Add a mapping with only the default values of Auth and Cors

[radcortez]

• Fixes Logs are flooded with SRCFG01008 warning in dev mode #49638

This exposes only the defaults of AuthRuntimeConfig and CORSConfig in a new mapping DefaultsAuthConfig.

This uses @ConfigMapping @WithDefaults @WithUnnamedKey with Map to populate defaults for any key. See https://smallrye.io/smallrye-config/Latest/config/mappings/#maps

The runtime configuration is available in the Map associated with the null key. A lookup to the Map with any other keys, yields the config object with the defaults. It is still possible to influence these defaults by using the named key defaults as part of the path of quarkus.http.auth.defaults.* and quarkus.http.cors.defaults.*. This is only valid for DefaultsAuthConfig.

[radcortez]

@michalvavrik, here is an alternate proposal.

There is no need for a dummy implementation of VertxHttpConfg, and you could use AuthDefaultsConfig directly if you prefer.

[michalvavrik]

@michalvavrik, here is an alternate proposal.

There is no need for a dummy implementation of VertxHttpConfg, and you could use AuthDefaultsConfig directly if you prefer.

Thanks @radcortez , I think this is better. Yes, we will use AuthDefaultConfig directly. If you want, we can get in this fix and I'll adapt security code to drop the dummy implementation of VertxHttpConfig. Whatever works for you. I checked and we only need the auth and cors so this is safe change.

[github-actions]

😭 Deploy PR Preview failed.

[michalvavrik]

FYI #49647 fixes the reason why the CORS builder was called so many times. But this PR is proper fix for the linked issue.

[michalvavrik]

I think the AuthDefaultConfig yields the result we need (config defaults) and should be more effective. It is a new class, but we need these defaults, so I am +1. Let's see CI as we have test scenarios verifying this.

[radcortez]

Thanks @radcortez , I think this is better. Yes, we will use AuthDefaultConfig directly. If you want, we can get in this fix and I'll adapt security code to drop the dummy implementation of VertxHttpConfig. Whatever works for you. I checked and we only need the auth and cors so this is safe change.

No worries, I've dropped the dummy class and using the new mapping directly.

[radcortez]

Also renamed AuthDefaultsConfig to DefaultsAuthConfig

[quarkus-bot]

Status for workflow Quarkus Documentation CI

This is the status report for running Quarkus Documentation CI on commit 9514076.

✅ The latest workflow run for the pull request has completed successfully.

It should be safe to merge provided you have a look at the other checks in the summary.

Warning

There are other workflow runs running, you probably need to wait for their status before merging.

[quarkus-bot]

Status for workflow Quarkus CI

This is the status report for running Quarkus CI on commit 9514076.

Failing Jobs

Status	Name	Step	Failures	Logs	Raw logs	Build scan
⌛	Native Tests - Data3		⚠️ Check →	Logs	Raw logs	🚧

You can consult the Develocity build scans.

[michalvavrik]

LGTM, thank you!

[sberyozkin]

Thanks @radcortez and @michalvavrik