9d2273e8a7
fix: fix InputStream leak in OIDC client HTTP operations ( #14728 )
...
OidcClientContext.discover() and OidcTokenHolder.fetchToken() obtain
InputStreams from HttpURLConnection.getInputStream() and getErrorStream()
but never explicitly close them after reading. Wrap these streams in
try-with-resources to ensure proper cleanup.
2026-03-31 09:53:20 +08:00
c87f888fc6
feat(client): add OIDC client-side authentication support via Client Credentials Flow ( #14696 )
...
- Add OidcClientAuthServiceImpl as AbstractClientAuthService SPI implementation
- Add OidcTokenHolder for token lifecycle management with proactive refresh window (20-30s before expiry)
- Add OidcClientContext for configuration loading and OIDC Discovery support
- Add OidcClientConstants for client-side config key definitions
- Extract shared protocol-level constants into OidcProtocolConstants (plugin/auth module) to be reused by both client and server
- Migrate server-side OidcConstants usages to OidcProtocolConstants where applicable
- Remove unused OidcSessionManager dead code
- Register OidcClientAuthServiceImpl in SPI META-INF/services
2026-03-23 19:28:02 +08:00
e46f4f5b27
fix(common): add explicit charset to avoid platform-dependent encoding ( #14533 ) ( #14535 )
...
Add explicit StandardCharsets.UTF_8 to all DM_DEFAULT_ENCODING
occurrences reported by SpotBugs under threshold=High, and remove
the global exclusion from spotbugs-exclude.xml.
Affected modules: client-basic, client, common, config, core,
k8s-sync, naming, sys.
Signed-off-by: cxhello <caixiaohuichn@gmail.com >
2026-03-04 16:52:48 +08:00
5906b49492
Update ClientBasicParamUtil.java ( #13537 )
...
CWE-532 – Nacos 客户端 ACCESS_KEY 改为密文日志记录
2025-06-23 13:59:19 +08:00
c5aebb0246
[ #13445 ] Maintainer Client support aliyun ram auth plugin. ( #13456 )
...
* Fix naming maintainer sdk auth plugin.
* Fix config maintainer sdk auth plugin.
* Add AI builder to RequestResource.
* Set empty string replace null resource for config module.
* Set empty string replace null resource for naming module.
* Fix NPE for mcp create remote mcp server.
* Support ai mcp request aliyun ram auth.
2025-06-03 13:55:31 +08:00
8bbcbbbbfe
V3.0 develop fix ut ( #13167 )
...
* Fix nacos client and relative depend ut.
* Fix nacos config ut.
* Fix nacos console ut.
* Fix nacos core ut.
* Fix nacos naming ut.
* Fix nacos default-auth-plugin-impl ut.
* Fix nacos prometheus ut.
2025-03-10 15:38:27 +08:00
0c77211f43
Fix merged compile problem.
2025-03-10 10:43:34 +08:00
67313bfe50
Merge remote-tracking branch 'refs/remotes/upstream/develop' into v3.0-develop-sync-develop
...
# Conflicts:
# api/src/main/java/com/alibaba/nacos/api/model/v2/ErrorCode.java
# bootstrap/src/main/resources/application.properties
# client/src/main/java/com/alibaba/nacos/client/config/impl/ClientWorker.java
# client/src/main/java/com/alibaba/nacos/client/naming/remote/gprc/NamingGrpcClientProxy.java
# config/src/main/java/com/alibaba/nacos/config/server/aspect/CapacityManagementAspect.java
# config/src/main/java/com/alibaba/nacos/config/server/aspect/ConfigChangeAspect.java
# config/src/main/java/com/alibaba/nacos/config/server/aspect/RequestLogAspect.java
# config/src/main/java/com/alibaba/nacos/config/server/controller/ConfigController.java
# config/src/main/java/com/alibaba/nacos/config/server/controller/ConfigServletInner.java
# config/src/main/java/com/alibaba/nacos/config/server/remote/ConfigQueryRequestHandler.java
# config/src/main/java/com/alibaba/nacos/config/server/remote/ConfigRemoveRequestHandler.java
# config/src/main/java/com/alibaba/nacos/config/server/service/ConfigGrayModelMigrateService.java
# config/src/test/java/com/alibaba/nacos/config/server/aspect/ConfigChangeAspectTest.java
# config/src/test/java/com/alibaba/nacos/config/server/controller/ConfigControllerTest.java
# config/src/test/java/com/alibaba/nacos/config/server/controller/v2/ConfigControllerV2Test.java
# config/src/test/java/com/alibaba/nacos/config/server/remote/ConfigQueryRequestHandlerTest.java
# core/src/main/java/com/alibaba/nacos/core/remote/grpc/GrpcBiStreamRequestAcceptor.java
# naming/src/main/java/com/alibaba/nacos/naming/controllers/v2/ClientInfoControllerV2.java
# naming/src/test/java/com/alibaba/nacos/naming/controllers/ServiceControllerTest.java
# plugin/datasource/src/test/java/com/alibaba/nacos/plugin/datasource/impl/mysql/GroupCapacityMapperByMysqlTest.java
# pom.xml
# sys/src/test/java/com/alibaba/nacos/sys/env/EnvUtilTest.java
2025-03-10 10:16:34 +08:00
27d9cb596c
[ISSUE #13143 ] client support both v1 and v3 login url. ( #13159 )
...
* [ISSUE #13143 ] client support both v1 and v3 login url.
* [ISSUE #13143 ] client support both v1 and v3 login url.
2025-03-10 09:50:03 +08:00
5d511e8d24
[ISSUE #13143 ] change the client login url ( #13148 )
2025-03-05 14:02:51 +08:00
0115a143c6
[ISSUE#12979] Add maintainer client auth service. ( #13101 )
2025-02-14 16:32:27 +08:00
e4dfa2f7be
[ISSUE#12979]Correct serviceloader and fix pmd. ( #13086 )
...
renamed: client/src/main/resources/META-INF/services/com.alibaba.nacos.client.address.ServerListProvider -> client-basic/src/main/resources/META-INF/services/com.alibaba.nacos.client.address.ServerListProvider
renamed: client/src/test/resources/META-INF/services/com.alibaba.nacos.client.address.ServerListProvider -> client-basic/src/test/resources/META-INF/services/com.alibaba.nacos.client.address.ServerListProvider
modified: maintainer-client/pom.xml
modified: maintainer-client/src/main/java/com/alibaba/nacos/maintainer/client/NacosMaintainerFactory.java
modified: maintainer-client/src/main/java/com/alibaba/nacos/maintainer/client/address/DefaultServerListManager.java
modified: maintainer-client/src/main/java/com/alibaba/nacos/maintainer/client/config/ConfigMaintainerFactory.java
modified: maintainer-client/src/main/java/com/alibaba/nacos/maintainer/client/config/ConfigMaintainerService.java
renamed: maintainer-client/src/main/java/com/alibaba/nacos/maintainer/client/config/NacosConfigMaintainerService.java -> maintainer-client/src/main/java/com/alibaba/nacos/maintainer/client/config/NacosConfigMaintainerServiceImpl.java
modified: maintainer-client/src/main/java/com/alibaba/nacos/maintainer/client/model/core/ServerLoaderMetrics.java
modified: maintainer-client/src/main/java/com/alibaba/nacos/maintainer/client/model/naming/SwitchDomain.java
renamed: maintainer-client/src/main/java/com/alibaba/nacos/maintainer/client/naming/NacosNamingMaintainerService.java -> maintainer-client/src/main/java/com/alibaba/nacos/maintainer/client/naming/NacosNamingMaintainerServiceImpl.java
modified: maintainer-client/src/main/java/com/alibaba/nacos/maintainer/client/naming/NamingMaintainerFactory.java
modified: maintainer-client/src/main/java/com/alibaba/nacos/maintainer/client/naming/NamingMaintainerService.java
modified: maintainer-client/src/main/java/com/alibaba/nacos/maintainer/client/remote/ClientHttpProxy.java
modified: maintainer-client/src/main/java/com/alibaba/nacos/maintainer/client/utils/ParamUtil.java
modified: maintainer-client/src/test/java/com/alibaba/nacos/maintainer/client/config/ConfigMaintainerFactoryTest.java
renamed: maintainer-client/src/test/java/com/alibaba/nacos/maintainer/client/config/NacosConfigMaintainerServiceTest.java -> maintainer-client/src/test/java/com/alibaba/nacos/maintainer/client/config/NacosConfigMaintainerServiceImplTest.java
renamed: maintainer-client/src/test/java/com/alibaba/nacos/maintainer/client/naming/NacosNamingMaintainerServiceTest.java -> maintainer-client/src/test/java/com/alibaba/nacos/maintainer/client/naming/NacosNamingMaintainerServiceImplTest.java
modified: maintainer-client/src/test/java/com/alibaba/nacos/maintainer/client/naming/NamingMaintainerFactoryTest.java
modified: maintainer-client/src/test/java/com/alibaba/nacos/maintainer/client/remote/ClientHttpProxyTest.java
new file: maintainer-client/src/test/java/com/alibaba/nacos/maintainer/client/remote/mock/MockServerListProvider.java
modified: maintainer-client/src/test/java/com/alibaba/nacos/maintainer/client/utils/ParamUtilTest.java
new file: maintainer-client/src/test/resources/META-INF/services/com.alibaba.nacos.client.address.ServerListProvider
2025-02-07 14:29:43 +08:00
1993d0d82d
[ISSUE#12979] Abstract client common classes to basic module. ( #13081 )
...
* Abstract client common classes to basic module.
* Use client-basic module replace maintainer-client duplicate classes.
* Fix copyright problem.
2025-02-05 17:36:54 +08:00
Guimu