sjhajharia commented on code in PR #20164: URL: https://github.com/apache/kafka/pull/20164#discussion_r2209158821
########## core/src/test/scala/unit/kafka/server/KafkaApisTest.scala: ########## @@ -9494,17 +9820,28 @@ class KafkaApisTest extends Logging { fromPrivilegedListener: Boolean = false, requestHeader: Option[RequestHeader] = None, requestMetrics: RequestChannelMetrics = requestChannelMetrics): RequestChannel.Request = { + // DelegationTokens require the context authenticated to be non SecurityProtocol.PLAINTEXT + // and have a non KafkaPrincipal.ANONYMOUS principal. This test is done before the check + // for forwarding because after forwarding the context will have a different context. + // We validate the context authenticated failure case in other integration tests. Review Comment: Thanks. Fixed the same. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: jira-unsubscr...@kafka.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org