Skip to content

feat: z/OSMF JWT Preflight Check #4531

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
hrishikesh-nalawade wants to merge 30 commits into
base: v3.x.x
Choose a base branch
from

Merge branch 'v3.x.x' into hrishikesh-nalawade/GH4526/jwt-pre-flight-…

28c83a1
Select commit
Loading
Failed to load commit list.
Draft

feat: z/OSMF JWT Preflight Check #4531

Merge branch 'v3.x.x' into hrishikesh-nalawade/GH4526/jwt-pre-flight-…
28c83a1
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis failed May 28, 2026 in 1m 7s

Quality Gate failed

Failed conditions
2.3% Coverage on New Code (required ≥ 80%)
5.5% Duplication on New Code (required ≤ 3%)
D Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Annotations

Check warning on line 30 in zosmf-jwt-check/src/main/java/org/zowe/apiml/JwkEndpointChecker.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor your code to get this URI from a customizable parameter. 

See more on https://sonarcloud.io/project/issues?id=zowe_api-layer&issues=AZ5wM4vDd80rcSM6sz2R&open=AZ5wM4vDd80rcSM6sz2R&pullRequest=4531

Check failure on line 106 in zosmf-jwt-check/src/main/java/org/zowe/apiml/JwkEndpointChecker.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Define a constant instead of duplicating this literal "URL: " 3 times. 

See more on https://sonarcloud.io/project/issues?id=zowe_api-layer&issues=AZ5wM4vDd80rcSM6sz2Q&open=AZ5wM4vDd80rcSM6sz2Q&pullRequest=4531

Check warning on line 33 in zosmf-jwt-check/src/main/java/org/zowe/apiml/SSLContextFactory.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this unused "stores" private field. 

See more on https://sonarcloud.io/project/issues?id=zowe_api-layer&issues=AZ5wM4rfd80rcSM6sz2J&open=AZ5wM4rfd80rcSM6sz2J&pullRequest=4531

Check failure on line 84 in zosmf-jwt-check/src/main/java/org/zowe/apiml/SSLContextFactory.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Enable server certificate validation on this SSL/TLS connection. 

See more on https://sonarcloud.io/project/issues?id=zowe_api-layer&issues=AZ5wM4rfd80rcSM6sz2H&open=AZ5wM4rfd80rcSM6sz2H&pullRequest=4531

Check failure on line 88 in zosmf-jwt-check/src/main/java/org/zowe/apiml/SSLContextFactory.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Enable server certificate validation on this SSL/TLS connection. 

See more on https://sonarcloud.io/project/issues?id=zowe_api-layer&issues=AZ5wM4rfd80rcSM6sz2I&open=AZ5wM4rfd80rcSM6sz2I&pullRequest=4531

Check failure on line 61 in zosmf-jwt-check/src/main/java/org/zowe/apiml/ZosmfJwtCheck.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Enable server hostname verification on this SSL/TLS connection. 

See more on https://sonarcloud.io/project/issues?id=zowe_api-layer&issues=AZ5wM4u6d80rcSM6sz2M&open=AZ5wM4u6d80rcSM6sz2M&pullRequest=4531

Check failure on line 61 in zosmf-jwt-check/src/main/java/org/zowe/apiml/JwkEndpointChecker.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Define a constant instead of duplicating this literal "Details: " 3 times. 

See more on https://sonarcloud.io/project/issues?id=zowe_api-layer&issues=AZ5wM4vDd80rcSM6sz2P&open=AZ5wM4vDd80rcSM6sz2P&pullRequest=4531

Check failure on line 124 in zosmf-jwt-check/src/main/java/org/zowe/apiml/JwkEndpointChecker.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Define a constant instead of duplicating this literal "Response body: " 3 times. 

See more on https://sonarcloud.io/project/issues?id=zowe_api-layer&issues=AZ5wM4vDd80rcSM6sz2O&open=AZ5wM4vDd80rcSM6sz2O&pullRequest=4531

Check warning on line 94 in zosmf-jwt-check/src/test/java/org/zowe/apiml/JwkEndpointCheckerTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Replace these 3 tests with a single Parameterized one. 

See more on https://sonarcloud.io/project/issues?id=zowe_api-layer&issues=AZ5wM4vMd80rcSM6sz2S&open=AZ5wM4vMd80rcSM6sz2S&pullRequest=4531

Check failure on line 48 in zosmf-jwt-check/src/main/java/org/zowe/apiml/ZosmfJwtCheck.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Define a constant instead of duplicating this literal "https" 3 times. 

See more on https://sonarcloud.io/project/issues?id=zowe_api-layer&issues=AZ5wM4u6d80rcSM6sz2K&open=AZ5wM4u6d80rcSM6sz2K&pullRequest=4531

Check failure on line 53 in zosmf-jwt-check/src/main/java/org/zowe/apiml/ZosmfJwtCheck.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Enable server hostname verification on this SSL/TLS connection. 

See more on https://sonarcloud.io/project/issues?id=zowe_api-layer&issues=AZ5wM4u6d80rcSM6sz2L&open=AZ5wM4u6d80rcSM6sz2L&pullRequest=4531

Check warning on line 122 in zosmf-jwt-check/src/main/java/org/zowe/apiml/ZosmfJwtCheck.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use "isEmpty()" to check whether a "StringBuilder" is empty or not. 

See more on https://sonarcloud.io/project/issues?id=zowe_api-layer&issues=AZ5wM4u6d80rcSM6sz2N&open=AZ5wM4u6d80rcSM6sz2N&pullRequest=4531
View more details on SonarQubeCloud