AWS MSK IAM SASL Signer for JavaScript is a Node.js library for generating IAM based SASL OAuthbearer tokens for Kafka clients. It’s useful when connecting a JavaScript Kafka client to AWS MSK using the SASL/OAUTHBEARER mechanism, with the signer providing the oauthBearerProvider. The project’s changelog and release notes describe latest bug fixes, updates, and features.
Project status
- Actively maintained: The most recent upstream push and package updates occurred on 2026-03-02 (v1.0.3), which is recent relative to today (2026-08-12), suggesting ongoing maintenance rather than dormancy.
- Update cadence: There were quick follow-on updates between v1.0.2 (2026-02-27) and v1.0.3 (2026-03-02), then the next notable update was v1.0.1 (2025-07-31), indicating sporadic releases but with periodic security or compatibility refreshes.
AI summary generated
Recent updates
v1.0.3
Release 1.0.3 updates the library version and adjusts dependencies to address a reported transitive vulnerability. The documented change is a bump of @aws-sdk/credential-providers to pull in the security fix.
Securityv1.0.2
Release v1.0.2 bumps the library version to 1.0.2 and updates the @aws-sdk/client-sts dependency from ^3.378.0 to ^3.993.0. The release notes indicate a security-driven dependency update and warn about Node 14 compatibility on the latest macOS.
BreakingSecurityv1.0.1
v1.0.1 updates MSK IAM SASL token generation to account for the expiration time of the underlying AWS credentials, ensuring the signed token does not outlive credential validity. It also passes additional configuration (roleSessionName and region) into the default AWS credential provider chain.
Breakingv1.0.0
This is the first published version (v1.0.0) of the aws-msk-iam-sasl-signer-js library. The release notes indicate an initial library setup without detailing specific APIs, behavior changes, or fixes.
Features