conduktor.io ↗

Kafka DescribeDelegationToken Response Wire Format v3 — Binary Protocol Layout

What is DescribeDelegationToken?

Lists active delegation tokens, optionally filtered by owner. Operators use this to find tokens that weren't properly revoked after jobs completed and to verify expiry times.

Related Errors

DELEGATION_TOKEN_AUTH_DISABLED · DELEGATION_TOKEN_REQUEST_NOT_ALLOWED

Wire Diagram

Response Header · flexible
message_size int32 · 4B
correlation_id int32 · 4B
tagged var
DescribeDelegationTokenResponse v3
ErrorCode int16 · 2B
Tokens array
ThrottleTimeMs int32 · 4B
tagged var
PrincipalType string (compact)
PrincipalName string (compact)
TokenRequesterPrincipalType string (compact)
TokenRequesterPrincipalName string (compact)
IssueTimestamp int64 · 8B
ExpiryTimestamp int64 · 8B
MaxTimestamp int64 · 8B
TokenId string (compact)
Hmac bytes (compact)
Renewers array
tagged var
PrincipalType string (compact)
PrincipalName string (compact)
tagged var

Schema & Example

Schema
{
  "ErrorCode": int16,
  "Tokens": [{
      "PrincipalType": string,
      "PrincipalName": string,
      "TokenRequesterPrincipalType": string,
      "TokenRequesterPrincipalName": string,
      "IssueTimestamp": int64,
      "ExpiryTimestamp": int64,
      "MaxTimestamp": int64,
      "TokenId": string,
      "Hmac": bytes,
      "Renewers": [{
          "PrincipalType": string,
          "PrincipalName": string
      }]
  }],
  "ThrottleTimeMs": int32
}
Example
{
  "ErrorCode": 0,
  "Tokens": [{
      "PrincipalType": "User:alice",
      "PrincipalName": "User:alice",
      "TokenRequesterPrincipalType": "User:alice",
      "TokenRequesterPrincipalName": "User:alice",
      "IssueTimestamp": 0,
      "ExpiryTimestamp": 0,
      "MaxTimestamp": 0,
      "TokenId": "abc-123",
      "Hmac": "<binary>",
      "Renewers": [{
          "PrincipalType": "User:alice",
          "PrincipalName": "User:alice"
      }]
  }],
  "ThrottleTimeMs": 0
}