#159 Add notebook.services.communication.token to allow the third-par…

…ty service accessing notebook (#163)

* open api secret key is the same with notebook.security.key

* add notebook.service.security.key to allow the third party accessing notebook

* rename notebook.services.security.key to  notebook.services.communication.token

conf/notebook.properties.example

@@ -2,6 +2,7 @@
 notebook.port=9002
 notebook.session.timeout=12h
 notebook.security.key=6173646661736466e4bda0e8bf983161
+notebook.services.communication.token=6173646661736466e4bda0e8bf983161
 
 notebook.database.type=mysql
 notebook.database.ip=127.0.0.1

src/main/java/io/kyligence/notebook/console/NotebookConfig.java

@@ -226,6 +226,8 @@ public Boolean getIsTrial(){
 
     public String getSecretKey(){return getOptional("notebook.security.key", "6173646661736466e4bda0e8bf983161");}
 
+    public String getServiceSecretKey(){return getOptional("notebook.services.communication.token", getSecretKey());}
+
     public String getOutputSize(){return getOptional("notebook.job.output-size", "1000");}
 
     public String getScheduleCallbackUser(){return getOptional("notebook.scheduler.callback-user", "ByzerRobot");}

src/main/java/io/kyligence/notebook/console/openapi/NotebookApiService.java

@@ -40,7 +40,7 @@ public Response<NotebookDTO> getNotebook(HttpServletRequest request, @PathVariab
         log.info("【NotebookApiService】 /api/service/getNotebook/{} authentication={}", id, authorization);
         Claims claims = null;
         try {
-            String secretKey = config.getSecretKey();
+            String secretKey = config.getServiceSecretKey();
             claims = Jwts.parser()
                     .setSigningKey(secretKey)
                     .parseClaimsJws(token)