Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

KAFKA-18754: Allow PlainSaslServer to pass client info through the negotiated properties. #18828

Open
wants to merge 3 commits into
base: trunk
Choose a base branch
from

Conversation

bachmanity1
Copy link
Contributor

In our organization, we use a custom Kafka authorizer that makes decisions based on client roles assigned by our IAM server. We've also implemented a custom PlainServerCallbackHandler that authenticates clients using their username and password through the IAM server. The IAM server also returns client info, such as assigned roles, but we're facing an issue—PlainSaslServer can only pass the authorizationID to the authorizer, meaning the client info is lost. To solve this, we want to extend PlainSaslServer so it can pass client info through the negotiated properties.

Committer Checklist (excluded from commit message)

  • Verify design and implementation
  • Verify test coverage and CI build status
  • Verify documentation (including upgrade notes)

@github-actions github-actions bot added triage PRs from the community clients small Small PRs labels Feb 7, 2025
@bachmanity1
Copy link
Contributor Author

Hi @rajinisivaram, @ijuma, @gongxuanzhang, could you please take a look? (Tagging based on the git history of the modified files.)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
clients small Small PRs triage PRs from the community
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant