

public static final String SASL_OAUTHBEARER_TOKEN_SPIRE_AGENT_ENDPOINT

See Also:

Constant Field Values

Constructor Detail

SpireJwtLoginCallbackHandler

public SpireJwtLoginCallbackHandler()

Method Detail

configure

public void configure(Map<String,?> configs,
                      String saslMechanism,
                      List<AppConfigurationEntry> jaasConfigEntries)

Specified by:

configure in interface org.apache.kafka.common.security.auth.AuthenticateCallbackHandler

close

public void close()

Specified by:

close in interface org.apache.kafka.common.security.auth.AuthenticateCallbackHandler

handle

public void handle(Callback[] callbacks)
            throws IOException,
                   UnsupportedCallbackException

Specified by:

handle in interface CallbackHandler

Throws:

IOException

UnsupportedCallbackException