[
https://issues.apache.org/jira/browse/KAFKA-18754?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17924803#comment-17924803
]
David Jacot commented on KAFKA-18754:
-------------------------------------
I filled in the affects versions field and removed the fix versions one. The
later will be set when the change is merged and backported.
> Allow PlainSaslServer to pass client info through the negotiated properties.
> ----------------------------------------------------------------------------
>
> Key: KAFKA-18754
> URL: https://issues.apache.org/jira/browse/KAFKA-18754
> Project: Kafka
> Issue Type: Improvement
> Affects Versions: 3.9.0, 3.7.2, 3.8.1
> Reporter: Nelson B.
> Assignee: Nelson B.
> Priority: Minor
>
> In our organization, we use a custom Kafka authorizer that makes decisions
> based on client roles assigned by our IAM server. We've also implemented a
> custom {{PlainServerCallbackHandler}} that authenticates clients using their
> username and password through the IAM server. The IAM server also returns
> client info, such as assigned roles, but we're facing an
> issue—{{{}PlainSaslServer{}}} can only pass the {{authorizationID}} to the
> authorizer, meaning the client info is lost. To solve this, we want to extend
> {{PlainSaslServer}} so it can pass client info through the negotiated
> properties.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
