@Override
    public String getAuthorizationID() {
        if (!complete)
            throw new IllegalStateException("Authentication exchange has not completed");
        return tokenForNegotiatedProperty.principalName();
    }
@throws SaslAuthenticationException
            if access token cannot be validated
            <p>
            <b>Note:</b> This method may throw
            {@link SaslAuthenticationException} to provide custom error
            messages to clients. But care should be taken to avoid including
            any information in the exception message that should not be
            leaked to unauthenticated clients. It may be safer to throw
            {@link SaslException} in some cases so that a standard error
            message is returned to clients.
            </p>
clients/src/main/java/org/apache/kafka/common/security/oauthbearer/internals/OAuthBearerSaslServer.java