如何在kafka中实现OAUTHBEARER SASL认证机制？

Question

任何人都可以解释客户端或代理间通信如何使用 kafka 中的 OAUTHBEARER 身份验证机制进行？

Answer 1

You will need to implement two classes that uses an interface called AuthenticateCallbackHandler .

The first class implements the Login flow, where you need to call your OAuth server to retrieve a token. This class will be used by your clients or for interbroker connection.

The second class implements the Validation flow, where you will call your OAuth server to check if the send token is valid. This class will be used only at Kafka Broker.

I have an example of this implementation at github.com/jairsjunior/kafka-oauth

If you want to see how to setup a Kafka broker using this SASL mechanism, there is an article with all steps. https://medium.com/@jairsjunior/how-to-setup-oauth2-mechanism-to-a-kafka-broker-e42e72839fe