optimierungen auth-Modul und cache-Modul

infrastructure/auth/auth-server/build.gradle.kts

@@ -9,6 +9,12 @@ plugins {
     alias(libs.plugins.spring.dependencyManagement)
 }
 
+java {
+    toolchain {
+        languageVersion.set(JavaLanguageVersion.of(21))
+    }
+}
+
 // Konfiguriert die Hauptklasse für das ausführbare JAR.
 springBoot {
     mainClass.set("at.mocode.infrastructure.auth.AuthServerApplicationKt")

infrastructure/auth/auth-server/src/main/kotlin/at/mocode/infrastructure/auth/config/AuthServerConfiguration.kt

@@ -5,21 +5,29 @@ import org.springframework.boot.context.properties.ConfigurationProperties
 import org.springframework.boot.context.properties.EnableConfigurationProperties
 import org.springframework.context.annotation.Bean
 import org.springframework.context.annotation.Configuration
+import org.springframework.validation.annotation.Validated
+import jakarta.validation.constraints.Min
+import jakarta.validation.constraints.NotBlank
+import jakarta.validation.constraints.Size
 import kotlin.time.Duration.Companion.minutes
 
 /**
- * Spring configuration for the Auth Server module.
- * Provides the necessary beans and configuration for JWT handling and authentication.
+ * Spring-Konfiguration für das Auth-Server-Modul.
+ * Stellt die notwendigen Beans und Einstellungen für JWT-Verarbeitung und Authentifizierung bereit.
  */
 @Configuration
 @EnableConfigurationProperties(AuthServerConfiguration.JwtProperties::class)
 class AuthServerConfiguration {
 
     /**
-     * Creates a JwtService bean with configuration from application properties.
+     * Erstellt einen JwtService-Bean mit Konfiguration aus den Application Properties.
      */
     @Bean
     fun jwtService(jwtProperties: JwtProperties): JwtService {
+        // Basic safeguard: warn if default secret is used
+        if (jwtProperties.secret == "default-secret-for-development-only-please-change-in-production") {
+            System.err.println("[SECURITY WARNING] Using default JWT secret – DO NOT use this in production!")
+        }
         return JwtService(
             secret = jwtProperties.secret,
             issuer = jwtProperties.issuer,
@@ -29,13 +37,19 @@ class AuthServerConfiguration {
     }
 
     /**
-     * Configuration properties for JWT settings.
+     * Konfigurationseigenschaften für JWT-Einstellungen.
      */
     @ConfigurationProperties(prefix = "auth.jwt")
+    @Validated
     data class JwtProperties(
+        @field:NotBlank
+        @field:Size(min = 32, message = "JWT secret must be at least 32 characters for HMAC512")
         val secret: String = "default-secret-for-development-only-please-change-in-production",
+        @field:NotBlank
         val issuer: String = "meldestelle-auth-server",
+        @field:NotBlank
         val audience: String = "meldestelle-services",
+        @field:Min(1)
         val expiration: Long = 60 // minutes
     )
 }