@platformatic/rdkafka 4.0.1 → 4.1.0-alpha.1

package/deps/librdkafka/src/rdkafka_conf.h

@@ -34,7 +34,7 @@
 #include "rdkafka_cert.h"
 
 #if WITH_SSL && OPENSSL_VERSION_NUMBER >= 0x10100000 &&                        \
-    !defined(OPENSSL_IS_BORINGSSL)
+    !defined(OPENSSL_NO_ENGINE)
 #define WITH_SSL_ENGINE 1
 /* Deprecated in OpenSSL 3 */
 #include <openssl/engine.h>
@@ -151,9 +151,29 @@ typedef enum {
 
 typedef enum {
         RD_KAFKA_SASL_OAUTHBEARER_METHOD_DEFAULT,
-        RD_KAFKA_SASL_OAUTHBEARER_METHOD_OIDC
+        RD_KAFKA_SASL_OAUTHBEARER_METHOD_OIDC,
 } rd_kafka_oauthbearer_method_t;
 
+typedef enum {
+        RD_KAFKA_SASL_OAUTHBEARER_GRANT_TYPE_CLIENT_CREDENTIALS,
+        RD_KAFKA_SASL_OAUTHBEARER_GRANT_TYPE_JWT_BEARER,
+} rd_kafka_oauthbearer_grant_type_t;
+
+typedef enum {
+        RD_KAFKA_SASL_OAUTHBEARER_ASSERTION_ALGORITHM_RS256,
+        RD_KAFKA_SASL_OAUTHBEARER_ASSERTION_ALGORITHM_ES256,
+} rd_kafka_oauthbearer_assertion_algorithm_t;
+
+typedef enum {
+        RD_KAFKA_SASL_OAUTHBEARER_METADATA_AUTHENTICATION_TYPE_NONE,
+        RD_KAFKA_SASL_OAUTHBEARER_METADATA_AUTHENTICATION_TYPE_AZURE_IMDS,
+} rd_kafka_oauthbearer_metadata_authentication_type_t;
+
+
+#define RD_KAFKA_SASL_OAUTHBEARER_METADATA_AUTHENTICATION_URL_AZURE_IMDS       \
+        "http://169.254.169.254/metadata/identity/oauth2/token"
+
+
 typedef enum {
         RD_KAFKA_SSL_ENDPOINT_ID_NONE,
         RD_KAFKA_SSL_ENDPOINT_ID_HTTPS, /**< RFC2818 */
@@ -169,9 +189,14 @@ typedef enum {
         RD_KAFKA_GROUP_PROTOCOL_CONSUMER,
 } rd_kafka_group_protocol_t;
 
+typedef enum {
+        RD_KAFKA_METADATA_RECOVERY_STRATEGY_NONE,
+        RD_KAFKA_METADATA_RECOVERY_STRATEGY_REBOOTSTRAP,
+} rd_kafka_metadata_recovery_strategy_t;
+
 /* Increase in steps of 64 as needed.
  * This must be larger than sizeof(rd_kafka_[topic_]conf_t) */
-#define RD_KAFKA_CONF_PROPS_IDX_MAX (64 * 33)
+#define RD_KAFKA_CONF_PROPS_IDX_MAX (64 * 35)
 
 /**
  * @struct rd_kafka_anyconf_t
@@ -202,6 +227,7 @@ struct rd_kafka_conf_s {
         int msg_copy_max_size;
         int recv_max_msg_size;
         int max_inflight;
+        int metadata_recovery_rebootstrap_trigger_ms;
         int metadata_request_timeout_ms;
         int metadata_refresh_interval_ms;
         int metadata_refresh_fast_cnt;
@@ -236,6 +262,7 @@ struct rd_kafka_conf_s {
         char *broker_version_fallback;
         rd_kafka_secproto_t security_protocol;
         rd_kafka_client_dns_lookup_t client_dns_lookup;
+        rd_kafka_metadata_recovery_strategy_t metadata_recovery_strategy;
 
         struct {
 #if WITH_SSL
@@ -281,6 +308,11 @@ struct rd_kafka_conf_s {
                                       void *opaque);
         } ssl;
 
+        struct {
+                char *ca_location;
+                char *ca_pem;
+        } https;
+
         struct {
                 const struct rd_kafka_sasl_provider *provider;
                 char *principal;
@@ -310,11 +342,41 @@ struct rd_kafka_conf_s {
                 int enable_callback_queue;
                 struct {
                         rd_kafka_oauthbearer_method_t method;
+                        rd_kafka_oauthbearer_grant_type_t grant_type;
                         char *token_endpoint_url;
                         char *client_id;
                         char *client_secret;
                         char *scope;
+                        struct {
+                                rd_kafka_oauthbearer_assertion_algorithm_t
+                                    algorithm;
+                                char *file;
+                                char *jwt_template_file;
+
+                                struct {
+                                        char *subject;
+                                        char *audience;
+                                        char *issuer;
+                                        rd_bool_t jti_include;
+                                        int not_before_s;
+                                        int expiration_s;
+                                } claim;
+                                struct {
+                                        char *file;
+                                        char *passphrase;
+                                        char *pem;
+                                } private_key;
+
+                        } assertion;
+
+                        struct {
+                                rd_kafka_oauthbearer_metadata_authentication_type_t
+                                    type;
+                        } metadata_authentication;
+
+
                         char *extensions_str;
+                        rd_bool_t builtin_token_refresh_cb;
                         /* SASL/OAUTHBEARER token refresh event callback */
                         void (*token_refresh_cb)(rd_kafka_t *rk,
                                                  const char *oauthbearer_config,
@@ -388,7 +450,6 @@ struct rd_kafka_conf_s {
         rd_kafkap_str_t *group_protocol_type;
         char *partition_assignment_strategy;
         rd_list_t partition_assignors;
-        rd_bool_t partition_assignors_cooperative;
         int enabled_assignor_cnt;
 
         void (*rebalance_cb)(rd_kafka_t *rk,
@@ -637,6 +698,9 @@ struct rd_kafka_topic_conf_s {
 
 char **rd_kafka_conf_kv_split(const char **input, size_t incnt, size_t *cntp);
 
+char *
+rd_kafka_conf_kv_get(const char *config, const char *key, const char pairs_sep);
+
 void rd_kafka_anyconf_destroy(int scope, void *conf);
 
 rd_bool_t rd_kafka_conf_is_modified(const rd_kafka_conf_t *conf,