added JWT test with cloud

Author: chernser

.github/workflows/build.yml

@@ -247,6 +247,13 @@ jobs:
           EOF
       - name: Install Java client
         run: mvn --also-make --batch-mode --no-transfer-progress -DskipTests install
+      - name: Generate JWT
+        env:
+          JWT_K_PEM: ${{ secrets.JWT_K_PEM }}
+        run: |
+          echo "{environment_variable_name}={value}" >> "$GITHUB_ENV"
+          npm install jsonwebtoken -g &&
+          echo "CLIENT_JWT=$(JWT_K_PEM=$(cat k.pem) node jwt.js)" >> "$GITHUB_ENV"
       - name: Test http client
         env:
           CLICKHOUSE_CLOUD_HOST: ${{ secrets.CLOUD_INSTANCE_HOST }}

client-v2/src/test/java/com/clickhouse/client/HttpTransportTests.java

@@ -12,6 +12,7 @@
 import com.clickhouse.client.api.enums.ProxyType;
 import com.clickhouse.client.api.insert.InsertResponse;
 import com.clickhouse.client.api.insert.InsertSettings;
+import com.clickhouse.client.api.internal.ServerSettings;
 import com.clickhouse.client.api.query.GenericRecord;
 import com.clickhouse.client.api.query.QueryResponse;
 import com.clickhouse.client.api.query.QuerySettings;
@@ -909,4 +910,31 @@ public void testBearerTokenAuth() throws Exception {
             mockServer.stop();
         }
     }
+
+    @Test
+    public void testJWTWithCloud() throws Exception {
+        String jwt = System.getenv("CLIENT_JWT");
+        try (Client client = newClient().useBearerTokenAuth(jwt).build()) {
+            try {
+                List<GenericRecord> response = client.queryAll("SELECT user(), now()");
+                System.out.println("response: " + response.get(0).getString(1) + " time: " + response.get(0).getString(2));
+            } catch (Exception e) {
+                e.printStackTrace();
+                throw e;
+            }
+        }
+    }
+
+    protected Client.Builder newClient() {
+        ClickHouseNode node = getServer(ClickHouseProtocol.HTTP);
+        boolean isSecure = isCloud();
+        return new Client.Builder()
+                .addEndpoint(Protocol.HTTP, node.getHost(), node.getPort(), isSecure)
+//                .setUsername("default")
+//                .setPassword(ClickHouseServerForTest.getPassword())
+                .compressClientRequest(false)
+                .setDefaultDatabase(ClickHouseServerForTest.getDatabase())
+                .serverSetting(ServerSettings.WAIT_END_OF_QUERY, "1")
+                .useNewImplementation(System.getProperty("client.tests.useNewImplementation", "true").equals("true"));
+    }
 }

jwt-gen.js

@@ -0,0 +1,18 @@
+const jwt = require('jsonwebtoken');
+const secret = process.env['JWT_K_PEM']
+  if (secret === undefined) {
+    throw new Error(
+      'Environment variable JWT_K_PEM is not set',
+    )
+  }
+const payload = {
+    iss: 'ClickHouse',
+    sub: 'CI_Test',
+    aud: '1f7f78b8-da67-480b-8913-726fdd31d2fc',
+    'clickhouse:roles': ['default'],
+    'clickhouse:grants': [],
+};
+
+const signed = jwt.sign(payload, secret, { expiresIn: '15m', algorithm: 'RS256' });
+
+console.log(signed);