Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: dd6b36612c483f84dc944472fc6378a30c46424c https://github.com/xwiki/xwiki-platform/commit/dd6b36612c483f84dc944472fc637... Author: ciaens <[email protected]> Date: 2026-10-13 (Tue, 13 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/pom.xml A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/AuthenticationKeysCheckerListener.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultAuthenticationConfiguration.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/resources/META-INF/components.txt A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/AuthenticationKeysCheckerListenerTest.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultAuthenticationConfigurationTest.java M xwiki-platform-tools/xwiki-platform-tool-configuration-resources/src/main/resources/xwiki.cfg.vm Log Message: ----------- XWIKI-25244: Log an error when clustering is enabled but the authentication keys are not configured (#6768) * DefaultAuthenticationConfiguration logs one error per key when observation.remote.enabled is true and the validation or encryption key is not configured (the key value is never logged) * The error names the ways to set the same value on all nodes: xwiki.cfg, or the environment variable XCONF_xwikicfg_<key with _ instead of .> or the Java system property xconf.xwikicfg.<key> (handy with a secret store) * A blank value in xwiki.cfg is now considered as not set and falls back to the permanent configuration * Log a warning once per key when it is set to one of the example values documented in xwiki.cfg.vm * The keys already reported are tracked in concurrent sets since the configuration is a singleton used by concurrent requests * New AuthenticationKeysCheckerListener resolves both keys on ApplicationStartedEvent (through a Provider) so the check runs at startup instead of at the first request that goes through the authentication (guests and probes included), with a comment explaining why the values returned by the getters are ignored * Explicit dependency on xwiki-platform-observation-remote (already transitively present through oldcore) * xwiki.cfg.vm documents that the same keys must be set on all the nodes of a cluster, and that they can also be set with environment variables or Java system properties * Unit tests for the new logs and the listener, coverage threshold raised to 0.81 Co-authored-by: ciaens <[email protected]> Co-authored-by: Claude <[email protected]> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications