You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@kafka.apache.org by "Nelson B. (Jira)" <ji...@apache.org> on 2025/02/07 03:43:00 UTC
[jira] [Created] (KAFKA-18754) Allow PlainSaslServer to pass client info through the negotiated properties.
Nelson B. created KAFKA-18754:
---------------------------------
Summary: Allow PlainSaslServer to pass client info through the negotiated properties.
Key: KAFKA-18754
URL: https://issues.apache.org/jira/browse/KAFKA-18754
Project: Kafka
Issue Type: Improvement
Reporter: Nelson B.
Assignee: Nelson B.
In our organization, we use a custom Kafka authorizer that makes decisions based on client roles assigned by our IAM server. We've also implemented a custom {{PlainServerCallbackHandler}} that authenticates clients using their username and password through the IAM server. The IAM server also returns client info, such as assigned roles, but we're facing an issue—{{{}PlainSaslServer{}}} can only pass the {{authorizationID}} to the authorizer, meaning the client info is lost. To solve this, we want to extend {{PlainSaslServer}} so it can pass client info through the negotiated properties.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)