Skip to content

SASL_OAUTHBEARER_INHERIT doesn't work with direct authorization properties #4248

@AleksandraKobusinska

Description

As per official kafka documentation, JAAS option for passing clientId, secret and other authorization properties is deprecated and will be removed. https://kafka.apache.org/41/configuration/producer-configs/#producerconfigs_sasl.oauthbearer.client.credentials.client.id. The suggested way is to use direct properties like sasl.oauthbearer.client.credentials.client.id.

it seems like option SASL_OAUTHBEARER_INHERIT is only able to read authentication properties from JAAS, so when removing deprecated config, configuration for schema registry cannot be set to SASL_OAUTHBEARER_INHERIT anymore.

  1. Is my observation correct, that SASL_OAUTHBEARER_INHERIT works only directly with jaas option?
  2. Is there a plan to extend functionality and make it possible to inherit authentication set up in new non-deprecated way?

Thank you in advance for the answer.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions