dbeaver/pro#9532 Support user AI credentials

server/bundles/io.cloudbeaver.model/src/io/cloudbeaver/model/app/VoidSecretController.java

@@ -1,6 +1,6 @@
 /*
  * DBeaver - Universal Database Manager
- * Copyright (C) 2010-2024 DBeaver Corp and others
+ * Copyright (C) 2010-2026 DBeaver Corp and others
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -40,6 +40,11 @@ public VoidSecretController() {
 
     }
 
+    @Override
+    public long getSupportedFeatures() {
+        return 0;
+    }
+
     @Nullable
     @Override
     public String getPrivateSecretValue(@NotNull String secretId) {
@@ -68,4 +73,4 @@ public void authorize(
     ) throws DBException {
 
     }
-}
+}

server/bundles/io.cloudbeaver.model/src/io/cloudbeaver/model/session/WebUserContext.java

@@ -238,8 +238,8 @@ private void setUserPermissions(Set<String> permissions) {
     }
 
     @NotNull
-    public DBSSecretController getSecretController() throws DBException {
-        if (this.securityController == null) {
+    public synchronized DBSSecretController getSecretController() throws DBException {
+        if (this.secretController == null) {
             this.secretController = application.getSecretController(this, workspace.getAuthContext());
         }
         return secretController;

server/bundles/io.cloudbeaver.server.ce/src/io/cloudbeaver/model/config/CBServerConfig.java

@@ -1,6 +1,6 @@
 /*
  * DBeaver - Universal Database Manager
- * Copyright (C) 2010-2025 DBeaver Corp and others
+ * Copyright (C) 2010-2026 DBeaver Corp and others
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -47,6 +47,7 @@
     private long maxSessionIdleTime = CBAuthConstants.MAX_SESSION_IDLE_TIME;
     private boolean develMode = false;
     private boolean enableSecurityManager = false;
+    protected String secretController = "cb-embedded";
     private final Map<String, Object> productSettings = new HashMap<>();
 
     @SerializedName("sm")
@@ -147,7 +148,15 @@
         this.enableSecurityManager = enableSecurityManager;
     }
 
+    public String getSecretControllerId() {
+        return secretController;
+    }
+
+    public void setSecretControllerId(String secretControllerId) {
+        this.secretController = secretControllerId;
+    }
+
     public void setDatabaseConfiguration(WebDatabaseConfig databaseConfiguration) {
         this.databaseConfiguration = databaseConfiguration;
     }
 

server/bundles/io.cloudbeaver.server.ce/src/io/cloudbeaver/server/CBApplicationCE.java

@@ -29,7 +29,10 @@
 import org.jkiss.dbeaver.model.app.DBPWorkspace;
 import org.jkiss.dbeaver.model.auth.SMAuthConfiguration;
 import org.jkiss.dbeaver.model.auth.SMCredentialsProvider;
+import org.jkiss.dbeaver.model.auth.SMSessionContext;
 import org.jkiss.dbeaver.model.rm.RMController;
+import org.jkiss.dbeaver.model.secret.DBSSecretController;
+import org.jkiss.dbeaver.model.secret.SecretControllerRegistry;
 import org.jkiss.dbeaver.model.security.SMAdminController;
 import org.jkiss.dbeaver.model.security.SMController;
 import org.jkiss.dbeaver.registry.LocalFileController;
@@ -75,6 +78,17 @@
         );
     }
 
+    @NotNull
+    @Override
+    public DBSSecretController getSecretController(
+        @NotNull SMCredentialsProvider credentialsProvider,
+        SMSessionContext smSessionContext
+    ) throws DBException {
+        return SecretControllerRegistry.getInstance().getAuthorizedSecretController(
+            getServerConfiguration().getSecretControllerId(), credentialsProvider, smSessionContext
+        );
+    }
+
     @NotNull
     @Override
     public RMController createResourceController(

server/bundles/io.cloudbeaver.service.ai/schema/service.ai.graphqls

@@ -120,6 +120,10 @@ type AIConfigurationProfileInfo @since(version: "26.1.3") {
     name: String!
     "ID of the AI engine that this profile belongs to."
     engineId: ID!
+    "Whether this profile uses global administrator-managed credentials."
+    global: Boolean! @since(version: "26.2.0")
+    "Whether the current user has saved credentials for this profile."
+    credentialsSaved: Boolean! @since(version: "26.2.0")
 }
 
 type AIAdminConfigurationProfileInfo @since(version: "26.1.3") {
@@ -129,6 +133,8 @@ type AIAdminConfigurationProfileInfo @since(version: "26.1.3") {
     name: String!
     "ID of the AI engine that this profile belongs to."
     engineId: ID!
+    "Whether this profile uses global administrator-managed credentials."
+    global: Boolean! @since(version: "26.2.0")
     "Configuration of the AI engine profile."
     configuration: [ObjectPropertyInfo!]!
 }
@@ -226,13 +232,18 @@ input AIConfigurationProfileInput @since(version: "26.1.3") {
     configuration: AIEngineConfig
 }
 
+input AIProfileCredentialsInput @since(version: "26.2.0") {
+    "Credential property values keyed by AI engine property ID."
+    properties: Object!
+}
+
 extend type Query @since(version: "23.2.2") {
     "Returns the list of available AI engines."
     aiListEngines: [AIEngineInfo!]
     "Returns the global AI settings."
     aiSettings: AISettingsInfo!
     "Returns the properties of the specified AI engine for displaying it in the UI. In case settings are passed, fills it with defaults and returns back."
-    aiListEngineProperties(engineId: ID!, profileId: ID, settings : AIEngineConfig): [ObjectPropertyInfo!]!
+    aiListEngineProperties(engineId: ID!, profileId: ID, settings: AIEngineConfig): [ObjectPropertyInfo!]!
     "Returns models available for the specified AI engine configuration."
     aiListEngineModels(engineId: ID!, profileId: ID, settings: AIEngineConfig): [AIModelInfo!]! @since(version: "26.2.0")
 
@@ -267,6 +278,8 @@ extend type Mutation @since(version: "23.2.2") {
     aiUpdateProfile(config: AIConfigurationProfileInput!): AIAdminConfigurationProfileInfo! @since(version: "26.1.3")
     "Deletes the specified AI engine configuration profile."
     aiDeleteProfile(profileId: ID!): Boolean! @since(version: "26.1.3")
+    "Saves or updates the current user's credentials for a non-global profile. Empty values clear credentials."
+    aiSaveProfileCredentials(profileId: ID!, credentials: AIProfileCredentialsInput!): Boolean! @since(version: "26.2.0")
 
     """
     Creates a new AI chat conversation.