Port IAM authentication to Java by alexr-bq · Pull Request #10 · aws/developer-toolkit-elasticache

alexr-bq · 2026-09-10T19:28:27Z

Summary

Add the Java IAM authentication token generator, tests, documentation, and runnable TLS example.
Add parity coverage for validation, region resolution, credential handling, signing, and public API consumption.

Verification

Corretto 8 library build: 26 tests passed.
Separate example/consumer build: 2 tests passed.

mwaisaida-13

Solid port, the same known-answer vectors as Python/Node, and a complete test suite.

A few small changes before approving: centralize the supported Java versions like we do with pyproject.toml; use the Java builder parameter names in error messages; add a Lettuce RedisCredentialsProvider example alongside the RESP one; move PublicApiTest into a java/integration-tests/ dir so examples/ stays for documentation; order the README sections like python/README.md and add the engine floor. Thank you!

mwaisaida-13 · 2026-09-11T16:33:11Z

+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest]
+        java-version: ["8", "11", "17", "21"]


Could we have the supported versions centralized? that way it's simpler to add more versions. For python we store and extract them from the .toml

Added in pom.xml

mwaisaida-13 · 2026-09-11T16:50:59Z

+                .region(region)
+                .build();
+
+        SSLSocketFactory socketFactory = (SSLSocketFactory) SSLSocketFactory.getDefault();


Nice! a client-independent example showing the wire exchange is useful for custom clients and proxies. Could we also add a Lettuce RedisCredentialsProvider example alongside it, mirroring python/examples/connect_valkey.py, so typical client users see the short integration path?

Added ConnectWithLettuce

mwaisaida-13 · 2026-09-11T16:59:10Z

@@ -0,0 +1,27 @@
+/*


Not sure if we really need this test since the examples are mainly for documentation purposes, what do you think?

mwaisaida-13 · 2026-09-11T17:05:30Z

@@ -0,0 +1,26 @@
+/*
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.


nit: This is really a consumer-side check against the installed jar, not an example. Could it move to its own java/integration-tests/ dir?

mwaisaida-13 · 2026-09-11T17:48:57Z

+        Target target = resolveTarget(builder.serverlessCacheName, builder.replicationGroupId);
+        this.cacheName = target.cacheName;
+        this.serverless = target.serverless;
+        this.userId = validateAndNormalize("user_id", builder.userId, USER_ID_PATTERN);


nit: These messages name the Python parameters ('serverless_cache_name', 'replication_group_id', 'user_id'), but here we use serverlessCacheName, replicationGroupId, userId. Please use the Java names so the error points at something the caller can easily find.

mwaisaida-13 · 2026-09-11T18:29:32Z

@@ -0,0 +1,101 @@
+# Developer Toolkit for Amazon ElastiCache (Java)


Could you order the sections like python/README.md (Installation → what you need → Generate a token → Reconnecting clients → Security → License) so the three READMEs read the same, and add the engine floor (Valkey 7.2+ / Redis OSS 7.0+) to the prerequisites?

Reordered the README to Installation → What you need → Generate a token → Reconnecting clients → Security → License, and added both engine minimums.

mwaisaida-13 · 2026-09-11T18:30:42Z

+`credentialsProvider(...)`.
+
+Missing credentials are reported when a token is requested. Expired or otherwise
+invalid credentials cannot be detected during local signing: token generation can


This note is great, we should copy it to the other packages

mwaisaida-13 · 2026-09-15T11:17:15Z

Hey @alexr-bq, could you have a look at the merge conflicts?

alexr-bq · 2026-09-16T16:42:05Z

@mwaisaida-13 resolved

alexr-bq requested review from edlng and mwaisaida-13 September 10, 2026 19:28

github-advanced-security Bot found potential problems Sep 10, 2026

View reviewed changes

Comment thread .github/workflows/java.yml Fixed

edlng reviewed Sep 10, 2026

View reviewed changes

alexr-bq changed the base branch from main to release-2 September 10, 2026 23:48

mwaisaida-13 reviewed Sep 11, 2026

View reviewed changes

Alexandre [C] Luc Rehnby-Martin added 13 commits September 16, 2026 09:09

Add Java ElastiCache IAM authentication library

22bb7ed

Support AWS_DEFAULT_REGION in Java auth provider

f7869e6

Align Java generator with parity contract

f3e4add

Document Java region environment behavior

e2237d3

Add Java target validation parity tests

a2d014f

Add Java IAM connection example

3d07a2e

Verify TLS hostnames in Java example

8139849

Expand Java parity coverage

2e0ea00

Address Java review feedback

1d1af48

Limit Java workflow token permissions

f8a120b

Consolidate project changelog

1593a5f

Address Java integration review feedback

c2cb46a

Keep examples documentation-only

5fd9a6a

alexr-bq force-pushed the port-iam-authentication-to-java-a9f91d0a branch from 071b86e to 5fd9a6a Compare September 16, 2026 16:15

edlng approved these changes Sep 16, 2026

View reviewed changes

edlng mentioned this pull request Sep 16, 2026

feat(java): Add Auto Refresh #13

Merged

alexr-bq added this pull request to stack #14 September 17, 2026 16:21

alexr-bq removed this pull request from stack #14 September 17, 2026 16:21

mwaisaida-13 approved these changes Sep 17, 2026

View reviewed changes

alexr-bq merged commit 3e42742 into release-2 Sep 17, 2026
24 checks passed

		@@ -0,0 +1,26 @@
		/*
		* Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.

		@@ -0,0 +1,101 @@
		# Developer Toolkit for Amazon ElastiCache (Java)

Conversation

alexr-bq commented Sep 10, 2026

Summary

Verification

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

mwaisaida-13 left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

mwaisaida-13 commented Sep 15, 2026

Uh oh!

alexr-bq commented Sep 16, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants