Package io.confluent.kafka.schemaregistry.client.security.bearerauth.oauth
package io.confluent.kafka.schemaregistry.client.security.bearerauth.oauth
-
ClassesClassDescription
CachedOauthTokenRetrieveris a wrapper aroundJwtRetrieverthat will communicate with an OAuth/OIDC provider directly via HTTP to post client credentials (SchemaRegistryClientConfig.BEARER_AUTH_CLIENT_ID/SchemaRegistryClientConfig.BEARER_AUTH_CLIENT_SECRET) to a publicized token endpoint URL (SchemaRegistryClientConfig.BEARER_AUTH_ISSUER_ENDPOINT_URL) inorder to fetch an access token.ClientJwtValidatoris an implementation ofJwtValidatorthat is used by the client to perform some rudimentary validation of the JWT access token that is received as part of the response from posting the client credentials to the OAuth/OIDC provider's token endpoint.HttpJwtRetrieveris aJwtRetrieverthat will communicate with an OAuth/OIDC provider directly via HTTP to post client credentials (OAuthBearerLoginCallbackHandler.CLIENT_ID_CONFIG/OAuthBearerLoginCallbackHandler.CLIENT_SECRET_CONFIG) to a publicized token endpoint URL (SaslConfigs.SASL_OAUTHBEARER_TOKEN_ENDPOINT_URL).OAuthCredentialProvideris aBearerAuthCredentialProviderimplementation used for configuring OAuth in schema registry.OauthTokenCacheis a simpleOAuthBearerTokenCache.