[
https://issues.apache.org/jira/browse/CAMEL-24061?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Claus Ibsen resolved CAMEL-24061.
---------------------------------
Resolution: Fixed
Fixed on main via https://github.com/apache/camel/pull/24695
Backported to camel-4.18.x via https://github.com/apache/camel/pull/24701
> camel-zeebe: grpc-stub-based operations were never wired for auth
> ------------------------------------------------------------------
>
> Key: CAMEL-24061
> URL: https://issues.apache.org/jira/browse/CAMEL-24061
> Project: Camel
> Issue Type: Bug
> Affects Versions: 4.18.3
> Reporter: chio chuan ooi
> Assignee: Claus Ibsen
> Priority: Minor
> Fix For: 4.18.4, 4.22.0
>
>
> camel-zeebe using {{GatewayGrpc.GatewayBlockingStub}} built from a
> {{ManagedChannelBuilder.forAddress(...).usePlaintext().build()}} channel,
> with no credentials provider.
> Even when the clientid is supplier, beside {{startProcess}} method, the rest
> of the method that using grpc stub is not sending the authentication header
> which lead to all the process was rejected due to missing authentication
> header.
> it should use authenticated channel which wraps {{managedChannel}} with the
> OAuth interceptor when credentials are configured; otherwise it's just the
> plain channel, unchanged from current behavior.
> e.g
>
> {code:java}
> authenticatedChannel = credentialsProvider != null
> ? ClientInterceptors.intercept(managedChannel, new
> OAuthClientInterceptor(credentialsProvider))
> : managedChannel;
> private static class OAuthClientInterceptor implements ClientInterceptor {
> private final CredentialsProvider credentialsProvider;
> OAuthClientInterceptor(CredentialsProvider credentialsProvider) {
> this.credentialsProvider = credentialsProvider;
> }
> @Override
> public <ReqT, RespT> ClientCall<ReqT, RespT> interceptCall(
> MethodDescriptor<ReqT, RespT> method, CallOptions callOptions,
> Channel next) {
> return new
> ForwardingClientCall.SimpleForwardingClientCall<>(next.newCall(method,
> callOptions)) {
> @Override
> public void start(Listener<RespT> responseListener, Metadata
> headers) {
> try {
> credentialsProvider.applyCredentials(
>
> CredentialsProvider.CredentialsApplier.ofMetadata(headers));
> } catch (IOException e) {
> throw new RuntimeException("Failed to apply OAuth
> credentials to gRPC call", e);
> }
> super.start(responseListener, headers);
> }
> };
> }
> }
> {code}
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
