You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@kafka.apache.org by "Chia-Ping Tsai (Jira)" <ji...@apache.org> on 2026/10/06 05:38:00 UTC

[jira] [Created] (KAFKA-21221) Add tokenless OAuth login class

Chia-Ping Tsai created KAFKA-21221:
--------------------------------------

             Summary: Add tokenless OAuth login class
                 Key: KAFKA-21221
                 URL: https://issues.apache.org/jira/browse/KAFKA-21221
             Project: Kafka
          Issue Type: Improvement
            Reporter: Chia-Ping Tsai
            Assignee: Chia-Ping Tsai


KAFKA-21143 showcases a real use case: a broker that only validates incoming OAUTHBEARER tokens (inter-broker uses another mechanism) does not need a token of its own. Today the only way to get a tokenless login is to rely on the default OAuthBearerUnsecuredLoginCallbackHandler, which is documented as testing-only. The fix for KAFKA-21143 repairs that default path, but production users still deserve a dedicated, documented class that skips token retrieval.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)