[Feature] Add jwt #2

Chesire · 2025-10-18T13:44:11Z

Add JWT token.
Add a whole bunch of security fixes.
Add more stuff...

Add class that will be used to parse and check the Jwt

Update to be longer since it requires 20 characters now

Chesire · 2025-10-18T13:44:56Z

Need to update the EventsController to use the guildId.
Need to update the EventsEntity to store the guildId.

src/test/kotlin/com/chesire/capi/auth/AuthControllerTest.kt.disabled

Chesire · 2025-10-22T19:32:38Z

README should be updated to mention every field that should be provided on start.
Should we make the grafana endpoints all optional? Consider this

Chesire · 2025-10-28T19:26:23Z

@copilot update the readme to include in there every environment variable that must be provided. Do this with examples for prod, and some examples for the development environment.

Copilot · 2025-10-28T19:26:31Z

@Chesire I've opened a new pull request, #3, to work on those changes. Once the pull request is ready, I'll request review from you.

* Initial plan * Update README with comprehensive environment variables documentation Co-authored-by: Chesire <[email protected]> --------- Co-authored-by: copilot-swe-agent[bot] <[email protected]> Co-authored-by: Chesire <[email protected]>

Chesire · 2025-10-28T19:37:03Z

@copilot it looks like CI is failing, lets fix it here before we merge to make sure the changes are working as intended.

The failure looks to be

Could not resolve all dependencies for configuration ':compileClasspath'.
Failed to calculate the value of task ':compileJava' property 'javaCompiler'.
> Cannot find a Java installation on your machine (Linux 6.11.0-1018-azure amd64) matching: {languageVersion=23, vendor=any vendor, implementation=vendor-specific, nativeImageCapable=false}. Toolchain download repositories have not been configured.

Copilot · 2025-10-28T19:37:12Z

@Chesire I've opened a new pull request, #4, to work on those changes. Once the pull request is ready, I'll request review from you.

* Initial plan * Fix CI by updating pull-request workflow to use Java 23 Co-authored-by: Chesire <[email protected]> * Remove branch restriction from pull-request workflow to run on all PRs Co-authored-by: Chesire <[email protected]> --------- Co-authored-by: copilot-swe-agent[bot] <[email protected]> Co-authored-by: Chesire <[email protected]>

Chesire · 2025-10-28T20:15:52Z

@copilot delete src/test/kotlin/com/chesire/capi/auth/AuthControllerTest.kt.disabled, and any other files that look to have been generated by claude while working on the branch.

Copilot · 2025-10-28T20:15:59Z

@Chesire I've opened a new pull request, #5, to work on those changes. Once the pull request is ready, I'll request review from you.

Chesire · 2025-10-28T20:16:15Z

@copilot fix any tests that are broken on ci

Copilot · 2025-10-28T20:16:24Z

@Chesire I've opened a new pull request, #6, to work on those changes. Once the pull request is ready, I'll request review from you.

* Initial plan * Delete AuthControllerTest.kt.disabled file Co-authored-by: Chesire <[email protected]> --------- Co-authored-by: copilot-swe-agent[bot] <[email protected]> Co-authored-by: Chesire <[email protected]>

* Initial plan * Downgrade to Java 17 and fix EventController tests Co-authored-by: Chesire <[email protected]> * Add test security configuration and authentication helpers Co-authored-by: Chesire <[email protected]> * Fix EventController tests - add authentication to all MockMvc requests and update content type checks Co-authored-by: Chesire <[email protected]> * Use @AuthenticationPrincipal for controller authentication parameters Co-authored-by: Chesire <[email protected]> * Revert Java version back to 23 to match project requirements Co-authored-by: Chesire <[email protected]> * Fix the challenge controller tests * Tidy up how we get the authenticated user details * Update the EventController tests * Test cleanups * Remove unused security dependency and config file --------- Co-authored-by: copilot-swe-agent[bot] <[email protected]> Co-authored-by: Chesire <[email protected]> Co-authored-by: Troy Rijkaard <[email protected]>

Chesire · 2025-10-30T22:16:54Z

@copilot the docker-validation job fails on CI, lets fix this before we merge this in

Copilot · 2025-10-30T22:17:02Z

@Chesire I've opened a new pull request, #7, to work on those changes. Once the pull request is ready, I'll request review from you.

…aemon (#7) * Initial plan * Fix docker-validation CI failure by loading built image into Docker daemon Co-authored-by: Chesire <[email protected]> --------- Co-authored-by: copilot-swe-agent[bot] <[email protected]> Co-authored-by: Chesire <[email protected]>

Chesire · 2025-10-30T22:31:19Z

@copilot do any changes need to be done to the master github actions file based on the previous commits in this pr?

Copilot · 2025-10-30T22:31:26Z

@Chesire I've opened a new pull request, #8, to work on those changes. Once the pull request is ready, I'll request review from you.

Chesire added 30 commits October 12, 2025 21:59

Pass userId along in create call

98f2298

Add JwtService

f592bb7

Add class that will be used to parse and check the Jwt

Add the filter for the JWT

7ea6d47

Add the SecurityConfig

5d907a7

Update controller to use the new jwt

9408fe5

Set the properties for secret and expiry

62db5cc

Added auth endpoint to get a jwt

a09b21e

Add rate limiting to token endpoint

06ae5ad

Add api-key header

bf6605d

Validate the userId is within discords minimum

66c8ee8

Log out when a user attempts to get and gets a token

b01169d

Add guildId to the jwt

fef2c55

Set the rate limiting by apikey,userid, and guildid

f7e2ca7

Return correct expiresIn

ea9560d

Call out the tokenType in the response

77a8606

Add security headers

8b35d01

Clean up exception logging to not show sensitive information

58a4b4f

Add additional logging when failed api key

5dfb4ce

Updated the claims for the JWT

1103e1e

Add methods to extract from the claims

19fa9fb

Add size limitations to requests

22d819a

Constrain the api-key size

cb5bb07

Specify only json values in post requests

1cb918e

Add json validation

8b63a9f

Update dev api-key

ed5d383

Update to be longer since it requires 20 characters now

Add tests for this branch

c13d8a5

Security improvements

47c6dee

Use the userId to validate the delete challenge

2d14ee3

Pass the guildId along in the jwt too

590165a

Move the jwt classes into their own package

de95d37

Update challenge tests

5d6c662

Use the guildId for events as well

a291d42

Chesire commented Oct 22, 2025

View reviewed changes

src/test/kotlin/com/chesire/capi/auth/AuthControllerTest.kt.disabled Outdated Show resolved Hide resolved

Copilot AI mentioned this pull request Oct 28, 2025

Document all environment variables for production and development #3

Merged

Copilot AI mentioned this pull request Oct 28, 2025

Fix CI failure and update pull-request workflow configuration #4

Merged

Copilot AI mentioned this pull request Oct 28, 2025

Remove temporary test file from repository #5

Merged

Copilot AI mentioned this pull request Oct 28, 2025

Fix controller tests with JWT authentication using SpringBootTest #6

Merged

Copilot AI and others added 2 commits October 28, 2025 20:32

Remove temporary test file from repository (#5)

d0c4b90

* Initial plan * Delete AuthControllerTest.kt.disabled file Co-authored-by: Chesire <[email protected]> --------- Co-authored-by: copilot-swe-agent[bot] <[email protected]> Co-authored-by: Chesire <[email protected]>

Copilot AI mentioned this pull request Oct 30, 2025

Fix docker-validation CI job failure - load built image into Docker daemon #7

Merged

Copilot AI mentioned this pull request Oct 30, 2025

No changes needed to main-branch.yml workflow #8

Closed

Chesire merged commit 6bd3899 into master Oct 31, 2025
5 checks passed

Chesire deleted the feature/add-jwt branch October 31, 2025 09:29

[Feature] Add jwt #2

[Feature] Add jwt #2

Uh oh!

Conversation

Chesire commented Oct 18, 2025

Uh oh!

Chesire commented Oct 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Chesire commented Oct 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Chesire commented Oct 28, 2025

Uh oh!

Copilot AI commented Oct 28, 2025

Uh oh!

Chesire commented Oct 28, 2025

Uh oh!

Copilot AI commented Oct 28, 2025

Uh oh!

Chesire commented Oct 28, 2025

Uh oh!

Copilot AI commented Oct 28, 2025

Uh oh!

Chesire commented Oct 28, 2025

Uh oh!

Copilot AI commented Oct 28, 2025

Uh oh!

Chesire commented Oct 30, 2025

Uh oh!

Copilot AI commented Oct 30, 2025

Uh oh!

Chesire commented Oct 30, 2025

Uh oh!

Copilot AI commented Oct 30, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Chesire commented Oct 18, 2025 •

edited

Loading

Chesire commented Oct 22, 2025 •

edited

Loading