Nelson B. created KAFKA-18754:
---------------------------------
Summary: Allow PlainSaslServer to pass client info through the
negotiated properties.
Key: KAFKA-18754
URL: https://issues.apache.org/jira/browse/KAFKA-18754
Project: Kafka
Issue Type: Improvement
Reporter: Nelson B.
Assignee: Nelson B.
In our organization, we use a custom Kafka authorizer that makes decisions
based on client roles assigned by our IAM server. We've also implemented a
custom {{PlainServerCallbackHandler}} that authenticates clients using their
username and password through the IAM server. The IAM server also returns
client info, such as assigned roles, but we're facing an
issue—{{{}PlainSaslServer{}}} can only pass the {{authorizationID}} to the
authorizer, meaning the client info is lost. To solve this, we want to extend
{{PlainSaslServer}} so it can pass client info through the negotiated
properties.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
