org.apache.kafka.common.security.auth

Class ConfluentPrincipal

java.lang.Object

org.apache.kafka.common.security.auth.KafkaPrincipal

org.apache.kafka.common.security.auth.ConfluentPrincipal

All Implemented Interfaces:

Principal

public class ConfluentPrincipal
extends KafkaPrincipal

Field Summary

Fields

Modifier and Type	Field and Description
static String	GROUP_TYPE

Fields inherited from class org.apache.kafka.common.security.auth.KafkaPrincipal

ANONYMOUS, USER_TYPE

Constructor Summary

Constructors

Constructor and Description
ConfluentPrincipal(String principalType, String name, String authenticationId)
ConfluentPrincipal(String principalType, String name, String authenticationId, boolean delegationTokenAuthenticated)
ConfluentPrincipal(String principalType, String name, String authenticationId, Optional<String> networkId, boolean delegationTokenAuthenticated, Set<String> groups)
ConfluentPrincipal(String principalType, String name, String authenticationId, Optional<String> networkId, boolean delegationTokenAuthenticated, Set<String> groups, List<String> authorizationIds) authorizationIds: Contains list of ids used in authorization.

Method Summary

Modifier and Type	Method and Description
String	authenticationId() Returns the public credential (e.g.
List<String>	authorizationIds() Returns list of ids which will be used to authorize to request.
Set<String>	getGroups() Returns the principal groups if provided during authentication.
Optional<String>	networkId() Returns the networkId if available, where the authentication request originated from.

Methods inherited from class org.apache.kafka.common.security.auth.KafkaPrincipal

equals, getName, getPrincipalType, hashCode, tokenAuthenticated, tokenAuthenticated, toString

Methods inherited from class java.lang.Object

getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface java.security.Principal

implies

Field Detail

GROUP_TYPE

public static final String GROUP_TYPE

See Also:

Constant Field Values

Constructor Detail

ConfluentPrincipal

public ConfluentPrincipal(String principalType,
                          String name,
                          String authenticationId)

ConfluentPrincipal

public ConfluentPrincipal(String principalType,
                          String name,
                          String authenticationId,
                          boolean delegationTokenAuthenticated)

ConfluentPrincipal

public ConfluentPrincipal(String principalType,
                          String name,
                          String authenticationId,
                          Optional<String> networkId,
                          boolean delegationTokenAuthenticated,
                          Set<String> groups)

ConfluentPrincipal

public ConfluentPrincipal(String principalType,
                          String name,
                          String authenticationId,
                          Optional<String> networkId,
                          boolean delegationTokenAuthenticated,
                          Set<String> groups,
                          List<String> authorizationIds)

authorizationIds: Contains list of ids used in authorization. Authorization will be decided by following rule - If any id in the list have deny permission result will be denied - else if any id have allow permission result will allowed

Method Detail

authenticationId

public String authenticationId()

Returns the public credential (e.g. user name) if available. If not configured, the principal name is returned.

networkId

public Optional<String> networkId()

Returns the networkId if available, where the authentication request originated from.

authorizationIds

public List<String> authorizationIds()

Returns list of ids which will be used to authorize to request.

getGroups

public Set<String> getGroups()

Returns the principal groups if provided during authentication.