Class BrokerJwtValidator

java.lang.Object
org.apache.kafka.common.security.oauthbearer.BrokerJwtValidator
All Implemented Interfaces:
Closeable, AutoCloseable, org.apache.kafka.common.security.oauthbearer.internals.secured.OAuthBearerConfigurable, JwtValidator
public class BrokerJwtValidatorextends Object implements JwtValidator
BrokerJwtValidator is an implementation of JwtValidator that is used by the broker to perform more extensive validation of the JWT access token that is received from the client, but ultimately from posting the client credentials to the OAuth/OIDC provider's token endpoint.

The validation steps performed (primarily by the jose4j library) are:

  1. Basic structural validation of the b64token value as defined in RFC 6750 Section 2.1
  2. Basic conversion of the token into an in-memory data structure
  3. Presence of scope, exp, subject, iss, and iat claims
  4. Signature matching validation against the kid and those provided by the OAuth/OIDC provider's JWKS

  • Constructor Details

    • BrokerJwtValidator

      public BrokerJwtValidator()
      A public, no-args constructor is necessary for instantiation via configuration.

  • Method Details