[GitHub] [pulsar] sijie commented on issue #7385: When `authorizationEnabled=true` in proxy.conf the proxy does not appear to perform Authorization check

[GitBox <gi...@apache.org>]

sijie commented on issue #7385:
URL: https://github.com/apache/pulsar/issues/7385#issuecomment-652835256


   If you set `forwardAuthorizationCredentials` to `true`, proxy will forward the authentication credentials to the brokers and brokers will do both authentication and authorization. But in proxy, you need to do configure a super-user token, because proxy is required to read the partitioned topic metadata and lookup topic ownerships. 
   
   So you need to configure the following:
   
   ```
   forwardAuthorizationCredentials=true
   brokerClientAuthenticationPlugin=[plugin]
   brokerClientAuthenticationParameters=[parameters]
   ```


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org