Skip to content

feat(sdk): add comprehensive DPoP (RFC 9449) support (DSPX-3397)#374

Draft
dmihalcik-virtru wants to merge 24 commits into
mainfrom
DSPX-3397-java-sdk
Draft

feat(sdk): add comprehensive DPoP (RFC 9449) support (DSPX-3397)#374
dmihalcik-virtru wants to merge 24 commits into
mainfrom
DSPX-3397-java-sdk

fix(sdk): disable Connect-GET on authenticated client (DPoP htm drift)

95ce0d0
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis succeeded Jun 17, 2026 in 37s

Annotations

Check warning on line 613 in sdk/src/test/java/io/opentdf/platform/sdk/SDKBuilderTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this 'public' modifier.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ7Shq7f9lalPZs0E7dl&open=AZ7Shq7f9lalPZs0E7dl&pullRequest=374

Check warning on line 11 in sdk/src/main/java/io/opentdf/platform/sdk/SDKBuilder.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this unused import 'com.nimbusds.jose.jwk.Curve'.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ7Rv3gl83DoD6J_RwCV&open=AZ7Rv3gl83DoD6J_RwCV&pullRequest=374

Check warning on line 215 in sdk/src/test/java/io/opentdf/platform/sdk/DPoPRetryInterceptorTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this block of code, fill it in, or add a comment explaining why it is empty.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ7Rv3gz83DoD6J_RwCW&open=AZ7Rv3gz83DoD6J_RwCW&pullRequest=374

Check warning on line 421 in sdk/src/test/java/io/opentdf/platform/sdk/TokenSourceTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor the code of the lambda to have only one invocation possibly throwing a runtime exception.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ7Rv3g-83DoD6J_RwCY&open=AZ7Rv3g-83DoD6J_RwCY&pullRequest=374

Check warning on line 452 in sdk/src/test/java/io/opentdf/platform/sdk/TokenSourceTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor the code of the lambda to have only one invocation possibly throwing a runtime exception.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ7Rv3g-83DoD6J_RwCa&open=AZ7Rv3g-83DoD6J_RwCa&pullRequest=374

Check warning on line 35 in sdk/src/test/java/io/opentdf/platform/sdk/TokenSourceTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove the declaration of thrown exception 'java.lang.Exception', as it cannot be thrown from method's body.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ64G-F2XiAU-GKneYwa&open=AZ64G-F2XiAU-GKneYwa&pullRequest=374

Check warning on line 37 in sdk/src/test/java/io/opentdf/platform/sdk/DPoPRetryInterceptorTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove the declaration of thrown exception 'java.lang.Exception', as it cannot be thrown from method's body.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ64G-FtXiAU-GKneYwZ&open=AZ64G-FtXiAU-GKneYwZ&pullRequest=374

Check warning on line 6 in sdk/src/main/java/io/opentdf/platform/sdk/TokenSource.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this unused import 'com.nimbusds.jose.jwk.RSAKey'.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ64G-FBXiAU-GKneYwV&open=AZ64G-FBXiAU-GKneYwV&pullRequest=374

Check failure on line 193 in sdk/src/main/java/io/opentdf/platform/sdk/TokenSource.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this method to reduce its Cognitive Complexity from 48 to the 15 allowed.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ7RLO2NNqxzHYuTjlGM&open=AZ7RLO2NNqxzHYuTjlGM&pullRequest=374

Check warning on line 16 in sdk/src/main/java/io/opentdf/platform/sdk/SDKBuilder.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this unused import 'com.nimbusds.jose.jwk.gen.ECKeyGenerator'.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ64G-FgXiAU-GKneYwY&open=AZ64G-FgXiAU-GKneYwY&pullRequest=374

Check warning on line 410 in sdk/src/test/java/io/opentdf/platform/sdk/TokenSourceTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor the code of the lambda to have only one invocation possibly throwing a runtime exception.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ7Rv3g-83DoD6J_RwCX&open=AZ7Rv3g-83DoD6J_RwCX&pullRequest=374

Check failure on line 338 in sdk/src/main/java/io/opentdf/platform/sdk/SDKBuilder.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this method to reduce its Cognitive Complexity from 20 to the 15 allowed.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ64G-FgXiAU-GKneYwW&open=AZ64G-FgXiAU-GKneYwW&pullRequest=374

Check warning on line 522 in sdk/src/main/java/io/opentdf/platform/sdk/SDKBuilder.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this use of "sslSocketFactory"; it is deprecated.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ64G-FgXiAU-GKneYwX&open=AZ64G-FgXiAU-GKneYwX&pullRequest=374

Check warning on line 385 in sdk/src/test/java/io/opentdf/platform/sdk/TokenSourceTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor the code of the lambda to have only one invocation possibly throwing a runtime exception.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ7RLO2_NqxzHYuTjlGN&open=AZ7RLO2_NqxzHYuTjlGN&pullRequest=374

Check warning on line 193 in sdk/src/main/java/io/opentdf/platform/sdk/TokenSource.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

A "Brain Method" was detected. Refactor it to reduce at least one of the following metrics: LOC from 95 to 64, Complexity from 17 to 14, Nesting Level from 6 to 2, Number of Variables from 24 to 6.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ7Rv3gD83DoD6J_RwCU&open=AZ7Rv3gD83DoD6J_RwCU&pullRequest=374

Check warning on line 435 in sdk/src/test/java/io/opentdf/platform/sdk/TokenSourceTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor the code of the lambda to have only one invocation possibly throwing a runtime exception.

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ7Rv3g-83DoD6J_RwCZ&open=AZ7Rv3g-83DoD6J_RwCZ&pullRequest=374