-
Bug
-
Resolution: Done
-
Major
-
1.4.1.GA
-
None
- About the sentence structure in "4.10.2. OAuth 2.0 Kafka broker configuration"(1)
- (There are requests from one of our customers)
- Issue:
- It's hard to see that "Minimum listener configuration for OAuth 2.0 authentication" is an example of a jwks endpoint. As a result, one of our customers erroneously merged and used the configuration for the introspection endpoint in "4.10.2.4. OAuth 2.0 introspection endpoint configuration" based on this jwks endpoint example. The users will know that the configuration is incorrect due to the merged configuration only when an error occurs during Kafka operation.
- Resolution (Candidate):
- State that, first of all, AMQ Streams provides two methods for token validation. Please refer to this URL(2).
- State that "Minimum listener configuration for OAuth 2.0 authentication" is an example of jwks endpoint.
- (1) 4.10.2. OAuth 2.0 Kafka broker configuration https://access.redhat.com/documentation/en-us/red_hat_amq/7.6/html-single/using_amq_streams_on_rhel/index#con-oauth-authentication-broker-str
- (2) OAuth2 for Authentication https://github.com/strimzi/strimzi-kafka-oauth/tree/0.5.0
~~~
There are two options for token validation:
・Using the JWKS endpoint in combination with signed JWT formatted access tokens
・Using the introspection endpoint
~~~
- relates to
-
ENTMQST-1942 [Doc OCP, RHEL] New authentication configuration options for OAuth
-
- Closed
-