What is SaslAuthenticate?
Carries the raw SASL exchange bytes after SaslHandshake, with content specific to the mechanism (GSSAPI token, OAUTHBEARER JWT, SCRAM challenge-response, etc.). The response includes session lifetime for token-based mechanisms like OAUTHBEARER, so the client knows when to re-authenticate.
Wire Diagram
Request Header · flexible
message_size
int32 · 4B
api_key
int16 · 2B
api_version
int16 · 2B
correlation_id
int32 · 4B
client_id
string (compact)
tagged
var
SaslAuthenticateRequest v2
AuthBytes
bytes (compact)
tagged
var
Schema & Example
Schema { "AuthBytes": bytes }
Example { "AuthBytes": "<binary>" }