diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md index 9f556bd7..8cfb5232 100644 --- a/RELEASE_NOTES.md +++ b/RELEASE_NOTES.md @@ -1,6 +1,23 @@ Release Notes ============= +0.10.0 +------ + +### Added connect and read timeouts for communication with authorization server + +Before, when Kafka client or broker connected to the authorization server during authentication or token validation, there was no connect timeout and no read timeout applied. As a result, if a reverse proxy was in front of the authorization server or a network component glitch prevented normal connectivity, it could happen that the authentication request would stall for a long time. + +In order to address this, the default connect timeout and read timeout are now both set to 60 seconds and they are configurable via `oauth.connect.timeout.seconds` and `oauth.read.timeout.seconds`. + +### Added groups extraction and exposed groups info via OAuthKafkaPrincipal + +Added an authentication time mechanism on the broker where a JsonPath query can be configured to extract a set of groups from a JWT token during authentication. A custom authorizer can then retrieve this information through `OAuthKafkaPrincipal` object available during the `authorize()` call. + +### Added access to parsed JWT token + +When writing a custom authorizer you may need access to the already parsed JWT token or a map of claims returned by the introspection endpoint. A `getJSON()` method has been added to `BearerTokenWithPayload`. + 0.9.0 ----- diff --git a/examples/consumer/pom.xml b/examples/consumer/pom.xml index 063c837c..7cf164a1 100644 --- a/examples/consumer/pom.xml +++ b/examples/consumer/pom.xml @@ -7,7 +7,7 @@ io.strimzi oauth ../../pom.xml - 1.0.0-SNAPSHOT + 0.10.0 kafka-oauth-examples-consumer diff --git a/examples/docker/kafka-oauth-strimzi/kafka/pom.xml b/examples/docker/kafka-oauth-strimzi/kafka/pom.xml index ced7315b..71db99df 100644 --- a/examples/docker/kafka-oauth-strimzi/kafka/pom.xml +++ b/examples/docker/kafka-oauth-strimzi/kafka/pom.xml @@ -7,7 +7,7 @@ io.strimzi.oauth.docker kafka-oauth-docker-strimzi ../pom.xml - 1.0.0-SNAPSHOT + 0.10.0 kafka-oauth-docker-strimzi-kafka diff --git a/examples/docker/kafka-oauth-strimzi/pom.xml b/examples/docker/kafka-oauth-strimzi/pom.xml index 85b29c24..b93e7e1a 100644 --- a/examples/docker/kafka-oauth-strimzi/pom.xml +++ b/examples/docker/kafka-oauth-strimzi/pom.xml @@ -7,7 +7,7 @@ io.strimzi.oauth.docker kafka-oauth-docker-parent ../pom.xml - 1.0.0-SNAPSHOT + 0.10.0 kafka-oauth-docker-strimzi diff --git a/examples/docker/kafka-oauth-strimzi/zookeeper/pom.xml b/examples/docker/kafka-oauth-strimzi/zookeeper/pom.xml index 9bbbda53..f3a4cae8 100644 --- a/examples/docker/kafka-oauth-strimzi/zookeeper/pom.xml +++ b/examples/docker/kafka-oauth-strimzi/zookeeper/pom.xml @@ -7,7 +7,7 @@ io.strimzi.oauth.docker kafka-oauth-docker-strimzi ../pom.xml - 1.0.0-SNAPSHOT + 0.10.0 kafka-oauth-docker-strimzi-zookeeper diff --git a/examples/docker/pom.xml b/examples/docker/pom.xml index 17338f01..939c6c2d 100644 --- a/examples/docker/pom.xml +++ b/examples/docker/pom.xml @@ -6,7 +6,7 @@ io.strimzi.oauth.docker kafka-oauth-docker-parent - 1.0.0-SNAPSHOT + 0.10.0 pom @@ -15,7 +15,7 @@ 3.1.0 9.10 - 1.0.0-SNAPSHOT + 0.10.0 diff --git a/examples/docker/spring/pom.xml b/examples/docker/spring/pom.xml index be10f709..d71fdaab 100644 --- a/examples/docker/spring/pom.xml +++ b/examples/docker/spring/pom.xml @@ -13,7 +13,7 @@ io.strimzi.oauth.docker kafka-oauth-docker-spring - 1.0.0-SNAPSHOT + 0.10.0 UTF-8 diff --git a/examples/docker/strimzi-kafka-image/pom.xml b/examples/docker/strimzi-kafka-image/pom.xml index e9aed1fa..dd29c44c 100644 --- a/examples/docker/strimzi-kafka-image/pom.xml +++ b/examples/docker/strimzi-kafka-image/pom.xml @@ -7,12 +7,12 @@ io.strimzi.oauth.docker kafka-oauth-docker-parent ../pom.xml - 1.0.0-SNAPSHOT + 0.10.0 org.example kafka-oauth-docker-strimzi-kafka - 1.0.0-SNAPSHOT + 0.10.0 pom diff --git a/examples/producer/pom.xml b/examples/producer/pom.xml index 3589a0a3..5cdb94e3 100644 --- a/examples/producer/pom.xml +++ b/examples/producer/pom.xml @@ -7,7 +7,7 @@ io.strimzi oauth ../../pom.xml - 1.0.0-SNAPSHOT + 0.10.0 kafka-oauth-examples-producer diff --git a/oauth-client/pom.xml b/oauth-client/pom.xml index 221aa98c..b613ea7f 100644 --- a/oauth-client/pom.xml +++ b/oauth-client/pom.xml @@ -6,7 +6,7 @@ io.strimzi oauth - 1.0.0-SNAPSHOT + 0.10.0 kafka-oauth-client diff --git a/oauth-common/pom.xml b/oauth-common/pom.xml index a757ab07..451c0c83 100644 --- a/oauth-common/pom.xml +++ b/oauth-common/pom.xml @@ -6,7 +6,7 @@ io.strimzi oauth - 1.0.0-SNAPSHOT + 0.10.0 kafka-oauth-common diff --git a/oauth-keycloak-authorizer/pom.xml b/oauth-keycloak-authorizer/pom.xml index 68ddb163..1fb5ebeb 100644 --- a/oauth-keycloak-authorizer/pom.xml +++ b/oauth-keycloak-authorizer/pom.xml @@ -6,7 +6,7 @@ io.strimzi oauth - 1.0.0-SNAPSHOT + 0.10.0 kafka-oauth-keycloak-authorizer diff --git a/oauth-server-plain/pom.xml b/oauth-server-plain/pom.xml index fd3c0c17..9466fce2 100644 --- a/oauth-server-plain/pom.xml +++ b/oauth-server-plain/pom.xml @@ -6,7 +6,7 @@ io.strimzi oauth - 1.0.0-SNAPSHOT + 0.10.0 kafka-oauth-server-plain diff --git a/oauth-server/pom.xml b/oauth-server/pom.xml index 071bbe8d..4b2e54c1 100644 --- a/oauth-server/pom.xml +++ b/oauth-server/pom.xml @@ -6,7 +6,7 @@ io.strimzi oauth - 1.0.0-SNAPSHOT + 0.10.0 kafka-oauth-server diff --git a/pom.xml b/pom.xml index 4a03dede..7531208b 100644 --- a/pom.xml +++ b/pom.xml @@ -5,7 +5,7 @@ io.strimzi oauth - 1.0.0-SNAPSHOT + 0.10.0 pom diff --git a/testsuite/docker/hydra-import/pom.xml b/testsuite/docker/hydra-import/pom.xml index f015ff74..75b67227 100644 --- a/testsuite/docker/hydra-import/pom.xml +++ b/testsuite/docker/hydra-import/pom.xml @@ -7,7 +7,7 @@ io.strimzi.oauth.testsuite kafka-oauth-testsuite-docker-pom - 1.0.0-SNAPSHOT + 0.10.0 pom diff --git a/testsuite/docker/kafka/pom.xml b/testsuite/docker/kafka/pom.xml index 5fcdeef9..4dbb7e6c 100644 --- a/testsuite/docker/kafka/pom.xml +++ b/testsuite/docker/kafka/pom.xml @@ -7,7 +7,7 @@ io.strimzi.oauth.testsuite kafka-oauth-testsuite-docker-pom - 1.0.0-SNAPSHOT + 0.10.0 pom diff --git a/testsuite/docker/pom.xml b/testsuite/docker/pom.xml index ef766660..a7a548ed 100644 --- a/testsuite/docker/pom.xml +++ b/testsuite/docker/pom.xml @@ -7,7 +7,7 @@ io.strimzi.oauth.testsuite kafka-oauth-testsuite - 1.0.0-SNAPSHOT + 0.10.0 pom diff --git a/testsuite/hydra-test/pom.xml b/testsuite/hydra-test/pom.xml index 5328f507..35bf345f 100644 --- a/testsuite/hydra-test/pom.xml +++ b/testsuite/hydra-test/pom.xml @@ -7,7 +7,7 @@ io.strimzi.oauth.testsuite kafka-oauth-testsuite - 1.0.0-SNAPSHOT + 0.10.0 hydra-test diff --git a/testsuite/keycloak-auth-tests/pom.xml b/testsuite/keycloak-auth-tests/pom.xml index b3e1a0c8..e4215bd3 100644 --- a/testsuite/keycloak-auth-tests/pom.xml +++ b/testsuite/keycloak-auth-tests/pom.xml @@ -7,7 +7,7 @@ io.strimzi.oauth.testsuite kafka-oauth-testsuite - 1.0.0-SNAPSHOT + 0.10.0 keycloak-auth-tests diff --git a/testsuite/keycloak-authz-tests/pom.xml b/testsuite/keycloak-authz-tests/pom.xml index b402dd2f..77e2e82a 100644 --- a/testsuite/keycloak-authz-tests/pom.xml +++ b/testsuite/keycloak-authz-tests/pom.xml @@ -7,7 +7,7 @@ io.strimzi.oauth.testsuite kafka-oauth-testsuite - 1.0.0-SNAPSHOT + 0.10.0 keycloak-authz-tests diff --git a/testsuite/keycloak-errors-tests/pom.xml b/testsuite/keycloak-errors-tests/pom.xml index 66ce328d..84429a46 100644 --- a/testsuite/keycloak-errors-tests/pom.xml +++ b/testsuite/keycloak-errors-tests/pom.xml @@ -7,7 +7,7 @@ io.strimzi.oauth.testsuite kafka-oauth-testsuite - 1.0.0-SNAPSHOT + 0.10.0 keycloak-errors-tests diff --git a/testsuite/pom.xml b/testsuite/pom.xml index db0188e8..a1e96753 100644 --- a/testsuite/pom.xml +++ b/testsuite/pom.xml @@ -6,7 +6,7 @@ io.strimzi.oauth.testsuite kafka-oauth-testsuite - 1.0.0-SNAPSHOT + 0.10.0 pom @@ -38,7 +38,7 @@ 4.12 1.18.2 3.1.12 - 1.0.0-SNAPSHOT + 0.10.0 .. quay.io/strimzi/kafka:0.23.0-kafka-2.8.0 @@ -63,7 +63,7 @@ io.strimzi.oauth.testsuite jwt-over-plain-keycloak-authz-test - 1.0.0-SNAPSHOT + 0.10.0