[Feature][Zeta] Support enable https protocol for rest-api v2

[hailin0]

Search before asking

• I had searched in the feature and found no similar feature requirement.

Description

Currently we support using jetty to provide http api services, but not yet support https protocol, so we can add support for https to enhance security.

Updates

• Add config enable https

• Update docs

  • https://github.com/apache/seatunnel/blob/dev/docs/en/seatunnel-engine/rest-api-v2.md
  • https://github.com/apache/seatunnel/blob/dev/docs/zh/seatunnel-engine/rest-api-v2.md

• Add e2e testcase

  • Test one-way(server <- client) authentication
  • Test two-way(server <-> client) authentication

• Adapt web ui
  

• config example

seatunnel:
  engine:
    http:
       ......
      enable-https: true
      https-port: 8443
      keystore: /path/to/file.keystore
      keystore-password: keystore_password
      key-password: key_password

      // optional：Two-way authentication
      truststore: /path/to/file.truststore
      truststore-password: truststore_password
      ......

reference
https://jetty.org/docs/jetty/10/programming-guide/server/http.html#connector-protocol-http11-tls
https://jetty.org/docs/jetty/10/operations-guide/keystore/index.html#client-authn

Usage Scenario

No response

Related issues

No response

Are you willing to submit a PR?

• Yes I am willing to submit a PR!

Code of Conduct

• I agree to follow this project's Code of Conduct

[liugddx]

This is a demo

import org.eclipse.jetty.server.Server;
import org.eclipse.jetty.server.ServerConnector;
import org.eclipse.jetty.util.ssl.SslContextFactory;

import java.io.File;

public class JettyServer {
    public static void main(String[] args) throws Exception {
        Server server = new Server();

        ServerConnector httpConnector = new ServerConnector(server);
        httpConnector.setPort(8080);
        server.addConnector(httpConnector);

        String keystorePath = "/path/to/keystore.jks";
        String keystorePassword = "your_keystore_password";
        String keyManagerPassword = "your_key_password";

        File keystoreFile = new File(keystorePath);
        if (keystoreFile.exists() && keystoreFile.isFile()) {

            SslContextFactory.Server sslContextFactory = new SslContextFactory.Server();
            sslContextFactory.setKeyStorePath(keystorePath);
            sslContextFactory.setKeyStorePassword(keystorePassword);
            sslContextFactory.setKeyManagerPassword(keyManagerPassword);

            ServerConnector httpsConnector = new ServerConnector(server, sslContextFactory);
            httpsConnector.setPort(8443);
            server.addConnector(httpsConnector);
        } else {
            System.out.println("No HTTPS configuration detected, falling back to HTTP...");
        }

        server.setHandler(...);

        server.start();
        server.join();
    }
}

[hailin0]

This is a demo

import org.eclipse.jetty.server.Server;
import org.eclipse.jetty.server.ServerConnector;
import org.eclipse.jetty.util.ssl.SslContextFactory;

import java.io.File;

public class JettyServer {
    public static void main(String[] args) throws Exception {
        Server server = new Server();

        ServerConnector httpConnector = new ServerConnector(server);
        httpConnector.setPort(8080);
        server.addConnector(httpConnector);

        String keystorePath = "/path/to/keystore.jks";
        String keystorePassword = "your_keystore_password";
        String keyManagerPassword = "your_key_password";

        File keystoreFile = new File(keystorePath);
        if (keystoreFile.exists() && keystoreFile.isFile()) {

            SslContextFactory.Server sslContextFactory = new SslContextFactory.Server();
            sslContextFactory.setKeyStorePath(keystorePath);
            sslContextFactory.setKeyStorePassword(keystorePassword);
            sslContextFactory.setKeyManagerPassword(keyManagerPassword);

            ServerConnector httpsConnector = new ServerConnector(server, sslContextFactory);
            httpsConnector.setPort(8443);
            server.addConnector(httpsConnector);
        } else {
            System.out.println("No HTTPS configuration detected, falling back to HTTP...");
        }

        server.setHandler(...);

        server.start();
        server.join();
    }
}

Add

        // optional：Two-way authentication
        if (trustStorePath != null && truststorePassword != null) {
            sslContextFactory.setNeedClientAuth(true);
            sslContextFactory.setTrustStorePath(trustStorePath);
            sslContextFactory.setTrustStorePassword(truststorePassword);
        }

[akulabs8]

Hey I am new to this repo but would like to contribute, so shall I help?