Vickey 27bcf1383b fix: address code review — security, thread safety, performance, and null safety ...

Security (CRITICAL):
- KeyUtil: read JWT signing key from DC3_SECURITY_KEY env/property
- UserPasswordServiceImpl: read default password from DC3_SECURITY_DEFAULT_PASSWORD env
- KeyLoader: read OPC-UA keystore password from OPCUA_KEYSTORE_PASSWORD env
- WebFilterConfig: return 401 on malformed X-Auth-User header
- AlgorithmConstant: document deprecated hardcoded constants

Thread safety (HIGH):
- Fix TOCTOU races in 4 driver connectors (computeIfAbsent)
- Fix PlcS7 lock leak, OpcUa connect timeout (5s)
- CoapClientManager: synchronize setURI to prevent URI race
- PointValueJob, MqttScheduleJob: add @DisallowConcurrentExecution
- SystemHealthServiceImpl: preserve interrupt flag
- WindowSampleBuffer: local AtomicInteger → int

Performance (MEDIUM):
- EntityStateExpiryScanner: batch alarm saves (saveBatch)
- ImportDeviceServiceImpl: batch config saves
- ResourceRegistrySyncServiceImpl: batch-load nodes, eliminate N+1 COUNTs
- DriverSenderServiceImpl: debug-gate hot-path logging
- PointServiceImpl: stream().count() → size()

Null safety (LOW):
- RegexUtil: null guards on isName/isPhone/isMail/isPassword/isHost
- HostUtil: null-check getNetworkInterfaces() return
- TimeUtil: log parse failures instead of silent null

Infrastructure:
- Add spring-boot-starter-cache + @EnableCaching CacheConfig
- Replace embedded modbus4j/plc-s7 jars with external Maven dependencies
- Add dc3-driver-modbus-rtu module

2026-05-26 08:40:25 +08:00

..

ci.yml

ci: add security quality checks

2026-05-09 20:00:40 +08:00

codeql.yml

revert(ci): restore custom CodeQL workflow

2026-05-10 09:38:05 +08:00

docker-ci.yml

fix: address code review — security, thread safety, performance, and null safety

2026-05-26 08:40:25 +08:00

docs.yml

style: apply consistent formatting across GitHub workflows, docs and common modules

2026-05-19 00:15:07 +08:00

e2e.yml

test(e2e): stabilize infrastructure harness

2026-05-14 21:29:08 +08:00

security.yml

ci: add security quality checks

2026-05-09 20:00:40 +08:00

test.yml

ci: add unit, integration and e2e workflows with makefile targets

2026-05-13 13:08:28 +08:00