[incubator-kie-issues-994] kafka auth feature with message header records #3037
Conversation
...ices-common/src/main/resources/META-INF/services/org.kie.server.api.security.SecurityAdapter
Outdated
Show resolved
Hide resolved
| "-keyalg", "RSA", | ||
| "-alias", KEYSTORE_ALIAS, | ||
| "-keystore", KEYSTORE_PATH, | ||
| "-storepass", KEYSTORE_PWD, |
There was a problem hiding this comment.
I needed to add
"-keypass", KEYSTORE_PWD,
otherwise the test was hanging for me infinitely.
There was a problem hiding this comment.
yeah after java 8 the keypass is mandatory. my bad for testing only in java 8
| ProcessBuilder builder = new ProcessBuilder(); | ||
| builder.command(cmd); | ||
| Process p = builder.start(); | ||
| p.waitFor(); |
There was a problem hiding this comment.
Perhaps better to add a timeout:
p.waitFor(10L, TimeUnit.SECONDS);
|
There was a problem hiding this comment.
Great work @elguardian
I successfully tested the following scenarios:
- Message with kie_user, kie_password headers - works with default security configuration
- Message with kie_token header
The tricky part is to create a working JWT token, perhaps we could help by providing a helper class to create it using a defined keystore, wdyt?
|
Where do you propose to use do that ¿? I don't know what they are using in the kafka producer or how do they plan to do it ? here you have how to do it. (empty token) but not sure what else we can do honestly. |
…ords (kiegroup#3037) * integration java-jwt for kafka and inmemory thing * add security and integration check with RSA * keystore helpers
issue: apache/incubator-kie-issues#994
depends on: kiegroup/droolsjbpm-build-bootstrap#2440