// This assembly is included in the following assemblies:
//
// assembly-oauth-security.adoc

[id='assembly-oauth-authentication_{context}']
= Using OAuth 2.0 token-based authentication

[role="_abstract"]
Strimzi supports the use of link:https://oauth.net/2/[OAuth 2.0^] for token-based authentication.
An OAuth 2.0 authorization server handles the granting of access and inquiries about access.
Kafka clients authenticate to Kafka brokers.
Brokers and clients communicate with the authorization server, as necessary, to obtain or validate access tokens.

For a deployment of Strimzi, OAuth 2.0 integration provides the following support:

* Server-side OAuth 2.0 authentication for Kafka brokers
* Client-side OAuth 2.0 authentication for Kafka MirrorMaker, Kafka Connect, and the Kafka Bridge

include::../../modules/oauth/con-oauth-authentication-broker.adoc[leveloffset=+1]
include::../../modules/oauth/con-oauth-authentication-client.adoc[leveloffset=+1]
include::../../modules/oauth/con-oauth-authentication-client-options.adoc[leveloffset=+1]
include::../../modules/oauth/con-oauth-reauthentication.adoc[leveloffset=+1]
include::../../modules/oauth/con-oauth-config.adoc[leveloffset=+1]