KIP-1135 — Deprecated "org.apache.kafka.disallowed.login.modules"

Discussion Kafka 4.2 Security

Deprecates the JVM system property org.apache.kafka.disallowed.login.modules (denylist) and introduces org.apache.kafka.allowed.login.modules (allowlist) so that only explicitly listed login modules are permitted. The denylist approach is inherently unsafe because newly introduced insecure login modules are permitted by default until added to the deny list.

Details