Principal = User:ANONYMOUS is Denied operation

[MariaIRubio]

[scholzj]

User:ANONYMOUS suggests your user is not authenticated. So you should look at the Kafka CR if it is correctly configured, if you connect to the right port etc.

[scholzj]

What I pass as a token in the Producer is the JaasConfig with the tokenUri. Isn`t that right? So first I have a request where I get the token and use it to authenticate the client, and then I pass it in the jaasConfig with the credentials and the tokenUri.

What do I have too complicated, the Producer? I also don´t understand very well the Config externals = new Config(); from the example. In my case the externals are null.

All our OAuth examples are just few lines of code. You shared 3 different classes and I do not understad how they really fit together. They do not seem to be needed. You should not need any interaction with the OAuth server. The OAuth client should do that for you.

But at the end, whatever you do produces a bad username that seems to be Dev Team A based on the exception. So either your token is wrong or your settings for extracting the username from it are wrong.

I'm afraid I cannot help you more with that. @mstruk might have some ideas when he gets to this. But I think the easiest way would be to:

• Eliminate the other listeners and unrelated authorization errors as I suggested
• Start from our examples to try to figure out what might be wrong.

[MariaIRubio]

So the only thing needed, up to the example is the JaasConfig in the producer and nothing else?

Thank you very very much for your time and your patience! I do really value and appreciate it.

[scholzj]

No, there is not just the JAAS config. There is also the callback for example.

[MariaIRubio]

And where is the Config externals = new Config() coming from? From Strimzi I guess because of the import. But should it give me the back the configuration from keycloak? Host, etc? In my case it gives null.

[scholzj]

I think that just loads values from env vars and system properties.