-
Notifications
You must be signed in to change notification settings - Fork 482
/
oauth_provider.go
46 lines (40 loc) · 1.34 KB
/
oauth_provider.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
package kafkatarget
import (
"context"
"fmt"
"time"
"github.com/Azure/azure-sdk-for-go/sdk/azcore"
"github.com/Azure/azure-sdk-for-go/sdk/azcore/policy"
"github.com/Azure/azure-sdk-for-go/sdk/azidentity"
"github.com/IBM/sarama"
)
func NewOAuthProvider(opts OAuthConfig) (sarama.AccessTokenProvider, error) {
switch opts.TokenProvider {
case TokenProviderTypeAzure:
cred, err := azidentity.NewDefaultAzureCredential(nil)
if err != nil {
return nil, err
}
return &TokenProviderAzure{tokenProvider: cred, scopes: opts.Scopes}, nil
default:
return nil, fmt.Errorf("token provider '%s' is not supported", opts.TokenProvider)
}
}
type azureTokenProvider interface {
GetToken(ctx context.Context, opts policy.TokenRequestOptions) (azcore.AccessToken, error)
}
// TokenProviderAzure implements sarama.AccessTokenProvider
type TokenProviderAzure struct {
tokenProvider azureTokenProvider
scopes []string
}
// Token returns a new *sarama.AccessToken or an error
func (t *TokenProviderAzure) Token() (*sarama.AccessToken, error) {
ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
defer cancel()
token, err := t.tokenProvider.GetToken(ctx, policy.TokenRequestOptions{Scopes: t.scopes})
if err != nil {
return nil, fmt.Errorf("failed to acquire token: %w", err)
}
return &sarama.AccessToken{Token: token.Token}, nil
}