OAUTHBEARER

The SASL mechanism that authenticates a Kafka client with an OAuth bearer token.

The client fetches a token from an identity provider and presents it; the broker validates its signature and expiry. It suits organisations that already issue OAuth tokens to services.