chore: update

gateway-service/src/main/java/com/drinkool/filters/InternalHeaderGatewayFilter.java

@@ -5,6 +5,7 @@ import jakarta.ws.rs.Priorities;
 import jakarta.ws.rs.container.*;
 import jakarta.ws.rs.core.*;
 import java.util.*;
+import org.eclipse.microprofile.config.inject.ConfigProperty;
 import org.jboss.resteasy.reactive.server.ServerRequestFilter;
 import org.jboss.resteasy.reactive.server.ServerResponseFilter;
 import org.jose4j.jws.AlgorithmIdentifiers;
@@ -16,8 +17,8 @@ import org.jose4j.keys.HmacKey;
 
 public class InternalHeaderGatewayFilter {
 
-	private static final String SECRET_KEY =
-		"your-256-bit-secret-your-256-bit-secret"; // Nên lấy từ Config
+	@ConfigProperty(name = "gateway.jwt.secret")
+	String SECRET_KEY;
 
 	private boolean isSystemClaim(String key) {
 		return List.of("iss", "sub", "aud", "exp", "nbf", "iat", "jti").contains(

gateway-service/src/main/resources/application.properties

@@ -8,4 +8,4 @@ quarkus.container-image.builder=docker
 quarkus.container-image.additional-tags=latest
 
 # Build
-quarkus.native.container-build=false
+quarkus.native.container-build=false

k8s.yaml

@@ -80,6 +80,11 @@ spec:
           env:
             - name: QUARKUS_REST_CLIENT_ACCOUNT_URL
               value: "http://account-service"
+            - name: GATEWAY_JWT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: jwt-secret
+                  key: secret
           resources:
             limits:
               cpu: "500m"