Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Field

Description

Renewer

 Renewer is an user who Kafka Principal, which is allowed to renew this token before the max lifetime expires.  If Renewer list is empty, then Renewer will default to the owner (Principal which requested this token).

MaxLifeTime
Max lifetime for token in milli seconds to future date. if value is -1, then MaxLifeTime will default to a server side config value.
MaxLifeTimeStamp = Token Issue TimeStamp + MaxLifeTime
DelegationTokenResponse


Code Block
DelegationTokenResponse => ErrorCode TokenDetails
  ErrorCode => INT16
  TokenDetails => Owner IssueTimeStampExpiryTimeStamp ExpiryTimeMaxLifeTimeStamp MaxLifeTime TokenId HMAC [Renewer]
    Owner => String
    IssueTimeStampExpiryTimeStamp => INT64
    ExpiryTimeMaxLifeTimeStamp => INT64
    MaxLifeTime => INT64
    TokenId => String 
    HMAC => bytes
    Renewer => String
IssueTimeStamp Issue

Field

Description

Owner

Kakfa Principal which requested the delegation token

ExpiryTimeStamp

Token

expiry timestamp. Unit is milliseconds since beginning of the epoch (midnight Jan 1, 1970 (UTC)).

ExpiryTimeMaxLifeTimeStamp

Token expiry time in mills. ExpiryTimeStamp = IssueTimeStamp + ExpiryTime

MaxLifeTime

Token max life time in mills. MaxLifeTimeStamp = MaxLifeTimeStamp + MaxLifeTimemax life timestamp. Unit is milliseconds since beginning of the epoch (midnight Jan 1, 1970 (UTC)).

TokenId

Token Id.

HMAC
Keyed-hash message authentication code
Renewer
Renewers list
Possible Error Codes
* AuthorizationException ()
 
RenewDelegationTokenRequest
 
Code Block
RenewDelegationTokenRequest => HMAC ExpiryTime
  HMAC => bytes
  ExpiryTime => INT64
 

Field

Description

HMAC

HMAC of the delegation token to be renewed

ExpiryTime
Token Expiry time in milli seconds to future date.
 
RenewDelegationTokenResponse
 
Code Block
RenewDelegationTokenResponse => ErrorCode
   ErrorCode => INT32
 
Possible Error Codes
* AuthorizationException ()
* TokenExpiredException ()
* TokenRenewerMismatchException ()
* TokenNotFoundException ()
 

...