# Http Sink Connector / OAuth2 not working with Azure Event Hubs

**URL:** <https://forum.confluent.io/t/http-sink-connector-oauth2-not-working-with-azure-event-hubs/2409>\
**Category:** Self-Managed Connectors\
**Created:** [2 August 2021 20:17 UTC](https://forum.confluent.io/t/http-sink-connector-oauth2-not-working-with-azure-event-hubs/2409 "2021-08-02T20:17:20Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![smorman](https://avatars.discourse-cdn.com/v4/letter/s/8c91f0/32.png) [@smorman](https://forum.confluent.io/u/smorman)\
**Post date:** [2 August 2021 20:17 UTC](https://forum.confluent.io/t/http-sink-connector-oauth2-not-working-with-azure-event-hubs/2409/1 "2021-08-02T20:17:20Z")

</div>

There are a few properties available on the Http Sink Connector for configuring the request and use of an OAuth2 access token.

auth.type=OAUTH2  
oauth2.token.url=[http://localhost:8080/oauth/token](http://localhost:8080/oauth/token)  
oauth2.client.id=kc-client  
oauth2.client.secret=kc-secret

All this is great but isn’t quite enough to work with AAD and Azure Event Hubs. The missing piece is to identify a resource such that the proper claim can be added to to the OAuth2 access token. The error I get back from the Http Sink Connector is this:

```auto
kafka-connect | [2021-08-02 18:46:35,970] ERROR Error while processing HTTP request with Url : https://companyrelationships.servicebus.windows.net/companyrelationships/messages?api-version=2015-01, Status code : 401, Reason Phrase : SubCode=40104: Invalid authorization token audience, Response Content : , (io.confluent.connect.http.writer.HttpWriterImpl)

```

I was able to reproduce the same error in Postman and I was able to get a Postman request to work as well. The difference is that in Postman (and according to MS documentation) I needed to add a ‘Resource’ key with a value of ‘https://.servicebus.windows.net’. By doing this, AAD knows to add the proper role (Azure Event Hubs Data Sender) to the access token and therefore generates a proper token that can be used to send event data to the Azure Event Hub.

The problem with the Http Sink Connector is that there is no property, such as oauth2.resource, to specify the Resource.

The question is, can this property be added to the Confluent Http Sink Connector so that this use case can be supported?