Package io.confluent.kafka.clients.plugins.auth.jwt

Class JwtAuthenticator

java.lang.Object

io.confluent.kafka.clients.plugins.auth.jwt.JwtAuthenticator

All Implemented Interfaces:

Closeable, AutoCloseable

public final class JwtAuthenticator
extends Object
implements Closeable

JwtAuthenticator validates JwtClaims returning OAuthBearerJwsToken on success.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	CONFLUENT_ISSUER
static final String	IAT_CLAIM_REQUIRED
static final String	JTI_CLAIM_REQUIRED

Constructor Summary

Constructors

Constructor	Description
JwtAuthenticator(JwtAuthenticatorConfig config)
JwtAuthenticator(String issuer, CloseableVerificationKeyResolver keyResolver)
JwtAuthenticator(String issuer, CloseableVerificationKeyResolver keyResolver, List<String> audience, boolean audienceRequired)
JwtAuthenticator(String issuer, CloseableVerificationKeyResolver keyResolver, List<String> audience, Map<String,Boolean> claimOptions)

Method Summary

Modifier and Type	Method	Description
void	close()
static String	extractSignature(org.apache.kafka.common.security.oauthbearer.OAuthBearerToken jwt)
String	issuer()
org.apache.kafka.common.security.oauthbearer.OAuthBearerToken	login(String jws)
org.apache.kafka.common.security.oauthbearer.OAuthBearerToken	login(String jws, String scopeClaim)
org.apache.kafka.common.security.oauthbearer.OAuthBearerToken	login(org.apache.kafka.common.security.oauthbearer.OAuthBearerToken token)

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

CONFLUENT_ISSUER

public static final String CONFLUENT_ISSUER

See Also:

• Constant Field Values

JTI_CLAIM_REQUIRED

public static final String JTI_CLAIM_REQUIRED

See Also:

• Constant Field Values

IAT_CLAIM_REQUIRED

public static final String IAT_CLAIM_REQUIRED

See Also:

• Constant Field Values

Constructor Details

JwtAuthenticator

public JwtAuthenticator(String issuer,
 CloseableVerificationKeyResolver keyResolver,
 List<String> audience,
 Map<String,Boolean> claimOptions)

JwtAuthenticator

public JwtAuthenticator(String issuer,
 CloseableVerificationKeyResolver keyResolver,
 List<String> audience,
 boolean audienceRequired)

JwtAuthenticator

public JwtAuthenticator(String issuer,
 CloseableVerificationKeyResolver keyResolver)

JwtAuthenticator

public JwtAuthenticator(JwtAuthenticatorConfig config)

Method Details

login

public org.apache.kafka.common.security.oauthbearer.OAuthBearerToken login(String jws,
 String scopeClaim)
                                                                    throws JwtVerificationException

Throws:

JwtVerificationException

login

public org.apache.kafka.common.security.oauthbearer.OAuthBearerToken login(String jws)
                                                                    throws JwtVerificationException

Throws:

JwtVerificationException

login

public org.apache.kafka.common.security.oauthbearer.OAuthBearerToken login(org.apache.kafka.common.security.oauthbearer.OAuthBearerToken token)
                                                                    throws JwtVerificationException

Throws:

JwtVerificationException

extractSignature

public static String extractSignature(org.apache.kafka.common.security.oauthbearer.OAuthBearerToken jwt)

issuer

public String issuer()

close

public void close()
           throws IOException

Specified by:

close in interface AutoCloseable

Specified by:

close in interface Closeable

Throws:

IOException