io.confluent.kafka.security.authorizer

Class ConfluentServerAuthorizer

java.lang.Object

io.confluent.security.authorizer.EmbeddedAuthorizer

io.confluent.kafka.security.authorizer.ConfluentServerAuthorizer

All Implemented Interfaces:

io.confluent.security.authorizer.Authorizer, Closeable, AutoCloseable, org.apache.kafka.common.Configurable, org.apache.kafka.common.Reconfigurable

Direct Known Subclasses:

LdapAuthorizer, MultiTenantAuthorizer

public class ConfluentServerAuthorizer
extends io.confluent.security.authorizer.EmbeddedAuthorizer
implements org.apache.kafka.server.authorizer.Authorizer, org.apache.kafka.common.Reconfigurable

Nested Class Summary

Nested classes/interfaces inherited from class io.confluent.security.authorizer.EmbeddedAuthorizer

io.confluent.security.authorizer.EmbeddedAuthorizer.AuthorizationContext, io.confluent.security.authorizer.EmbeddedAuthorizer.AuthorizerMetrics

Field Summary

Fields inherited from class io.confluent.security.authorizer.EmbeddedAuthorizer

authorizerConfig, brokerUsers, interBrokerListener, log, providersCreated

Constructor Summary

Constructors

Constructor and Description
ConfluentServerAuthorizer()

Method Summary

Modifier and Type	Method and Description
Iterable<org.apache.kafka.common.acl.AclBinding>	acls(org.apache.kafka.common.acl.AclBindingFilter filter)
List<org.apache.kafka.server.authorizer.AuthorizationResult>	authorize(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, List<org.apache.kafka.server.authorizer.Action> actions)
org.apache.kafka.server.authorizer.AuthorizationResult	authorizeByResourceType(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, org.apache.kafka.common.acl.AclOperation op, org.apache.kafka.common.resource.ResourceType resourceType)
protected Optional<org.apache.kafka.server.authorizer.Authorizer>	centralizedAclProvider()
void	configureServerInfo(org.apache.kafka.server.authorizer.internals.ConfluentAuthorizerServerInfo serverInfo)
List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclCreateResult>>	createAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, List<org.apache.kafka.common.acl.AclBinding> aclBindings)
List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclCreateResult>>	createAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, List<org.apache.kafka.common.acl.AclBinding> aclBindings, Optional<String> clusterId)
List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclDeleteResult>>	deleteAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, List<org.apache.kafka.common.acl.AclBindingFilter> aclBindingFilters)
List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclDeleteResult>>	deleteAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, List<org.apache.kafka.common.acl.AclBindingFilter> aclBindingFilters, Optional<String> clusterId)
Set<String>	reconfigurableConfigs()
void	reconfigure(Map<String,?> configs)
Map<org.apache.kafka.common.Endpoint,? extends CompletionStage<Void>>	start(org.apache.kafka.server.authorizer.AuthorizerServerInfo serverInfo)
void	validateReconfiguration(Map<String,?> configs)
protected Optional<org.apache.kafka.server.authorizer.Authorizer>	zkAclProvider()

Methods inherited from class io.confluent.security.authorizer.EmbeddedAuthorizer

accessRuleProvider, accessRuleProviders, auditLogProvider, authorize, authorizeByResourceType, close, configure, configureProviders, groupProvider, isSuperUser, logAuditMessage, metadataProvider, metrics, metricsTime, ready, scope, setupAuthorizerMetrics, start

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.io.Closeable

close

Methods inherited from interface org.apache.kafka.common.Configurable

configure

Methods inherited from interface io.confluent.security.authorizer.Authorizer

authorize

Constructor Detail

ConfluentServerAuthorizer

public ConfluentServerAuthorizer()

Method Detail

reconfigurableConfigs

public Set<String> reconfigurableConfigs()

Specified by:

reconfigurableConfigs in interface org.apache.kafka.common.Reconfigurable

validateReconfiguration

public void validateReconfiguration(Map<String,?> configs)
                             throws org.apache.kafka.common.config.ConfigException

Specified by:

validateReconfiguration in interface org.apache.kafka.common.Reconfigurable

Throws:

org.apache.kafka.common.config.ConfigException

reconfigure

public void reconfigure(Map<String,?> configs)

Specified by:

reconfigure in interface org.apache.kafka.common.Reconfigurable

configureServerInfo

public void configureServerInfo(org.apache.kafka.server.authorizer.internals.ConfluentAuthorizerServerInfo serverInfo)

Overrides:

configureServerInfo in class io.confluent.security.authorizer.EmbeddedAuthorizer

zkAclProvider

protected Optional<org.apache.kafka.server.authorizer.Authorizer> zkAclProvider()

centralizedAclProvider

protected Optional<org.apache.kafka.server.authorizer.Authorizer> centralizedAclProvider()

start

public Map<org.apache.kafka.common.Endpoint,? extends CompletionStage<Void>> start(org.apache.kafka.server.authorizer.AuthorizerServerInfo serverInfo)

authorize

public List<org.apache.kafka.server.authorizer.AuthorizationResult> authorize(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
                                                                              List<org.apache.kafka.server.authorizer.Action> actions)

authorizeByResourceType

public org.apache.kafka.server.authorizer.AuthorizationResult authorizeByResourceType(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
                                                                                      org.apache.kafka.common.acl.AclOperation op,
                                                                                      org.apache.kafka.common.resource.ResourceType resourceType)

createAcls

public List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclCreateResult>> createAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
                                                                                                      List<org.apache.kafka.common.acl.AclBinding> aclBindings)

createAcls

public List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclCreateResult>> createAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
                                                                                                      List<org.apache.kafka.common.acl.AclBinding> aclBindings,
                                                                                                      Optional<String> clusterId)

deleteAcls

public List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclDeleteResult>> deleteAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
                                                                                                      List<org.apache.kafka.common.acl.AclBindingFilter> aclBindingFilters)

deleteAcls

public List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclDeleteResult>> deleteAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
                                                                                                      List<org.apache.kafka.common.acl.AclBindingFilter> aclBindingFilters,
                                                                                                      Optional<String> clusterId)

acls

public Iterable<org.apache.kafka.common.acl.AclBinding> acls(org.apache.kafka.common.acl.AclBindingFilter filter)