confluentinc / ide-sidecar

Sidecar application used by Confluent for VS Code, as a local proxy for Confluent Cloud, Confluent Platform and local Kafka clusters, to help users build streaming applications.
Apache License 2.0
3 stars 3 forks source link

Add basic credentials/authN to direct connections #124

Closed rhauch closed 19 hours ago

rhauch commented 2 weeks ago

Continuation of #96, #122 and #123, and followup to #116 that added initial and limited direct connections (with GraphQL support) but did not support credentials and only worked with Kafka clusters and SR clusters that did not require authN.

We want to add basic credentials to direct connections via the kafka_cluster and schema_registry definitions, and use this to connect to downstream resources (e.g., Kafka REST API, SR API endpoints, and Message Consumer API). All secrets in credentials will be write-only: the Connection REST API endpoints must always mask secrets.

We'll track adding support for other credential types in separate issues: