Allows configuration of disableChallengeResourceVerification property

- Adds disableChallengeResourceVerification property to properties objects - Includes new property in mapping methods - Configures SecretClient in Factory when disableChallengeResourceVerification is set - Configures CertificateClient in Factory when disableChallengeResourceVerification is set - Updates/adds new tests - Updates Changelog Resolves Azure#36561 Signed-off-by: Esta Nagy <nagyesta@gmail.com>
nagyesta · Aug 30, 2023 · 129bf62 · 129bf62
1 parent 61f2cf4
commit 129bf62
Show file tree

Hide file tree

Showing 14 changed files with 117 additions and 4 deletions.
diff --git a/sdk/spring/CHANGELOG.md b/sdk/spring/CHANGELOG.md
@@ -1,5 +1,8 @@
 # Release History
 
+#### Bugs Fixed
+- Fix the issue that prevented the `disableChallengeResourceVerification` property of the AKV `SecretClient` to be configured [#36561](https://github.com/Azure/azure-sdk-for-java/issues/36561).
+
 ## 5.5.0 (2023-08-28)
 - This release is compatible with Spring Boot 3.0.0-3.1.2. (Note: 3.1.x (x>2) should be supported, but they aren't tested with this release.)
 - This release is compatible with Spring Cloud 2022.0.0-2022.0.4. (Note: 2022.0.x (x>4) should be supported, but they aren't tested with this release.)

diff --git a/...re/spring/cloud/autoconfigure/implementation/keyvault/common/AzureKeyVaultProperties.java b/...re/spring/cloud/autoconfigure/implementation/keyvault/common/AzureKeyVaultProperties.java
@@ -19,6 +19,8 @@ public class AzureKeyVaultProperties extends AbstractAzureHttpConfigurationPrope
      */
     private String endpoint;
 
+    private boolean disableChallengeResourceVerification = false;
+
     /**
      *
      * @return The Azure Key Vault endpoint.
@@ -34,4 +36,21 @@ public String getEndpoint() {
     public void setEndpoint(String endpoint) {
         this.endpoint = endpoint;
     }
+
+    /**
+     *
+     * @return The value of the disableChallengeResourceVerification property of the Azure Key Vault Client
+     */
+    public boolean isDisableChallengeResourceVerification() {
+        return disableChallengeResourceVerification;
+    }
+
+    /**
+     *
+     * @param disableChallengeResourceVerification The value of the disableChallengeResourceVerification property of the Azure Key Vault Client
+     */
+    public void setDisableChallengeResourceVerification(
+        boolean disableChallengeResourceVerification) {
+        this.disableChallengeResourceVerification = disableChallengeResourceVerification;
+    }
 }
diff --git a/...d/autoconfigure/implementation/keyvault/environment/KeyVaultEnvironmentPostProcessor.java b/...d/autoconfigure/implementation/keyvault/environment/KeyVaultEnvironmentPostProcessor.java
@@ -143,6 +143,7 @@ private AzureKeyVaultSecretProperties toAzureKeyVaultSecretProperties(
         AzurePropertiesUtils.copyAzureCommonProperties(propertySourceProperties, secretProperties);
         secretProperties.setEndpoint(propertySourceProperties.getEndpoint());
         secretProperties.setServiceVersion(propertySourceProperties.getServiceVersion());
+        secretProperties.setDisableChallengeResourceVerification(propertySourceProperties.isDisableChallengeResourceVerification());
         return secretProperties;
     }
 
@@ -197,6 +198,7 @@ private AzureKeyVaultPropertySourceProperties buildMergedProperties(
         mergedProperties.setCaseSensitive(propertySourceProperties.isCaseSensitive());
         mergedProperties.setSecretKeys(propertySourceProperties.getSecretKeys());
         mergedProperties.setRefreshInterval(propertySourceProperties.getRefreshInterval());
+        mergedProperties.setDisableChallengeResourceVerification(propertySourceProperties.isDisableChallengeResourceVerification());
         return mergedProperties;
     }
 

diff --git a/...ure/implementation/keyvault/secrets/properties/AzureKeyVaultPropertySourceProperties.java b/...ure/implementation/keyvault/secrets/properties/AzureKeyVaultPropertySourceProperties.java
@@ -43,6 +43,8 @@ public class AzureKeyVaultPropertySourceProperties extends AbstractAzureHttpConf
      */
     private Duration refreshInterval = DEFAULT_REFRESH_INTERVAL;
 
+    private boolean disableChallengeResourceVerification = false;
+
     /**
      *
      * @return The name of this property source.
@@ -138,4 +140,21 @@ public Duration getRefreshInterval() {
     public void setRefreshInterval(Duration refreshInterval) {
         this.refreshInterval = refreshInterval;
     }
+
+    /**
+     *
+     * @return Whether we should disable the challenge resource verification
+     */
+    public boolean isDisableChallengeResourceVerification() {
+        return disableChallengeResourceVerification;
+    }
+
+    /**
+     *
+     * @param disableChallengeResourceVerification - Whether we should disable the challenge resource verification
+     */
+    public void setDisableChallengeResourceVerification(
+        boolean disableChallengeResourceVerification) {
+        this.disableChallengeResourceVerification = disableChallengeResourceVerification;
+    }
 }
diff --git a/.../implementation/keyvault/certificates/AzureKeyVaultCertificateAutoConfigurationTests.java b/.../implementation/keyvault/certificates/AzureKeyVaultCertificateAutoConfigurationTests.java
@@ -22,6 +22,7 @@
 
 import static org.assertj.core.api.Assertions.assertThat;
 import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertTrue;
 
 class AzureKeyVaultCertificateAutoConfigurationTests extends AbstractAzureServiceConfigurationTests<
     CertificateClientBuilderFactory, AzureKeyVaultCertificateProperties> {
@@ -139,13 +140,15 @@ void configurationPropertiesShouldBind() {
         this.contextRunner
             .withPropertyValues(
                 "spring.cloud.azure.keyvault.certificate.endpoint=" + endpoint,
-                "spring.cloud.azure.keyvault.certificate.service-version=V7_2"
+                "spring.cloud.azure.keyvault.certificate.service-version=V7_2",
+                "spring.cloud.azure.keyvault.certificate.disable-challenge-resource-verification=true"
             )
             .run(context -> {
                 assertThat(context).hasSingleBean(AzureKeyVaultCertificateProperties.class);
                 AzureKeyVaultCertificateProperties properties = context.getBean(AzureKeyVaultCertificateProperties.class);
                 assertEquals(endpoint, properties.getEndpoint());
                 assertEquals(CertificateServiceVersion.V7_2, properties.getServiceVersion());
+                assertTrue(properties.isDisableChallengeResourceVerification());
             });
     }
 

diff --git a/...oconfigure/implementation/keyvault/environment/KeyVaultEnvironmentPostProcessorTests.java b/...oconfigure/implementation/keyvault/environment/KeyVaultEnvironmentPostProcessorTests.java
@@ -275,6 +275,31 @@ void specificPropertiesHasHigherPriorityThanGlobalPropertiesTest() {
         assertEquals(specificMaxRetries, properties.getRetry().getFixed().getMaxRetries());
     }
 
+    @Test
+    void disableChallengeResourceVerificationCanBeSetTest() {
+        environment.setProperty("spring.cloud.azure.keyvault.secret.property-source-enabled", "true");
+        environment.setProperty("spring.cloud.azure.keyvault.secret.property-sources[0].disable-challenge-resource-verification", "true");
+        environment.setProperty("spring.cloud.azure.keyvault.secret.property-sources[0].enabled", "true");
+        environment.setProperty("spring.cloud.azure.keyvault.secret.property-sources[0].name", NAME_0);
+        environment.setProperty("spring.cloud.azure.keyvault.secret.property-sources[0].endpoint", ENDPOINT_0);
+        AzureKeyVaultSecretProperties secretProperties = processor.loadProperties(environment);
+        AzureKeyVaultPropertySourceProperties properties = secretProperties.getPropertySources().get(0);
+        assertFalse(secretProperties.isDisableChallengeResourceVerification());
+        assertTrue(properties.isDisableChallengeResourceVerification());
+    }
+
+    @Test
+    void disableChallengeResourceVerificationIsNotSetByDefaultTest() {
+        environment.setProperty("spring.cloud.azure.keyvault.secret.property-source-enabled", "true");
+        environment.setProperty("spring.cloud.azure.keyvault.secret.property-sources[0].enabled", "true");
+        environment.setProperty("spring.cloud.azure.keyvault.secret.property-sources[0].name", NAME_0);
+        environment.setProperty("spring.cloud.azure.keyvault.secret.property-sources[0].endpoint", ENDPOINT_0);
+        AzureKeyVaultSecretProperties secretProperties = processor.loadProperties(environment);
+        AzureKeyVaultPropertySourceProperties properties = secretProperties.getPropertySources().get(0);
+        assertFalse(secretProperties.isDisableChallengeResourceVerification());
+        assertFalse(properties.isDisableChallengeResourceVerification());
+    }
+
     @Disabled("Disable it to unblock Azure Dev Ops pipeline: https://dev.azure.com/azure-sdk/public/_build/results?buildId=1434354&view=logs&j=c1fb1ddd-7688-52ac-4c5f-1467e51181f3")
     @Test
     void buildKeyVaultPropertySourceWithExceptionTest() {

diff --git a/...oconfigure/implementation/keyvault/secrets/AzureKeyVaultSecretAutoConfigurationTests.java b/...oconfigure/implementation/keyvault/secrets/AzureKeyVaultSecretAutoConfigurationTests.java
@@ -27,6 +27,7 @@
 import static org.assertj.core.api.Assertions.assertThat;
 import static org.junit.jupiter.api.Assertions.assertEquals;
 import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
 
 class AzureKeyVaultSecretAutoConfigurationTests extends AbstractAzureServiceConfigurationTests<
     SecretClientBuilderFactory, AzureKeyVaultSecretProperties> {
@@ -145,6 +146,7 @@ void configurationPropertiesShouldBind() {
             .withPropertyValues(
                 "spring.cloud.azure.keyvault.secret.endpoint=" + endpoint,
                 "spring.cloud.azure.keyvault.secret.service-version=V7_2",
+                "spring.cloud.azure.keyvault.secret.disable-challenge-resource-verification=true",
 
                 "spring.cloud.azure.keyvault.secret.property-source-enabled=false",
                 "spring.cloud.azure.keyvault.secret.property-sources[0].endpoint=" + endpoint + "-1",
@@ -161,6 +163,7 @@ void configurationPropertiesShouldBind() {
                 assertEquals(endpoint, properties.getEndpoint());
                 assertFalse(properties.isPropertySourceEnabled());
                 assertEquals(SecretServiceVersion.V7_2, properties.getServiceVersion());
+                assertTrue(properties.isDisableChallengeResourceVerification());
 
                 AzureKeyVaultPropertySourceProperties propertySourceProperties = properties.getPropertySources().get(0);
                 assertEquals(endpoint + "-1", propertySourceProperties.getEndpoint());

diff --git a/.../main/java/com/azure/spring/cloud/service/implementation/keyvault/KeyVaultProperties.java b/.../main/java/com/azure/spring/cloud/service/implementation/keyvault/KeyVaultProperties.java
@@ -13,4 +13,6 @@ public interface KeyVaultProperties extends AzureProperties, RetryOptionsProvide
 
     String getEndpoint();
 
+    boolean isDisableChallengeResourceVerification();
+
 }
diff --git a/...g/cloud/service/implementation/keyvault/certificates/CertificateClientBuilderFactory.java b/...g/cloud/service/implementation/keyvault/certificates/CertificateClientBuilderFactory.java
@@ -88,6 +88,12 @@ protected void configureService(CertificateClientBuilder builder) {
         PropertyMapper map = new PropertyMapper();
         map.from(certificateClientProperties.getEndpoint()).to(builder::vaultUrl);
         map.from(certificateClientProperties.getServiceVersion()).to(builder::serviceVersion);
+        map.from(certificateClientProperties.isDisableChallengeResourceVerification()).to(
+            disabled -> {
+                if (disabled) {
+                    builder.disableChallengeResourceVerification();
+                }
+            });
     }
 
     @Override

diff --git a/...zure/spring/cloud/service/implementation/keyvault/secrets/SecretClientBuilderFactory.java b/...zure/spring/cloud/service/implementation/keyvault/secrets/SecretClientBuilderFactory.java
@@ -88,6 +88,12 @@ protected void configureService(SecretClientBuilder builder) {
         PropertyMapper map = new PropertyMapper();
         map.from(secretClientProperties.getEndpoint()).to(builder::vaultUrl);
         map.from(secretClientProperties.getServiceVersion()).to(builder::serviceVersion);
+        map.from(secretClientProperties.isDisableChallengeResourceVerification()).to(
+            disabled -> {
+                if (disabled) {
+                    builder.disableChallengeResourceVerification();
+                }
+            });
     }
 
     @Override

diff --git a/.../service/implementation/keyvault/certificates/AzureKeyVaultCertificateTestProperties.java b/.../service/implementation/keyvault/certificates/AzureKeyVaultCertificateTestProperties.java
@@ -11,6 +11,8 @@ class AzureKeyVaultCertificateTestProperties extends AzureHttpSdkProperties impl
     private String endpoint;
     private CertificateServiceVersion serviceVersion;
 
+    private boolean disableChallengeResourceVerification;
+
     @Override
     public String getEndpoint() {
         return endpoint;
@@ -28,4 +30,13 @@ public CertificateServiceVersion getServiceVersion() {
     public void setServiceVersion(CertificateServiceVersion serviceVersion) {
         this.serviceVersion = serviceVersion;
     }
+
+    @Override
+    public boolean isDisableChallengeResourceVerification() {
+        return disableChallengeResourceVerification;
+    }
+
+    public void setDisableChallengeResourceVerification(boolean disableChallengeResourceVerification) {
+        this.disableChallengeResourceVerification = disableChallengeResourceVerification;
+    }
 }
diff --git a/...ud/service/implementation/keyvault/certificates/CertificateClientBuilderFactoryTests.java b/...ud/service/implementation/keyvault/certificates/CertificateClientBuilderFactoryTests.java
@@ -23,9 +23,9 @@
 /**
  *
  */
-class CertificateClientBuilderFactoryTests extends 
+class CertificateClientBuilderFactoryTests extends
     AzureHttpClientBuilderFactoryBaseTests<
-        CertificateClientBuilder, 
+        CertificateClientBuilder,
         AzureKeyVaultCertificateTestProperties,
         CertificateClientBuilderFactoryTests.CertificateClientBuilderFactoryExt> {
 
@@ -52,11 +52,13 @@ protected void verifyServicePropertiesConfigured() {
         AzureKeyVaultCertificateTestProperties properties = new AzureKeyVaultCertificateTestProperties();
         properties.setServiceVersion(CertificateServiceVersion.V7_0);
         properties.setEndpoint(ENDPOINT);
+        properties.setDisableChallengeResourceVerification(true);
 
         final CertificateClientBuilderFactoryExt factoryExt = new CertificateClientBuilderFactoryExt(properties);
         final CertificateClientBuilder builder = factoryExt.build();
         verify(builder, times(1)).serviceVersion(CertificateServiceVersion.V7_0);
         verify(builder, times(1)).vaultUrl(ENDPOINT);
+        verify(builder, times(1)).disableChallengeResourceVerification();
     }
 
     @Override
@@ -88,7 +90,7 @@ protected HttpClientOptions getHttpClientOptions(CertificateClientBuilderFactory
     protected List<HttpPipelinePolicy> getHttpPipelinePolicies(CertificateClientBuilderFactoryExt builderFactory) {
         return builderFactory.getHttpPipelinePolicies();
     }
-    
+
 
     static class CertificateClientBuilderFactoryExt extends CertificateClientBuilderFactory {
 

diff --git a/...ring/cloud/service/implementation/keyvault/secrets/AzureKeyVaultSecretTestProperties.java b/...ring/cloud/service/implementation/keyvault/secrets/AzureKeyVaultSecretTestProperties.java
@@ -13,6 +13,7 @@ class AzureKeyVaultSecretTestProperties extends AzureHttpSdkProperties implement
 
     private String endpoint;
     private SecretServiceVersion serviceVersion;
+    private boolean disableChallengeResourceVerification;
 
     @Override
     public String getEndpoint() {
@@ -31,4 +32,13 @@ public SecretServiceVersion getServiceVersion() {
     public void setServiceVersion(SecretServiceVersion serviceVersion) {
         this.serviceVersion = serviceVersion;
     }
+
+    @Override
+    public boolean isDisableChallengeResourceVerification() {
+        return disableChallengeResourceVerification;
+    }
+
+    public void setDisableChallengeResourceVerification(boolean disableChallengeResourceVerification) {
+        this.disableChallengeResourceVerification = disableChallengeResourceVerification;
+    }
 }
diff --git a/...spring/cloud/service/implementation/keyvault/secrets/SecretClientBuilderFactoryTests.java b/...spring/cloud/service/implementation/keyvault/secrets/SecretClientBuilderFactoryTests.java
@@ -78,12 +78,14 @@ protected void verifyServicePropertiesConfigured() {
         AzureKeyVaultSecretTestProperties properties = new AzureKeyVaultSecretTestProperties();
         properties.setServiceVersion(SecretServiceVersion.V7_0);
         properties.setEndpoint(ENDPOINT);
+        properties.setDisableChallengeResourceVerification(true);
 
         final SecretClientBuilderFactoryExt factoryExt = new SecretClientBuilderFactoryExt(properties);
         final SecretClientBuilder builder = factoryExt.build();
 
         verify(builder, times(1)).vaultUrl(ENDPOINT);
         verify(builder, times(1)).serviceVersion(SecretServiceVersion.V7_0);
+        verify(builder, times(1)).disableChallengeResourceVerification();
     }
 
     static class SecretClientBuilderFactoryExt extends SecretClientBuilderFactory {