Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Current state["DISCUSSION"]. 

Discussion thread: here

JIRA: KAFKA-1696 

Please keep the discussion on the mailing list rather than commenting on the wiki (wiki discussions get unwieldy fast).

...

Code Block
DelegationTokenRequest => [Renewer] MaxLifeTimeMaxDate
  Renewer => string
  MaxLifeTimeMaxDate => INT64

Field

Description

Renewer

 Renewer Renewer is an Kafka Principal, which is allowed to renew this token before the max lifetime expires.  If Renewer list is empty, then Renewer will default to the owner (Principal which requested this token).

MaxLifeTimeMaxDate
Max lifetime for token in milli seconds. if value is -1, then MaxLifeTime will default to a server side config value.

...

Code Block
DelegationTokenResponse => ErrorCode TokenDetails
  ErrorCode => INT16
  TokenDetails => Owner ExpiryTimeStamp MaxLifeTimeStamp TokenId HMAC [Renewer]
    Owner => String
    ExpiryTimeStampIssueDate  => INT64
    MaxLifeTimeStampExpiryDate => INT64
    TokenIdTokenUId => String 
    HMAC => bytes
    Renewer => String

Field

Description

Owner

Kakfa Principal which requested the delegation token

ExpiryTimeStampIssueDate

Token expiry timestamptimestamp (in msec) when this token was generated . Unit is milliseconds since beginning of the epoch (midnight Jan 1, 1970 (UTC)).

MaxLifeTimeStampExpiryDate

Token max life timestamptimestamp (in msec) at which this token expires . Unit is milliseconds since beginning of the epoch (midnight Jan 1, 1970 (UTC)).

TokenId

Token Id.Sequence number/UUID to ensure uniqueness 

HMAC
Keyed-hash message authentication code
Renewer
Renewers list

...

Code Block
RenewDelegationTokenRequest => HMAC  ExpiryTimerenewPeriod
  HMAC => bytes
  ExpiryTimerenewPeriod => INT64

Field

Description

HMAC

HMAC of the delegation token to be renewed

renewPeriod
renewPeriod in milli 
ExpiryTime
Token Expiry time in milli
seconds
 
RenewDelegationTokenResponse

...