[
https://issues.apache.org/jira/browse/KAFKA-18754?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Nelson B. updated KAFKA-18754:
------------------------------
Fix Version/s: 4.0.0
3.9.1
3.8.2
3.7.3
> Allow PlainSaslServer to pass client info through the negotiated properties.
> ----------------------------------------------------------------------------
>
> Key: KAFKA-18754
> URL: https://issues.apache.org/jira/browse/KAFKA-18754
> Project: Kafka
> Issue Type: Improvement
> Reporter: Nelson B.
> Assignee: Nelson B.
> Priority: Minor
> Fix For: 4.0.0, 3.9.1, 3.8.2, 3.7.3
>
>
> In our organization, we use a custom Kafka authorizer that makes decisions
> based on client roles assigned by our IAM server. We've also implemented a
> custom {{PlainServerCallbackHandler}} that authenticates clients using their
> username and password through the IAM server. The IAM server also returns
> client info, such as assigned roles, but we're facing an
> issue—{{{}PlainSaslServer{}}} can only pass the {{authorizationID}} to the
> authorizer, meaning the client info is lost. To solve this, we want to extend
> {{PlainSaslServer}} so it can pass client info through the negotiated
> properties.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
