apache / apache/fluss

security.sasl.plain.jaas.config may become incompatible if the Fluss package changes.

Open
#1,491 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
2.1k
Forks
625
Avg merge
3d 14h
Merged PRs (30d)
97

Description

### Search before asking

- [x] I searched in the [issues](https://github.com/alibaba/fluss/issues) and found nothing similar.

### Motivation

Currently, we have to config `security.sasl.plain.jaas.config = `com.alibaba.fluss.security.auth.sasl.plain.PlainLoginModule required user_admin="admin-pass" user_developer="developer-pass" user_consumer="consumer-pass"`
This will have two problem:
1. If package name of PlainLoginModule changes, the configuration will be incompatible. For example, because fluss will be repackage to org.apache, user's old config will be incompatible. I don't want to this happens again later.
2. Such as https://github.com/apache/fluss/issues/1071 , we can provide a more friendly configuration to help user generate security.sasl.plain.jaas.config .

### Solution

_No response_

### Anything else?

_No response_

### Willingness to contribute

- [ ] I'm willing to submit a PR!

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by tracing the PlainLoginModule referenced by security.sasl.plain.jaas.config and reviewing how the Fluss package name is exposed to users. Compare the current JAAS configuration with the requested friendlier configuration, then define tests that verify compatibility when the package changes and that the generated setting is usable.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.