Jwt authorization enhancement by abhishekkumar-harman · Pull Request #298 · eclipse-ecsp/api-gateway

abhishekkumar-harman · 2026-09-03T04:35:33Z

Please refer to our contributing docs for any questions on submitting a pull request.
Issues are required for both bug fixes and features.

Resolves #ISSUE_NUMBER

Describe behaviour before the change

Describe behaviour after the change

Pull request checklist

I have read the CONTRIBUTING.md
My code follows the code style of this project
Tests for the changes have been added (for bug fixes / features)
All new and existing tests passed.
Docs have been reviewed and added / updated if needed (for bug fixes / features)

Does this introduce a breaking change?

Yes
No

…dation

Implement new feature for user authentication and improve error handling Refactor IgniteGlobalExceptionHandler response generation to default builder Enhance RequestValidationException to include original validation error details

…dler refactor(metrics): remove redundant uriValue assignment in ApiGatewayObservationConvention

…se new structure

…ocket support

github-actions · 2026-09-03T11:56:07Z

🔍 EOL Dependencies Check Results

🔍 Dependencies End-of-Life Report

Generated on 2026-09-03 11:56:06 UTC

📊 Summary

Status	Count	Description
❌ EOL	0	Dependencies that have reached end-of-life
⚠️ Approaching EOL	0	Dependencies approaching EOL within threshold
✅ Supported	6	Dependencies with active support
❓ Untracked	131	Dependencies that could not be tracked
Total	137	All checked dependencies

✅ Supported Dependencies

Click to expand untracked dependencies

Product	Version	Dependency	EOL Date	LTS
spring-boot	4.1.0	`org.springframework.boot:spring-boot-starter-web`	2027-07-31	❌
tomcat	11.0.23	`org.apache.tomcat.embed:tomcat-embed-core`	False	❌
spring-framework	2.0.13	`org.springframework.retry:spring-retry`	2027-07-31	❌
log4j	2.25.4	`org.apache.logging.log4j:log4j-to-slf4j`	False	❌
hibernate	9.1.0.Final	`org.hibernate.validator:hibernate-validator`	False	❌
spring-cloud	5.0.2	`org.springframework.cloud:spring-cloud-starter-gateway-server-webflux`	2027-07-31	❌

❓ Untracked Dependencies

Click to expand untracked dependencies

These dependencies could not be tracked, as they were not found in the EOL database:

Product	Version	Dependency	Reason
slf4j	2.0.18	`org.slf4j:jul-to-slf4j`	Product not found in EOL database
snakeyaml	2.6	`org.yaml:snakeyaml`	Product not found in EOL database
apache-commons	3.20.0	`org.apache.commons:commons-lang3`	Product not found in EOL database
logback	1.5.34	`ch.qos.logback:logback-core`	Product not found in EOL database
jackson	2.21.4	`com.fasterxml.jackson.core:jackson-core`	Product not found in EOL database
guava	9999.0-empty-to-avoid-conflict-with-guava	`com.google.guava:listenablefuture`	Product not found in EOL database
byte-buddy	1.18.10	`net.bytebuddy:byte-buddy`	Product not found in EOL database
netty	4.2.15.Final	`io.netty:netty-codec-http`	Product not found in EOL database
mockito	5.23.0	`org.mockito:mockito-core`	Product not found in EOL database
tools.jackson.core	3.1.4	`tools.jackson.core:jackson-databind`	No mapping rule found for this groupId
tools.jackson.core	3.1.4	`tools.jackson.core:jackson-core`	No mapping rule found for this groupId
jakarta.annotation	3.0.0	`jakarta.annotation:jakarta.annotation-api`	No mapping rule found for this groupId
jakarta.validation	3.1.1	`jakarta.validation:jakarta.validation-api`	No mapping rule found for this groupId
org.jboss.logging	3.6.3.Final	`org.jboss.logging:jboss-logging`	No mapping rule found for this groupId
com.fasterxml	1.7.3	`com.fasterxml:classmate`	No mapping rule found for this groupId
org.aspectj	1.9.25.1	`org.aspectj:aspectjweaver`	No mapping rule found for this groupId
dev.morphia.morphia	2.5.2	`dev.morphia.morphia:morphia-core`	No mapping rule found for this groupId
io.smallrye.config	3.10.1	`io.smallrye.config:smallrye-config`	No mapping rule found for this groupId
io.smallrye.config	3.10.1	`io.smallrye.config:smallrye-config-core`	No mapping rule found for this groupId
org.eclipse.microprofile.config	3.1	`org.eclipse.microprofile.config:microprofile-config-api`	No mapping rule found for this groupId
io.smallrye.common	2.8.0	`io.smallrye.common:smallrye-common-annotation`	No mapping rule found for this groupId
io.smallrye.common	2.8.0	`io.smallrye.common:smallrye-common-expression`	No mapping rule found for this groupId
io.smallrye.common	2.8.0	`io.smallrye.common:smallrye-common-function`	No mapping rule found for this groupId
io.smallrye.common	2.8.0	`io.smallrye.common:smallrye-common-constraint`	No mapping rule found for this groupId
io.smallrye.common	2.8.0	`io.smallrye.common:smallrye-common-classloader`	No mapping rule found for this groupId
io.smallrye.config	3.10.1	`io.smallrye.config:smallrye-config-common`	No mapping rule found for this groupId
io.github.classgraph	4.8.184	`io.github.classgraph:classgraph`	No mapping rule found for this groupId
org.semver4j	5.8.0	`org.semver4j:semver4j`	No mapping rule found for this groupId
org.jsoup	1.21.2	`org.jsoup:jsoup`	No mapping rule found for this groupId
org.reflections	0.9.11	`org.reflections:reflections`	No mapping rule found for this groupId
org.javassist	3.21.0-GA	`org.javassist:javassist`	No mapping rule found for this groupId
javax.el	3.0.0	`javax.el:javax.el-api`	No mapping rule found for this groupId
org.glassfish.web	2.2.6	`org.glassfish.web:javax.el`	No mapping rule found for this groupId
com.google.code.findbugs	3.0.2	`com.google.code.findbugs:jsr305`	No mapping rule found for this groupId
org.checkerframework	3.42.0	`org.checkerframework:checker-qual`	No mapping rule found for this groupId
com.google.errorprone	2.26.1	`com.google.errorprone:error_prone_annotations`	No mapping rule found for this groupId
com.google.j2objc	3.0.0	`com.google.j2objc:j2objc-annotations`	No mapping rule found for this groupId
io.prometheus	0.16.0	`io.prometheus:simpleclient`	No mapping rule found for this groupId
io.prometheus	0.16.0	`io.prometheus:simpleclient_tracer_otel`	No mapping rule found for this groupId
io.prometheus	0.16.0	`io.prometheus:simpleclient_tracer_common`	No mapping rule found for this groupId
io.prometheus	0.16.0	`io.prometheus:simpleclient_tracer_otel_agent`	No mapping rule found for this groupId
io.micrometer	1.17.0	`io.micrometer:micrometer-observation`	No mapping rule found for this groupId
io.micrometer	1.17.0	`io.micrometer:micrometer-commons`	No mapping rule found for this groupId
commons-logging	1.3.6	`commons-logging:commons-logging`	No mapping rule found for this groupId
org.jspecify	1.0.0	`org.jspecify:jspecify`	No mapping rule found for this groupId
de.siegmar	6.1.2	`de.siegmar:logback-gelf`	No mapping rule found for this groupId
org.aspectj	1.9.25.1	`org.aspectj:aspectjrt`	No mapping rule found for this groupId
org.springdoc	3.0.3	`org.springdoc:springdoc-openapi-starter-webmvc-api`	No mapping rule found for this groupId
org.springdoc	3.0.3	`org.springdoc:springdoc-openapi-starter-common`	No mapping rule found for this groupId
io.swagger.core.v3	2.2.47	`io.swagger.core.v3:swagger-core-jakarta`	No mapping rule found for this groupId
io.swagger.core.v3	2.2.47	`io.swagger.core.v3:swagger-annotations-jakarta`	No mapping rule found for this groupId
io.swagger.core.v3	2.2.47	`io.swagger.core.v3:swagger-models-jakarta`	No mapping rule found for this groupId
org.projectlombok	1.18.46	`org.projectlombok:lombok`	No mapping rule found for this groupId
jakarta.xml.bind	4.0.5	`jakarta.xml.bind:jakarta.xml.bind-api`	No mapping rule found for this groupId
jakarta.activation	2.1.4	`jakarta.activation:jakarta.activation-api`	No mapping rule found for this groupId
org.ow2.asm	9.7.1	`org.ow2.asm:asm`	No mapping rule found for this groupId
com.nimbusds	10.9	`com.nimbusds:nimbus-jose-jwt`	No mapping rule found for this groupId
org.apache.httpcomponents.client5	5.6.1	`org.apache.httpcomponents.client5:httpclient5`	No mapping rule found for this groupId
org.apache.httpcomponents.core5	5.4.2	`org.apache.httpcomponents.core5:httpcore5`	No mapping rule found for this groupId
org.apache.httpcomponents.core5	5.4.2	`org.apache.httpcomponents.core5:httpcore5-h2`	No mapping rule found for this groupId
io.projectreactor.netty	1.3.6	`io.projectreactor.netty:reactor-netty-http`	No mapping rule found for this groupId
io.projectreactor.netty	1.3.6	`io.projectreactor.netty:reactor-netty-core`	No mapping rule found for this groupId
io.projectreactor	3.8.6	`io.projectreactor:reactor-core`	No mapping rule found for this groupId
org.reactivestreams	1.0.4	`org.reactivestreams:reactive-streams`	No mapping rule found for this groupId
org.postgresql	42.7.11	`org.postgresql:postgresql`	No mapping rule found for this groupId
com.zaxxer	7.0.2	`com.zaxxer:HikariCP`	No mapping rule found for this groupId
io.dropwizard.metrics	4.2.19	`io.dropwizard.metrics:metrics-healthchecks`	No mapping rule found for this groupId
io.dropwizard.metrics	4.2.19	`io.dropwizard.metrics:metrics-core`	No mapping rule found for this groupId
io.prometheus	0.16.0	`io.prometheus:simpleclient_hotspot`	No mapping rule found for this groupId
io.prometheus	0.16.0	`io.prometheus:simpleclient_httpserver`	No mapping rule found for this groupId
io.prometheus	0.16.0	`io.prometheus:simpleclient_common`	No mapping rule found for this groupId
io.prometheus	0.16.0	`io.prometheus:simpleclient_servlet`	No mapping rule found for this groupId
io.prometheus	0.16.0	`io.prometheus:simpleclient_servlet_common`	No mapping rule found for this groupId
jakarta.persistence	3.2.0	`jakarta.persistence:jakarta.persistence-api`	No mapping rule found for this groupId
jakarta.transaction	2.0.1	`jakarta.transaction:jakarta.transaction-api`	No mapping rule found for this groupId
org.glassfish.jaxb	4.0.9	`org.glassfish.jaxb:jaxb-runtime`	No mapping rule found for this groupId
org.glassfish.jaxb	4.0.9	`org.glassfish.jaxb:jaxb-core`	No mapping rule found for this groupId
org.eclipse.angus	2.0.3	`org.eclipse.angus:angus-activation`	No mapping rule found for this groupId
org.glassfish.jaxb	4.0.9	`org.glassfish.jaxb:txw2`	No mapping rule found for this groupId
com.sun.istack	4.1.2	`com.sun.istack:istack-commons-runtime`	No mapping rule found for this groupId
jakarta.inject	2.0.1	`jakarta.inject:jakarta.inject-api`	No mapping rule found for this groupId
org.antlr	4.13.2	`org.antlr:antlr4-runtime`	No mapping rule found for this groupId
io.hypersistence	3.15.2	`io.hypersistence:hypersistence-utils-hibernate-71`	No mapping rule found for this groupId
io.hypersistence	2.1.4	`io.hypersistence:hypersistence-tsid`	No mapping rule found for this groupId
io.micrometer	1.17.0	`io.micrometer:micrometer-jakarta9`	No mapping rule found for this groupId
io.micrometer	1.17.0	`io.micrometer:micrometer-registry-prometheus`	No mapping rule found for this groupId
io.micrometer	1.17.0	`io.micrometer:micrometer-core`	No mapping rule found for this groupId
org.hdrhistogram	2.2.2	`org.hdrhistogram:HdrHistogram`	No mapping rule found for this groupId
io.prometheus	1.5.1	`io.prometheus:prometheus-metrics-core`	No mapping rule found for this groupId
io.prometheus	1.5.1	`io.prometheus:prometheus-metrics-model`	No mapping rule found for this groupId
io.prometheus	1.5.1	`io.prometheus:prometheus-metrics-config`	No mapping rule found for this groupId
io.prometheus	1.5.1	`io.prometheus:prometheus-metrics-tracer-common`	No mapping rule found for this groupId
io.prometheus	1.5.1	`io.prometheus:prometheus-metrics-exposition-formats`	No mapping rule found for this groupId
io.prometheus	1.5.1	`io.prometheus:prometheus-metrics-exposition-textformats`	No mapping rule found for this groupId
io.micrometer	1.17.0	`io.micrometer:micrometer-registry-datadog`	No mapping rule found for this groupId
io.lettuce	7.5.2.RELEASE	`io.lettuce:lettuce-core`	No mapping rule found for this groupId
redis.clients.authentication	0.1.1-beta2	`redis.clients.authentication:redis-authx-core`	No mapping rule found for this groupId
org.objenesis	3.3	`org.objenesis:objenesis`	No mapping rule found for this groupId
commons-codec	1.21.0	`commons-codec:commons-codec`	No mapping rule found for this groupId
com.github.spotbugs	4.9.8	`com.github.spotbugs:spotbugs-annotations`	No mapping rule found for this groupId
org.mongodb	5.2.1	`org.mongodb:mongodb-driver-sync`	No mapping rule found for this groupId
org.mongodb	5.2.1	`org.mongodb:bson`	No mapping rule found for this groupId
org.mongodb	5.2.1	`org.mongodb:mongodb-driver-core`	No mapping rule found for this groupId
org.mongodb	5.8.0	`org.mongodb:bson-record-codec`	No mapping rule found for this groupId
org.mongodb	5.2.1	`org.mongodb:mongodb-driver-legacy`	No mapping rule found for this groupId
io.projectreactor.addons	3.6.0	`io.projectreactor.addons:reactor-extra`	No mapping rule found for this groupId
org.bouncycastle	1.84	`org.bouncycastle:bcprov-jdk18on`	No mapping rule found for this groupId
com.github.ben-manes.caffeine	3.2.4	`com.github.ben-manes.caffeine:caffeine`	No mapping rule found for this groupId
io.github.resilience4j	2.3.0	`io.github.resilience4j:resilience4j-spring-boot3`	No mapping rule found for this groupId
io.github.resilience4j	2.3.0	`io.github.resilience4j:resilience4j-spring6`	No mapping rule found for this groupId
io.github.resilience4j	2.3.0	`io.github.resilience4j:resilience4j-annotations`	No mapping rule found for this groupId
io.github.resilience4j	2.3.0	`io.github.resilience4j:resilience4j-consumer`	No mapping rule found for this groupId
io.github.resilience4j	2.3.0	`io.github.resilience4j:resilience4j-circularbuffer`	No mapping rule found for this groupId
io.github.resilience4j	2.3.0	`io.github.resilience4j:resilience4j-framework-common`	No mapping rule found for this groupId
io.github.resilience4j	2.3.0	`io.github.resilience4j:resilience4j-circuitbreaker`	No mapping rule found for this groupId
io.github.resilience4j	2.3.0	`io.github.resilience4j:resilience4j-core`	No mapping rule found for this groupId
org.jetbrains.kotlin	2.3.21	`org.jetbrains.kotlin:kotlin-stdlib-jdk8`	No mapping rule found for this groupId
org.jetbrains.kotlin	2.3.21	`org.jetbrains.kotlin:kotlin-stdlib`	No mapping rule found for this groupId
org.jetbrains.kotlin	2.3.21	`org.jetbrains.kotlin:kotlin-stdlib-jdk7`	No mapping rule found for this groupId
io.github.resilience4j	2.3.0	`io.github.resilience4j:resilience4j-timelimiter`	No mapping rule found for this groupId
io.github.resilience4j	2.3.0	`io.github.resilience4j:resilience4j-reactor`	No mapping rule found for this groupId
io.github.resilience4j	2.3.0	`io.github.resilience4j:resilience4j-ratelimiter`	No mapping rule found for this groupId
io.github.resilience4j	2.3.0	`io.github.resilience4j:resilience4j-bulkhead`	No mapping rule found for this groupId
io.github.resilience4j	2.3.0	`io.github.resilience4j:resilience4j-retry`	No mapping rule found for this groupId
io.github.resilience4j	2.3.0	`io.github.resilience4j:resilience4j-micrometer`	No mapping rule found for this groupId
org.openapi4j	1.0.7	`org.openapi4j:openapi-schema-validator`	No mapping rule found for this groupId
org.openapi4j	1.0.7	`org.openapi4j:openapi-core`	No mapping rule found for this groupId
io.jsonwebtoken	0.13.0	`io.jsonwebtoken:jjwt-api`	No mapping rule found for this groupId
io.jsonwebtoken	0.13.0	`io.jsonwebtoken:jjwt-impl`	No mapping rule found for this groupId
io.jsonwebtoken	0.13.0	`io.jsonwebtoken:jjwt-jackson`	No mapping rule found for this groupId
org.jetbrains	17.0.0	`org.jetbrains:annotations`	No mapping rule found for this groupId

🔧 Recommendations

Useful Resources

endoflife.date - EOL information database

github-actions · 2026-09-03T11:59:55Z

🧪 Maven Test Results

📊 Test Report Summary

Test Results Overview

Status	Count	Percentage
✅ Passed	1321	100%
❌ Failed	0	0%
⏭️ Skipped	0	0%
📊 Total	1321	100%

Module Test Breakdown

Module	Tests	Passed
api-gateway	718	718
api-registry-common	161	161
api-registry	442	442

This summary was generated by the Maven Test Workflow for Pull Request #298

sonarqubecloud · 2026-09-03T12:05:40Z

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
85.1% Coverage on New Code
0.9% Duplication on New Code

See analysis details on SonarQube Cloud

abhishekkumar-harman and others added 8 commits August 11, 2026 10:22

feat(jwt): add skipAuthz and skipClaimValidation flags for token vali…

c634346

…dation

fix(exception): improve response handling in IgniteGlobalExceptionHan…

b1310db

…dler refactor(metrics): remove redundant uriValue assignment in ApiGatewayObservationConvention

fix(docs): update method reference in Javadoc for buildResponse

8446001

feat(jwt): refactor JWT validation components and update filters to u…

707153f

…se new structure

fixed sonar issues

e5c70c8

feat(websocket): enhance token parsing and health monitoring for WebS…

d130b6a

…ocket support

fixed checkstyle issues

b29b0ab

abhishekkumar-harman added this pull request to stack #302 September 9, 2026 08:53

abhishekkumar-harman requested a review from RajendranHarman September 9, 2026 09:55

Navigation Menu

Uh oh!

Jwt authorization enhancement - #298

Jwt authorization enhancement#298
abhishekkumar-harman wants to merge 8 commits into
mainfrom
jwt-authorization-enhancement

abhishekkumar-harman commented Sep 3, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

sonarqubecloud Bot commented Sep 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

abhishekkumar-harman commented Sep 3, 2026

Describe behaviour before the change

Describe behaviour after the change

Pull request checklist

Does this introduce a breaking change?

Uh oh!

github-actions Bot commented Sep 3, 2026

🔍 EOL Dependencies Check Results

🔍 Dependencies End-of-Life Report

📊 Summary

✅ Supported Dependencies

❓ Untracked Dependencies

🔧 Recommendations

Useful Resources

Uh oh!

github-actions Bot commented Sep 3, 2026

🧪 Maven Test Results

📊 Test Report Summary

Test Results Overview

Module Test Breakdown

Uh oh!

sonarqubecloud Bot commented Sep 3, 2026

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant