@itentialopensource/adapter-kafkav2 1.0.10 → 1.0.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AUTH.md +24 -0
- package/CHANGELOG.md +8 -0
- package/package.json +1 -1
package/AUTH.md
CHANGED
|
@@ -28,6 +28,30 @@ STEPS
|
|
|
28
28
|
"password": "password"
|
|
29
29
|
}
|
|
30
30
|
```
|
|
31
|
+
|
|
32
|
+
#### OAUTH
|
|
33
|
+
```json
|
|
34
|
+
"sasl": {
|
|
35
|
+
"mechanism": "oauthbearer",
|
|
36
|
+
"oauth": {
|
|
37
|
+
"tokenEndpoint": "<your OAuth token endpoint URL>",
|
|
38
|
+
"clientId": "<your client ID>",
|
|
39
|
+
"clientSecret": "<your client secret>",
|
|
40
|
+
"scope": "<optional — your OAuth scope, if required by your provider>",
|
|
41
|
+
"tokenRefreshBuffer": 30000
|
|
42
|
+
}
|
|
43
|
+
}
|
|
44
|
+
```
|
|
45
|
+
|
|
46
|
+
A few notes on the OAUTH fields:
|
|
47
|
+
|
|
48
|
+
- mechanism must be set to oauthbearer to enable OAuth2.
|
|
49
|
+
- tokenEndpoint, clientId, and clientSecret are required — these should come from your identity provider (e.g., your Confluent Cloud or Azure AD OAuth setup).
|
|
50
|
+
- scope is optional and only needed if your provider requires it.
|
|
51
|
+
- tokenRefreshBuffer is optional (defaults to 30000ms / 30 seconds) — it controls how far ahead of expiration the adapter proactively refreshes the token.
|
|
52
|
+
- username and password should be removed entirely when using OAuth2 — they only apply to PLAIN/SCRAM-SHA.
|
|
53
|
+
|
|
54
|
+
|
|
31
55
|
For more details on sasl authentication follow the README.md
|
|
32
56
|
4. Restart the adapter. If your properties were set correctly, the adapter should go online.
|
|
33
57
|
|
package/CHANGELOG.md
CHANGED