Skip to content

feat: Onboard key flow auth #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
marceljk merged 12 commits into from
Aug 8, 2025
Merged

feat: Onboard key flow auth #5

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
43247d8
add prototype keyflow implementation
marceljk Jul 29, 2025
3b2eb24
add configuration for ApiClient
marceljk Jul 30, 2025
ffae878
improve documentation and error handling of KeyFlow and Configuration
marceljk Jul 31, 2025
7e60121
Adjust resource manager to use CoreConfiguration for service account
marceljk Jul 31, 2025
bbb974f
review feedback removed try-catch-blocks
marceljk Aug 1, 2025
9517d9f
wip: add tests
marceljk Aug 1, 2025
b368002
moved authentication example from resourcemanager to example module
marceljk Aug 1, 2025
6a60e50
feat(deps): apply junit dependencies all gradle subprojects
rubenhoenle Aug 4, 2025
2418447
add unit tests for authentication
marceljk Aug 5, 2025
7f43e71
feat(gradle): add execution task for examples
rubenhoenle Aug 5, 2025
fbd3fc7
feedback review
marceljk Aug 7, 2025
1f7b6ba
run formatter
marceljk Aug 7, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
feedback review
  • Loading branch information
@marceljk
marceljk committed Aug 7, 2025
commit fbd3fc76c1bf081f0b173329367dc2c300844a5b
10 changes: 7 additions & 3 deletions core/src/main/java/cloud/stackit/sdk/core/KeyFlowAuthenticator.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,12 +24,16 @@
import java.util.concurrent.TimeUnit;
import okhttp3.*;


/** KeyFlowAuthenticator handles the Key Flow Authentication based on the Service Account Key. */
public class KeyFlowAuthenticator {
private final String REFRESH_TOKEN = "refresh_token";
private final String ASSERTION = "assertion";
private final String DEFAULT_TOKEN_ENDPOINT = "https://service-account.api.stackit.cloud/token";
private final long DEFAULT_TOKEN_LEEWAY = 60;
private final int CONNECT_TIMEOUT = 10;
private final int WRITE_TIMEOUT = 10;
private final int READ_TIMEOUT = 10;

private final OkHttpClient httpClient;
private final ServiceAccountKey saKey;
Expand Down Expand Up @@ -94,9 +98,9 @@ public KeyFlowAuthenticator(
this.gson = new Gson();
this.httpClient =
new OkHttpClient.Builder()
.connectTimeout(10, TimeUnit.SECONDS)
.writeTimeout(10, TimeUnit.SECONDS)
.readTimeout(30, TimeUnit.SECONDS)
.connectTimeout(CONNECT_TIMEOUT, TimeUnit.SECONDS)
.writeTimeout(WRITE_TIMEOUT, TimeUnit.SECONDS)
.readTimeout(READ_TIMEOUT, TimeUnit.SECONDS)
.build();

if (environmentVariables == null) {
Expand Down
9 changes: 6 additions & 3 deletions core/src/main/java/cloud/stackit/sdk/core/auth/SetupAuth.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -212,17 +212,17 @@ protected void loadPrivateKey(CoreConfiguration cfg, ServiceAccountKey saKey)
private String getPrivateKey(CoreConfiguration cfg)
throws CredentialsInFileNotFoundException, IOException {
// Explicit code config
// Set private key
// Get private key
if (Utils.isStringSet(cfg.getPrivateKey())) {
return cfg.getPrivateKey();
}
// Set private key path
// Get private key path
if (Utils.isStringSet(cfg.getPrivateKeyPath())) {
String privateKeyPath = cfg.getPrivateKeyPath();
return new String(
Files.readAllBytes(Paths.get(privateKeyPath)), StandardCharsets.UTF_8);
}
// Set credentials file
// Get credentials file
if (Utils.isStringSet(cfg.getCredentialsFilePath())) {
return readValueFromCredentialsFile(
cfg.getCredentialsFilePath(),
Expand All @@ -231,15 +231,18 @@ private String getPrivateKey(CoreConfiguration cfg)
}

// ENVs config
// Get private key
if (Utils.isStringSet(env.getStackitPrivateKey())) {
return env.getStackitPrivateKey().trim();
}
// Get private key path
if (Utils.isStringSet(env.getStackitPrivateKeyPath())) {
return new String(
Files.readAllBytes(Paths.get(env.getStackitPrivateKeyPath())),
StandardCharsets.UTF_8);
}

// Get credentialsFilePath
String credentialsFilePath =
Utils.isStringSet(env.getStackitCredentialsPath())
? env.getStackitCredentialsPath()
Expand Down