Hi Kirk,
The current setup of Auth0 for authentication and ACL for authorization
works for me however I was exploring how best we can leverage oAuth both
for authentication and Authorization both without writing custom classes.
Regards
Ashish
On Wed, Apr 2, 2025 at 6:16 AM Kirk True wrote:
> H
Hi Ashish,
I'm glad you were able to get it working! :)
Reply to your questions below...
On Mon, Mar 31, 2025, at 10:19 PM, ashish sood wrote:
> Hi Kirk,
>
> I managed to get it running finally.
>
>
> *Server.properties*
>
> listeners=SASL_PLAINTEXT://:9093
> advertised.listeners=SASL_PLAINT
Hi Kirk,
I managed to get it running finally.
*Server.properties*
listeners=SASL_PLAINTEXT://:9093
advertised.listeners=SASL_PLAINTEXT://xx:9093
sasl.enabled.mechanisms=OAUTHBEARER
sasl.oauthbearer.expected.audience=https://myprovider.com
oauthbearer.sasl.jaas.config=org.apache.kafka.common
Hi Ashish,
In your stack trace I see it's invoking
org.apache.kafka.common.security.oauthbearer.internals.unsecured.OAuthBearerUnsecuredLoginCallbackHandler,
so something in your configuration seems amiss.
If you can capture the AdminClientConfig output (with sensitive stuff redacted,
obvs), t
Hi Kirk,
Thanks for checking.
I am trying to setup a Kafka cluster with end-to-end oauth (i.e. Kafka -
Kafka communication within a cluster & clients to Kafka broker). I was able
to get my broker started without errors with below config however I am now
unable to create topics with below error.
Hi Ashish,
Are you using OAuth for client->broker communication, inter-broker
communication, or both?
Based on the server.properties configuration that was shared, it looks like the
configuration is attempting to set up inter-broker communication using OAuth.
For a broker to *retrieve* tokens
Hi All,
I am setting up oauth for my Kafka broker. I have set up an account on
Auth0 for the same and set up an application and API.
With the below config in the server.properties and Jaas.config file I keep
getting invalid token. Although if I generate a manual token via curl it
works fine. Also
