feat: z/OSMF JWT Preflight Check#4531
Conversation
Signed-off-by: hrishikesh-nalawade <hrishikesh.nalawade.17@gmail.com>
Signed-off-by: hrishikesh-nalawade <hrishikesh.nalawade.17@gmail.com>
github-project-automation
Bot
moved this to New
in API Mediation Layer Backlog Management
Signed-off-by: hrishikesh-nalawade <hrishikesh.nalawade.17@gmail.com>
| 'apiml-security-common', | ||
| 'apiml-tomcat-common', | ||
| 'certificate-analyser', | ||
| 'pre-flight-check', |
There was a problem hiding this comment.
Could we rename this? There are already some pre-flight checks and some in progress. This name is too general.
For example:
zosmf-jwt-check
jwt-check
There was a problem hiding this comment.
yes sure, going with zosmf-jwt-check. Thank You for the suggestion.
Signed-off-by: hrishikesh-nalawade <hrishikesh.nalawade.17@gmail.com>
Signed-off-by: hrishikesh-nalawade <hrishikesh.nalawade.17@gmail.com>
hrishikesh-nalawade
changed the title
EvaJavornicka
moved this from New
to In Progress
in API Mediation Layer Backlog Management
Signed-off-by: hrishikesh-nalawade <hrishikesh.nalawade.17@gmail.com>
Signed-off-by: hrishikesh-nalawade <hrishikesh.nalawade.17@gmail.com>
Signed-off-by: hrishikesh-nalawade <hrishikesh.nalawade.17@gmail.com>
Signed-off-by: hrishikesh-nalawade <hrishikesh.nalawade.17@gmail.com>
Signed-off-by: hrishikesh-nalawade <hrishikesh.nalawade.17@gmail.com>
| * or z/OS SAF keyrings. Supports PKCS12, JKS, and {@code safkeyring://} URIs. | ||
| */ | ||
| @SuppressWarnings("squid:S106") | ||
| public class Stores { |
There was a problem hiding this comment.
Isn't this class more or less the same as for the certificate analyzer?
Would it be possible to extract it to some of the libraries?
| * Thrown when keystore or truststore initialization fails | ||
| * (e.g. missing file, wrong password, invalid keyring format). | ||
| */ | ||
| public class StoresNotInitializeException extends RuntimeException { |
There was a problem hiding this comment.
It also lives in certificate-analyzer, if it is used in both it probably should go to some common module.
| * </ul> | ||
| */ | ||
| @SuppressWarnings("squid:S106") | ||
| public class SSLContextFactory { |
There was a problem hiding this comment.
Same as Stores and StoresNotInitializeException, does it make sense to duplicate the code instead of having it in a shared library?
4 participants
Description
A Java utility that verifies connectivity to the z/OSMF JWK endpoint before/after starting the Zowe API Mediation Layer. This tool helps diagnose configuration issues early such as incorrect hostnames, unreachable ports, missing certificates, or misconfigured z/OSMF by performing a lightweight HTTP(S) call to the z/OSMF JWK endpoint at
/jwt/ibm/api/zOSMFBuilder/jwkLinked to #4526
Type of change
Checklist: