What is SaslAuthenticate?
Carries the raw SASL exchange bytes after SaslHandshake, with content specific to the mechanism (GSSAPI token, OAUTHBEARER JWT, SCRAM challenge-response, etc.). The response includes session lifetime for token-based mechanisms like OAUTHBEARER, so the client knows when to re-authenticate.
| Version | Kafka | Changes |
|---|---|---|
| SaslAuthenticateRequest | ||
| v0 | 2.2 | + AuthBytes bytes |
| v1 | 2.2 | is the same as version 0. |
| v2 | 2.5 | ~ Flexible encoding enabled FLEXIBLE adds flexible version support |
| SaslAuthenticateResponse | ||
| v0 | 2.2 | + ErrorCode int16+ ErrorMessage string+ AuthBytes bytes |
| v1 | 2.2 | + SessionLifetimeMs int64adds the session lifetime. |
| v2 | 2.5 | ~ Flexible encoding enabled FLEXIBLE adds flexible version support |