io.confluent.kafka.clients.plugins.auth.jwt

Class JwtAuthenticator

java.lang.Object

io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticator

All Implemented Interfaces:

Closeable, AutoCloseable

public final class JwtAuthenticator
extends Object
implements Closeable

JwtAuthenticator validates JwtClaims returning OAuthBearerJwsToken on success.

Field Summary

Fields

Modifier and Type	Field and Description
static String	CONFLUENT_ISSUER
static String	IAT_CLAIM_REQUIRED
static String	JTI_CLAIM_REQUIRED

Constructor Summary

Constructors

Constructor and Description
JwtAuthenticator(JwtAuthenticatorConfig config)
JwtAuthenticator(String issuer, CloseableVerificationKeyResolver keyResolver)
JwtAuthenticator(String issuer, CloseableVerificationKeyResolver keyResolver, List<String> audience, boolean audienceRequired)
JwtAuthenticator(String issuer, CloseableVerificationKeyResolver keyResolver, List<String> audience, Map<String,Boolean> claimOptions)

Method Summary

Modifier and Type	Method and Description
void	close()
static String	extractSignature(org.apache.kafka.common.security.oauthbearer.OAuthBearerToken jwt)
String	issuer()
org.apache.kafka.common.security.oauthbearer.OAuthBearerToken	login(org.apache.kafka.common.security.oauthbearer.OAuthBearerToken token)
org.apache.kafka.common.security.oauthbearer.OAuthBearerToken	login(String jws)
org.apache.kafka.common.security.oauthbearer.OAuthBearerToken	login(String jws, String scopeClaim)

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CONFLUENT_ISSUER

public static final String CONFLUENT_ISSUER

See Also:

Constant Field Values

JTI_CLAIM_REQUIRED

public static final String JTI_CLAIM_REQUIRED

See Also:

Constant Field Values

IAT_CLAIM_REQUIRED

public static final String IAT_CLAIM_REQUIRED

See Also:

Constant Field Values

Constructor Detail

JwtAuthenticator

public JwtAuthenticator(String issuer,
                        CloseableVerificationKeyResolver keyResolver,
                        List<String> audience,
                        Map<String,Boolean> claimOptions)

JwtAuthenticator

public JwtAuthenticator(String issuer,
                        CloseableVerificationKeyResolver keyResolver,
                        List<String> audience,
                        boolean audienceRequired)

JwtAuthenticator

public JwtAuthenticator(String issuer,
                        CloseableVerificationKeyResolver keyResolver)

JwtAuthenticator

public JwtAuthenticator(JwtAuthenticatorConfig config)

Method Detail

login

public org.apache.kafka.common.security.oauthbearer.OAuthBearerToken login(String jws,
                                                                           String scopeClaim)
                                                                    throws JwtVerificationException

Throws:

JwtVerificationException

login

public org.apache.kafka.common.security.oauthbearer.OAuthBearerToken login(String jws)
                                                                    throws JwtVerificationException

Throws:

JwtVerificationException

login

public org.apache.kafka.common.security.oauthbearer.OAuthBearerToken login(org.apache.kafka.common.security.oauthbearer.OAuthBearerToken token)
                                                                    throws JwtVerificationException

Throws:

JwtVerificationException

extractSignature

public static String extractSignature(org.apache.kafka.common.security.oauthbearer.OAuthBearerToken jwt)

issuer

public String issuer()

close

public void close()
           throws IOException

Specified by:

close in interface Closeable

Specified by:

close in interface AutoCloseable

Throws:

IOException