conduktor.io ↗

Kafka DescribeDelegationToken Response Wire Format v1 — Binary Protocol Layout

What is DescribeDelegationToken?

Lists active delegation tokens, optionally filtered by owner. Operators use this to find tokens that weren't properly revoked after jobs completed and to verify expiry times.

Related Errors

DELEGATION_TOKEN_AUTH_DISABLED · DELEGATION_TOKEN_REQUEST_NOT_ALLOWED

Wire Diagram

Response Header
message_size int32 · 4B
correlation_id int32 · 4B
DescribeDelegationTokenResponse v1
ErrorCode int16 · 2B
Tokens array
ThrottleTimeMs int32 · 4B
PrincipalType string
PrincipalName string
IssueTimestamp int64 · 8B
ExpiryTimestamp int64 · 8B
MaxTimestamp int64 · 8B
TokenId string
Hmac bytes
Renewers array
PrincipalType string
PrincipalName string

Schema & Example

Schema
{
  "ErrorCode": int16,
  "Tokens": [{
      "PrincipalType": string,
      "PrincipalName": string,
      "IssueTimestamp": int64,
      "ExpiryTimestamp": int64,
      "MaxTimestamp": int64,
      "TokenId": string,
      "Hmac": bytes,
      "Renewers": [{
          "PrincipalType": string,
          "PrincipalName": string
      }]
  }],
  "ThrottleTimeMs": int32
}
Example
{
  "ErrorCode": 0,
  "Tokens": [{
      "PrincipalType": "User:alice",
      "PrincipalName": "User:alice",
      "IssueTimestamp": 0,
      "ExpiryTimestamp": 0,
      "MaxTimestamp": 0,
      "TokenId": "abc-123",
      "Hmac": "<binary>",
      "Renewers": [{
          "PrincipalType": "User:alice",
          "PrincipalName": "User:alice"
      }]
  }],
  "ThrottleTimeMs": 0
}