@rondagostino We need one login module that succeeds. With the `sasl.jaas.config` option, we only have one login module (because it is a per-mechanism config). With static JAAS config, we could have multiple modules if on the same listener, but I think OAuth requires a single login module (https://github.com/apache/kafka/blob/09f3205e44a0b1251e88edb73faa04b0c73521a2/clients/src/main/java/org/apache/kafka/common/security/oauthbearer/internals/unsecured/OAuthBearerUnsecuredValidatorCallbackHandler.java#L115). And as you said, you could have just OAuth on a listener. Thanks for reviewing!
[ Full content available at: https://github.com/apache/kafka/pull/5733 ] This message was relayed via gitbox.apache.org for devnull@infra.apache.org