- JwtServiceImpl: HMAC-SHA256 via Nimbus JOSE+JWT with ephemeral 256-bit secret - Ed25519SigningServiceImpl: JDK 17 KeyPairGenerator with ephemeral keypair - BootstrapTokenValidator: constant-time comparison with dual-token rotation - SecurityBeanConfig: bean wiring with fail-fast validation for CAMELEER_AUTH_TOKEN - SecurityProperties: config binding for token expiry and bootstrap tokens - TestSecurityConfig: permit-all filter chain to keep existing tests green - application.yml: security config with env var mapping - All 18 security unit tests pass, all 71 tests pass in full verify Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
19 lines
385 B
YAML
19 lines
385 B
YAML
spring:
|
|
datasource:
|
|
url: jdbc:ch://placeholder:8123/cameleer3
|
|
username: default
|
|
password: ""
|
|
driver-class-name: com.clickhouse.jdbc.ClickHouseDriver
|
|
|
|
ingestion:
|
|
buffer-capacity: 100
|
|
batch-size: 10
|
|
flush-interval-ms: 100
|
|
|
|
agent-registry:
|
|
ping-interval-ms: 1000
|
|
|
|
security:
|
|
bootstrap-token: test-bootstrap-token
|
|
bootstrap-token-previous: old-bootstrap-token
|