Kafka Configs Kafka Protocol Wire Format API Versions KIPs Errors Kafka Upgrade Config Advisor Flink SQL
conduktor.io ↗
KIPs / KIP-342

KIP-342 — Add support for custom SASL extensions in OAuthBearer authentication

Accepted Kafka 2.1 Security

Adds a pluggable SASL extensions mechanism for the OAuthBearer authentication protocol, allowing clients to attach arbitrary key-value pairs to the `SASL/OAUTHBEARER` `ClientInitialResponse` message. Existing SASL extensions in SCRAM are hard-coded for delegation tokens; OAuthBearer clients receiving third-party JWT tokens cannot add custom claims to the token and have no other channel to pass auxiliary data to a custom server-side callback.

Details

AuthorStanislav Kozlovski
StatusAccepted
Kafka Version2.1
JIRAKAFKA-7169
WikiView on Apache Wiki
Created2018-07-16
Last Modified2018-08-14
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.