[jira] [Resolved] (KAFKA-17315) Fix the behavior of delegation tokens that expire immediately upon creation in KRaft mode

["Chia-Ping Tsai (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/KAFKA-17315?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Chia-Ping Tsai resolved KAFKA-17315.
------------------------------------
    Resolution: Fixed

> Fix the behavior of delegation tokens that expire immediately upon creation in KRaft mode
> -----------------------------------------------------------------------------------------
>
>                 Key: KAFKA-17315
>                 URL: https://issues.apache.org/jira/browse/KAFKA-17315
>             Project: Kafka
>          Issue Type: Improvement
>            Reporter: Chia-Ping Tsai
>            Assignee: TengYao Chi
>            Priority: Blocker
>             Fix For: 4.0.0, 3.9.0, 3.7.2, 3.8.1
>
>
> In kraft mode, expiring delegation token (`expiryTimePeriodMs` < 0) has following different behavior to zk mode.
> 1. `ExpiryTimestampMs` is set to "expiryTimePeriodMs" [0] rather than "now" [1]
> 2.  it throws exception directly if the token is expired already [2]. By contrast, zk mode does not. [3]
> [0] https://github.com/apache/kafka/blob/49fc14f6116a697550339a8804177bd9290d15db/metadata/src/main/java/org/apache/kafka/controller/DelegationTokenControlManager.java#L316
> [1] https://github.com/apache/kafka/blob/49fc14f6116a697550339a8804177bd9290d15db/core/src/main/scala/kafka/server/DelegationTokenManagerZk.scala#L292
> [2] https://github.com/apache/kafka/blob/49fc14f6116a697550339a8804177bd9290d15db/metadata/src/main/java/org/apache/kafka/controller/DelegationTokenControlManager.java#L305
> [3] https://github.com/apache/kafka/blob/49fc14f6116a697550339a8804177bd9290d15db/core/src/main/scala/kafka/server/DelegationTokenManagerZk.scala#L293



--
This message was sent by Atlassian Jira
(v8.20.10#820010)