ruby-kafka-aws-iam 1.4.2 → 1.4.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 70f5cfc318547021d6d3acad6780dbd048c53da455ed71ce8b44661a24d5b884
-  data.tar.gz: 9623c5fe6a7301c4a8792ddf4d877025407d5bc791bd518258244c04315abfe2
+  metadata.gz: 607bb37655f529a498de009d4cd38a4ef20c6f482bfe1d6cca8ed3853f2e6ed3
+  data.tar.gz: f2e06f1cd3c0604257fecbaf9e547993ec2e6a5e43a8d8c8c71eac255c677a95
 SHA512:
-  metadata.gz: 5fda77a743ae3f98cce165b51f865788bba54327987bfa76fabbf0986788ed915e60b4304b17d78baa818a5be6799156168758b3f7304d0ff7344cd876e94f68
-  data.tar.gz: 9e20f068510c988138e5e799c75b4c558f6c93ea962e9e5ae27daeadef2e68dbdf175092723a94eae69bc943bfc9a463b2986c4594edb242435a66bab570bab6
+  metadata.gz: 7c5a204ce55df1eae6fdaf28dfa5b0f22c5b499d4a008e86bac9705f8118f870406134bbff016da201a693261cd6a5fa31b9e8a7c72fdeefb9d1b1c61b4dce56
+  data.tar.gz: 936df6a6c67d92a55c830faae1b13b0a2b497764753cd33592f7e6322eafd38a42e0ab0ce348b945048bb57bff2eca07a4bb08b555fc8e0eac039565187c536c

data/lib/kafka/client.rb

@@ -86,7 +86,9 @@ module Kafka
                    sasl_gssapi_keytab: nil, sasl_plain_authzid: '', sasl_plain_username: nil, sasl_plain_password: nil,
                    sasl_scram_username: nil, sasl_scram_password: nil, sasl_scram_mechanism: nil,
                    sasl_aws_msk_iam_access_key_id: nil,
-                   sasl_aws_msk_iam_secret_key_id: nil, sasl_aws_msk_iam_aws_region: nil,
+                   sasl_aws_msk_iam_secret_key_id: nil,
+                   sasl_aws_msk_iam_aws_region: nil,
+                   sasl_aws_msk_iam_session_token: nil,
                    sasl_over_ssl: true, ssl_ca_certs_from_system: false, partitioner: nil, sasl_oauth_token_provider: nil, ssl_verify_hostname: true,
                    resolve_seed_brokers: false)
       @logger = TaggedLogger.new(logger)
@@ -117,6 +119,7 @@ module Kafka
         sasl_aws_msk_iam_access_key_id: sasl_aws_msk_iam_access_key_id,
         sasl_aws_msk_iam_secret_key_id: sasl_aws_msk_iam_secret_key_id,
         sasl_aws_msk_iam_aws_region: sasl_aws_msk_iam_aws_region,
+        sasl_aws_msk_iam_session_token: sasl_aws_msk_iam_session_token,
         sasl_oauth_token_provider: sasl_oauth_token_provider,
         logger: @logger
       )

data/lib/kafka/connection.rb

@@ -127,12 +127,7 @@ module Kafka
       @logger.debug "Opening connection to #{@host}:#{@port} with client id #{@client_id}..."
 
       if @ssl_context
-        @socket = SSLSocketWithTimeout.new(@host,
-                                           @port,
-                                           connect_timeout: @connect_timeout,
-                                           timeout: @socket_timeout,
-                                           ssl_context: @ssl_context,
-                                           logger: @logger)
+        @socket = SSLSocketWithTimeout.new(@host, @port, connect_timeout: @connect_timeout, timeout: @socket_timeout, ssl_context: @ssl_context)
       else
         @socket = SocketWithTimeout.new(@host, @port, connect_timeout: @connect_timeout, timeout: @socket_timeout)
       end

data/lib/kafka/sasl/awsmskiam.rb

@@ -9,12 +9,13 @@ module Kafka
     class AwsMskIam
       AWS_MSK_IAM = "AWS_MSK_IAM"
 
-      def initialize(aws_region:, access_key_id:, secret_key_id:, logger:)
+      def initialize(aws_region:, access_key_id:, secret_key_id:, session_token: nil,logger:)
         @semaphore = Mutex.new
 
         @aws_region = aws_region
         @access_key_id = access_key_id
         @secret_key_id = secret_key_id
+        @session_token = session_token
         @logger = TaggedLogger.new(logger)
       end
 
@@ -39,13 +40,11 @@ module Kafka
         encoder.write_bytes(msg)
 
         begin
-          @logger.debug "Decoding first server SASL AWS_MSK_IAM message"
           @server_first_message = decoder.bytes
           @logger.debug "Received first server SASL AWS_MSK_IAM message: #{@server_first_message}"
 
           raise Kafka::Error, "SASL AWS_MSK_IAM authentication failed: unknown error" unless @server_first_message
         rescue Errno::ETIMEDOUT, EOFError => e
-          @logger.error e.backtrace
           raise Kafka::Error, "SASL AWS_MSK_IAM authentication failed: #{e.message}"
         end
 
@@ -63,7 +62,7 @@ module Kafka
       end
 
       def authentication_payload(host:, time_now:)
-        {
+        payload = {
           'version': "2020_10_22",
           'host': host,
           'user-agent': "ruby-kafka",
@@ -74,7 +73,11 @@ module Kafka
           'x-amz-signedheaders': "host",
           'x-amz-expires': "900",
           'x-amz-signature': signature(host: host, time_now: time_now)
-        }.to_json
+        }
+
+        payload['x-amz-security-token'] = @session_token unless @session_token.nil?
+
+        payload.to_json
       end
 
       def canonical_request(host:, time_now:)

data/lib/kafka/sasl_authenticator.rb

@@ -14,8 +14,8 @@ module Kafka
                    sasl_oauth_token_provider:,
                    sasl_aws_msk_iam_access_key_id:,
                    sasl_aws_msk_iam_secret_key_id:,
-                   sasl_aws_msk_iam_aws_region:
-                  )
+                   sasl_aws_msk_iam_aws_region:,
+                   sasl_aws_msk_iam_session_token: nil)
       @logger = TaggedLogger.new(logger)
 
       @plain = Sasl::Plain.new(
@@ -42,6 +42,7 @@ module Kafka
         access_key_id: sasl_aws_msk_iam_access_key_id,
         secret_key_id: sasl_aws_msk_iam_secret_key_id,
         aws_region: sasl_aws_msk_iam_aws_region,
+        session_token: sasl_aws_msk_iam_session_token,
         logger: @logger,
       )
 

data/lib/kafka/ssl_socket_with_timeout.rb

@@ -21,13 +21,12 @@ module Kafka
     # @param timeout [Integer] the read and write timeout, in seconds.
     # @param ssl_context [OpenSSL::SSL::SSLContext] which SSLContext the ssl connection should use
     # @raise [Errno::ETIMEDOUT] if the timeout is exceeded.
-    def initialize(host, port, connect_timeout: nil, timeout: nil, ssl_context:, logger: nil)
+    def initialize(host, port, connect_timeout: nil, timeout: nil, ssl_context:)
       addr = Socket.getaddrinfo(host, nil)
       sockaddr = Socket.pack_sockaddr_in(port, addr[0][3])
 
       @connect_timeout = connect_timeout
       @timeout = timeout
-      @logger = logger
 
       @tcp_socket = Socket.new(Socket.const_get(addr[0][0]), Socket::SOCK_STREAM, 0)
       @tcp_socket.setsockopt(Socket::IPPROTO_TCP, Socket::TCP_NODELAY, 1)
@@ -94,7 +93,6 @@ module Kafka
     def read(num_bytes)
       buffer = String.new
 
-      @logger.debug "Reading #{num_bytes} bytes from #{@ssl_socket}"
       until buffer.length >= num_bytes
         begin
           # Unlike plain TCP sockets, SSL sockets don't support IO.select
@@ -103,8 +101,6 @@ module Kafka
           # catch exceptions from read_nonblock and gradually build up
           # our read buffer.
           buffer << @ssl_socket.read_nonblock(num_bytes - buffer.length)
-
-          @logger.debug "Bytes read: #{buffer.length}"
         rescue IO::WaitReadable
           if select_with_timeout(@ssl_socket, :read)
             retry

data/lib/kafka/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Kafka
-  VERSION = "1.4.2"
+  VERSION = "1.4.3"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ruby-kafka-aws-iam
 version: !ruby/object:Gem::Version
-  version: 1.4.2
+  version: 1.4.3
 platform: ruby
 authors:
 - Daniel Schierbeck