...

Current state: Under Discussion

Discussion thread: https://lists.apache.org/thread/somdgdoz1o3z5rwqozsty97fdo2bgkqkhere [Change the link from the KIP proposal email archive to your own email thread]

JIRA:

...

Before KRaft, custom KafkaPrincipalBuilder implementations only needed to build principals. However, KRaft requires brokers to forward requests involving these principals to controllers. Without corresponding KafkaPrincipalSerde implementations, brokers cannot serialize/deserialize them, causing failures. Currently, the API doesn't enforce the implementation of KafkaPrincipalSerde alongside KafkaPrincipalBuilder. This KIP aims to rectify this by making it a compile-time requirement.

Public Interfaces

org.apache.kafka.common.security.auth.KafkaPrincipalBuilder

public interface KafkaPrincipalBuilder {
    KafkaPrincipal build(AuthenticationContext context);
}

...