Examples with OAuthBearerUnsecuredValidatorCallbackHandler org.apache.kafka.common.security.oauthbearer.internals.unsecured.OAuthBearerUnsecuredValidatorCallbackHandler used on opensource projects

Example 1 with OAuthBearerUnsecuredValidatorCallbackHandler

use of org.apache.kafka.common.security.oauthbearer.internals.unsecured.OAuthBearerUnsecuredValidatorCallbackHandler in project kafka by apache.

the class SaslChannelBuilder method createServerCallbackHandlers.

private void createServerCallbackHandlers(Map<String, ?> configs) {
    for (String mechanism : jaasContexts.keySet()) {
        AuthenticateCallbackHandler callbackHandler;
        String prefix = ListenerName.saslMechanismPrefix(mechanism);
        @SuppressWarnings("unchecked") Class<? extends AuthenticateCallbackHandler> clazz = (Class<? extends AuthenticateCallbackHandler>) configs.get(prefix + BrokerSecurityConfigs.SASL_SERVER_CALLBACK_HANDLER_CLASS);
        if (clazz != null)
            callbackHandler = Utils.newInstance(clazz);
        else if (mechanism.equals(PlainSaslServer.PLAIN_MECHANISM))
            callbackHandler = new PlainServerCallbackHandler();
        else if (ScramMechanism.isScram(mechanism))
            callbackHandler = new ScramServerCallbackHandler(credentialCache.cache(mechanism, ScramCredential.class), tokenCache);
        else if (mechanism.equals(OAuthBearerLoginModule.OAUTHBEARER_MECHANISM))
            callbackHandler = new OAuthBearerUnsecuredValidatorCallbackHandler();
        else
            callbackHandler = new SaslServerCallbackHandler();
        saslCallbackHandlers.put(mechanism, callbackHandler);
    }
}

Example 2 with OAuthBearerUnsecuredValidatorCallbackHandler

use of org.apache.kafka.common.security.oauthbearer.internals.unsecured.OAuthBearerUnsecuredValidatorCallbackHandler in project kafka by apache.

the class OAuthBearerSaslServerTest method throwsAuthenticationExceptionOnInvalidExtensions.

/**
 * If the callback handler handles the `OAuthBearerExtensionsValidatorCallback`
 *  and finds an invalid extension, SaslServer should throw an authentication exception
 */
@Test
public void throwsAuthenticationExceptionOnInvalidExtensions() {
    OAuthBearerUnsecuredValidatorCallbackHandler invalidHandler = new OAuthBearerUnsecuredValidatorCallbackHandler() {

        @Override
        public void handle(Callback[] callbacks) throws UnsupportedCallbackException {
            for (Callback callback : callbacks) {
                if (callback instanceof OAuthBearerValidatorCallback) {
                    OAuthBearerValidatorCallback validationCallback = (OAuthBearerValidatorCallback) callback;
                    validationCallback.token(new OAuthBearerTokenMock());
                } else if (callback instanceof OAuthBearerExtensionsValidatorCallback) {
                    OAuthBearerExtensionsValidatorCallback extensionsCallback = (OAuthBearerExtensionsValidatorCallback) callback;
                    extensionsCallback.error("firstKey", "is not valid");
                    extensionsCallback.error("secondKey", "is not valid either");
                } else
                    throw new UnsupportedCallbackException(callback);
            }
        }
    };
    saslServer = new OAuthBearerSaslServer(invalidHandler);
    Map<String, String> customExtensions = new HashMap<>();
    customExtensions.put("firstKey", "value");
    customExtensions.put("secondKey", "value");
    assertThrows(SaslAuthenticationException.class, () -> saslServer.evaluateResponse(clientInitialResponse(null, false, customExtensions)));
}