@@ -37,6 +37,7 @@ Below is an example configuration:
37
37
# Optional SASL configuration
38
38
sasl-username = " xxxxx"
39
39
sasl-password = " xxxxxxxx"
40
+ sasl-extensions = {}
40
41
sasl-mechanism = " "
41
42
sasl-version = " "
42
43
# Use if sasl-mechanism is GSSAPI. GSSAPI is for organizations using Kerberos.
@@ -46,7 +47,16 @@ Below is an example configuration:
46
47
sasl-gssapi-kerberos-config-path = " /"
47
48
sasl-gssapi-key-tab-path = " "
48
49
sasl-gssapi-realm = " realm"
49
- # Use if sasl-mechanism is `OAUTHBEARER` (experimental).
50
+ # Options if sasl-mechanism is OAUTHBEARER
51
+ sasl-oauth-service = " auth0"
52
+ sasl-oauth-client-id = " xxxxxxx"
53
+ sasl-oauth-client-secret = " xxxxxxxx"
54
+ sasl-oauth-token-url = " dedicated-auth0-token-url"
55
+ sasl-oauth-token-expiry-margin = " 10s"
56
+ sasl-oauth-scopes = " "
57
+ sasl-oauth-tenant-id = " "
58
+ [kafka .sasl-oauth-parameters ]
59
+ audience = " development"
50
60
sasl-access-token = " "
51
61
52
62
```
@@ -102,8 +112,11 @@ Username to use for SASL authentication.
102
112
#### sasl-password
103
113
Password to use for SASL authentication.
104
114
115
+ ### sasl-extensions
116
+ Arbitrary key value string pairs to pass as a TOML table
117
+
105
118
#### sasl-mechanism
106
- SASL mechanism type. Options include ` GSSAPI ` , ` OAUTHBEARER ` , ` PLAIN ` .
119
+ SASL mechanism type. Options include ` GSSAPI ` , ` OAUTHBEARER ` , ` PLAIN ` , ` SCRAM-SHA-256 ` , ` SCRAM-SHA-512 ` .
107
120
108
121
#### sasl-version
109
122
SASL protocol version.
@@ -126,8 +139,37 @@ Path to the Kerberos key tab.
126
139
#### sasl-gssapi-realm
127
140
Default Kerberos realm.
128
141
142
+ ### Options if sasl-mechanism is OAUTHBEARER
143
+ #### sasl-oauth-service
144
+ The service name to use when authenticating with SASL/OAUTH.
145
+ One of:
146
+ - ` "" ` (empty) or ` custom `
147
+ - ` auth0 `
148
+ - ` azuread `
149
+
150
+ #### sasl-oauth-client-id
151
+ The client ID to use when authenticating with SASL/OAUTH.
152
+
153
+ #### sasl-oauth-client-secret
154
+ The client secret to use when authenticating with SASL/OAUTH.
155
+
156
+ #### sasl-oauth-token-url
157
+ The token URL to use when sasl-oauth-service is ` custom ` or ` auth0 ` . Leave empty otherwise.
158
+
159
+ #### sasl-oauth-token-expiry-margin
160
+ The expiry margin for the token.
161
+
162
+ #### sasl-oauth-scopes
163
+ Optional scopes to use when authenticating with SASL/OAUTH.
164
+
165
+ #### sasl-oauth-tenant-id
166
+ Tenant ID for the AzureAD service.
167
+
168
+ #### [ kafka.sasl-oauth-parameters]
169
+ The optional key/value params for SASL/OAUTH. e.g. audience for AUTH0
170
+
129
171
#### sasl-access-token
130
- Used if the SASL mechanism is ` OAUTHBEARER ` (experimental) .
172
+ Static OAUTH token. Use this instead of other OAUTH params .
131
173
132
174
## Options
133
175
The following Kafka event handler options can be set in a
0 commit comments