AWS MSK IAM SASL Signer for JavaScript is a Node.js library for generating IAM based SASL OAuthbearer tokens for Kafka clients. It’s useful when connecting a JavaScript Kafka client to AWS MSK using the SASL/OAUTHBEARER mechanism, with the signer providing the oauthBearerProvider. The project’s changelog and release notes describe latest bug fixes, updates, and features.
Project status
- The source appears active but not fast-moving, with the most recent update on 2026-03-02 (v1.0.3), indicating maintenance is still ongoing as of 2026.
- Update cadence looks moderate, with changes on 2026-03-02, 2026-02-27, and then the next prior update much earlier (2025-07-31), suggesting periodic security and dependency maintenance rather than frequent feature releases.
AI summary generated
Recent updates
v1.0.3
Release 1.0.3 updates the library version and adjusts dependencies to address a reported transitive vulnerability. The documented change is a bump of @aws-sdk/credential-providers to pull in the security fix.
Securityv1.0.2
Release v1.0.2 bumps the library version to 1.0.2 and updates the @aws-sdk/client-sts dependency from ^3.378.0 to ^3.993.0. The release notes indicate a security-driven dependency update and warn about Node 14 compatibility on the latest macOS.
BreakingSecurityv1.0.1
v1.0.1 updates MSK IAM SASL token generation to account for the expiration time of the underlying AWS credentials, ensuring the signed token does not outlive credential validity. It also passes additional configuration (roleSessionName and region) into the default AWS credential provider chain.
Breakingv1.0.0
This is the first published version (v1.0.0) of the aws-msk-iam-sasl-signer-js library. The release notes indicate an initial library setup without detailing specific APIs, behavior changes, or fixes.
Features