Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Authentication with SASL_SSL/OAUTHBEARER

See original GitHub issue

Hey all.

We have secured kafka cluster which supports SASL_SSL authentication. And we would like to connect using node-rdkafka lib.

Do you know if it is supported by node-rdkafka? If yes, where can I find a small sample ?

Thanks

Issue Analytics

State:
Created 3 years ago
Reactions:1
Comments:5

Top GitHub Comments

4reactions

giulliano-buenocommented, Jul 8, 2020

I am working on a pull request to fix this.

4reactions

giulliano-buenocommented, Jul 8, 2020

@klalafaryan node-rdkafka seems to not support OAUTHBEARER since it does not implement the callback necessary to refresh/get the token and passing a Node callback doesn’t work because we can’t call RdKafka::oauthbearer_set_token() directly from it. Check this Librdkafka header here, please.

Top Results From Across the Web

Configuring OAUTHBEARER | Confluent Documentation

You can declare it using either the sasl.login.callback.handler.class configuration option for a non-broker client, or using the prefixed listener.name.sasl_ssl ...

How to implement OAUTHBEARER SASL authentication ...

You will need to implement two classes that uses an interface called AuthenticateCallbackHandler. The first class implements the Login flow, ...

OAuthBearerLoginModule (kafka 2.0.0 API)

class configuration option for a non-broker client or via the listener.name.sasl_ssl.oauthbearer.sasl.login.callback.handler.class configuration option for ...

Kafka Security : SASL OAUTHBEARER setup with Keycloak

Kafka Supports OAuth2 authentication using unsecured JWT tokens. We have to configure our own OAuth2 server (Ex-Keycloack) for proper OAuth2 ...

kafka-security-playbook/server.properties at master - GitHub

listener.name.sasl_ssl.oauthbearer.sasl.server.callback.handler.class=io.confluent.examples.authentication.oauth.OauthBearerValidatorCallbackHandler.