CredentialsProvider API should be asynchronous

tsegismont · tsegismont · commit 4e62892c8821 · 2025-09-15T11:21:18.000+02:00
Closes #32021 The synchronous method is deprecated and is invoked by the asynchronous variant. Extensions must be updated to invoke the asynchronous variant.
diff --git a/extensions/agroal/runtime/src/main/java/io/quarkus/agroal/runtime/AgroalVaultCredentialsProviderPassword.java b/extensions/agroal/runtime/src/main/java/io/quarkus/agroal/runtime/AgroalVaultCredentialsProviderPassword.java
@@ -18,7 +18,7 @@ public AgroalVaultCredentialsProviderPassword(String credentialsProviderName, Cr
     @Override
     public Properties asProperties() {
         Properties properties = new Properties();
-        Map<String, String> credentials = credentialsProvider.getCredentials(getWord());
+        Map<String, String> credentials = credentialsProvider.getCredentialsAsync(getWord()).await().indefinitely();
         credentials.forEach((key, value) -> properties.setProperty(key, value));
         return properties;
     }
diff --git a/extensions/credentials/runtime/src/main/java/io/quarkus/credentials/CredentialsProvider.java b/extensions/credentials/runtime/src/main/java/io/quarkus/credentials/CredentialsProvider.java
@@ -2,8 +2,15 @@
 
 import java.util.Map;
 
+import io.smallrye.mutiny.Uni;
+import io.smallrye.mutiny.infrastructure.Infrastructure;
+
 /**
  * Provides an indirection between credentials consumers such as Agroal and implementers such as Vault.
+ * <p>
+ * While not mandatory, it is recommended to implement the asynchronous {@link #getCredentialsAsync(String)} rather than
+ * {@link #getCredentials(String)}.
+ * Indeed, the synchronous variant may be removed in a future version.
  */
 public interface CredentialsProvider {
 
@@ -12,11 +19,25 @@ public interface CredentialsProvider {
     String EXPIRATION_TIMESTAMP_PROPERTY_NAME = "expires-at";
 
     /**
-     * Returns the credentials for a given credentials provider
+     * Returns the credentials for a given credentials provider.
      *
      * @param credentialsProviderName the name of the credentials provider, which can be used to retrieve custom configuration
      * @return the credentials
+     * @deprecated invoke {@link #getCredentialsAsync(String)} instead
      */
-    Map<String, String> getCredentials(String credentialsProviderName);
+    @Deprecated
+    default Map<String, String> getCredentials(String credentialsProviderName) {
+        throw new UnsupportedOperationException("Either `getCredentials` or `getCredentialsAsync` must be implemented`");
+    }
 
+    /**
+     * Returns the credentials for a given credentials provider.
+     *
+     * @param credentialsProviderName the name of the credentials provider, which can be used to retrieve custom configuration
+     * @return a {@link Uni} completed with the credentials, or failed
+     */
+    default Uni<Map<String, String>> getCredentialsAsync(String credentialsProviderName) {
+        return Uni.createFrom().item(() -> getCredentials(credentialsProviderName))
+                .runSubscriptionOn(Infrastructure.getDefaultExecutor());
+    }
 }
diff --git a/extensions/mongodb-client/runtime/src/main/java/io/quarkus/mongodb/runtime/MongoClients.java b/extensions/mongodb-client/runtime/src/main/java/io/quarkus/mongodb/runtime/MongoClients.java
@@ -527,7 +527,7 @@ private UsernamePassword determineUserNamePassword(CredentialConfig config) {
             String beanName = config.credentialsProviderName().orElse(null);
             CredentialsProvider credentialsProvider = CredentialsProviderFinder.find(beanName);
             String name = config.credentialsProvider().get();
-            Map<String, String> credentials = credentialsProvider.getCredentials(name);
+            Map<String, String> credentials = credentialsProvider.getCredentialsAsync(name).await().indefinitely();
             String user = credentials.get(USER_PROPERTY_NAME);
             String password = credentials.get(PASSWORD_PROPERTY_NAME);
             return new UsernamePassword(user, password.toCharArray());
diff --git a/extensions/oidc-common/runtime/src/main/java/io/quarkus/oidc/common/runtime/OidcCommonUtils.java b/extensions/oidc-common/runtime/src/main/java/io/quarkus/oidc/common/runtime/OidcCommonUtils.java
@@ -393,6 +393,7 @@ public String get() {
                     String providerName = provider.name().orElse(null);
                     String keyringName = provider.keyringName().orElse(null);
                     CredentialsProvider credentialsProvider = CredentialsProviderFinder.find(providerName);
+                    // getCredentials invocation may block the event loop
                     return credentialsProvider.getCredentials(keyringName).get(provider.key().get());
                 }
                 return null;
diff --git a/extensions/reactive-datasource/runtime/src/main/java/io/quarkus/reactive/datasource/runtime/ConnectOptionsSupplier.java b/extensions/reactive-datasource/runtime/src/main/java/io/quarkus/reactive/datasource/runtime/ConnectOptionsSupplier.java
@@ -4,63 +4,45 @@
 import static io.quarkus.credentials.CredentialsProvider.USER_PROPERTY_NAME;
 
 import java.util.List;
-import java.util.Map;
-import java.util.concurrent.Callable;
 import java.util.concurrent.atomic.AtomicInteger;
-import java.util.function.IntUnaryOperator;
 import java.util.function.Supplier;
 import java.util.function.UnaryOperator;
 
 import io.quarkus.credentials.CredentialsProvider;
+import io.smallrye.mutiny.Uni;
+import io.smallrye.mutiny.vertx.UniHelper;
 import io.vertx.core.Future;
-import io.vertx.core.Vertx;
 import io.vertx.sqlclient.SqlConnectOptions;
 
 public class ConnectOptionsSupplier<CO extends SqlConnectOptions> implements Supplier<Future<CO>> {
 
-    private final Vertx vertx;
     private final CredentialsProvider credentialsProvider;
     private final String credentialsProviderName;
     private final List<CO> connectOptionsList;
     private final UnaryOperator<CO> connectOptionsCopy;
-    private final Callable<CO> blockingCodeHandler;
+    private final AtomicInteger idx = new AtomicInteger();
 
-    public ConnectOptionsSupplier(Vertx vertx, CredentialsProvider credentialsProvider, String credentialsProviderName,
+    public ConnectOptionsSupplier(CredentialsProvider credentialsProvider, String credentialsProviderName,
             List<CO> connectOptionsList, UnaryOperator<CO> connectOptionsCopy) {
-        this.vertx = vertx;
         this.credentialsProvider = credentialsProvider;
         this.credentialsProviderName = credentialsProviderName;
         this.connectOptionsList = connectOptionsList;
         this.connectOptionsCopy = connectOptionsCopy;
-        this.blockingCodeHandler = new BlockingCodeHandler();
     }
 
     @Override
     public Future<CO> get() {
-        return vertx.executeBlocking(blockingCodeHandler, false);
-    }
-
-    private class BlockingCodeHandler implements Callable<CO>, IntUnaryOperator {
-
-        final AtomicInteger idx = new AtomicInteger();
-
-        @Override
-        public CO call() {
-            Map<String, String> credentials = credentialsProvider.getCredentials(credentialsProviderName);
-            String user = credentials.get(USER_PROPERTY_NAME);
-            String password = credentials.get(PASSWORD_PROPERTY_NAME);
-
-            int nextIdx = idx.getAndUpdate(this);
-
-            CO connectOptions = connectOptionsCopy.apply(connectOptionsList.get(nextIdx));
-            connectOptions.setUser(user).setPassword(password);
-
-            return connectOptions;
-        }
-
-        @Override
-        public int applyAsInt(int previousIdx) {
-            return previousIdx == connectOptionsList.size() - 1 ? 0 : previousIdx + 1;
-        }
+        int nextIdx = idx.getAndUpdate(previousIdx -> previousIdx == connectOptionsList.size() - 1 ? 0 : previousIdx + 1);
+        CO connectOptions = connectOptionsCopy.apply(connectOptionsList.get(nextIdx));
+        return Uni.combine()
+                .all()
+                .unis(credentialsProvider.getCredentialsAsync(credentialsProviderName), Uni.createFrom().item(connectOptions))
+                .with((credentials, co) -> {
+                    co.setUser(credentials.get(USER_PROPERTY_NAME));
+                    co.setPassword(credentials.get(PASSWORD_PROPERTY_NAME));
+                    return co;
+                })
+                .convert()
+                .with(UniHelper::toFuture);
     }
 }
diff --git a/extensions/reactive-db2-client/runtime/src/main/java/io/quarkus/reactive/db2/client/runtime/DB2PoolRecorder.java b/extensions/reactive-db2-client/runtime/src/main/java/io/quarkus/reactive/db2/client/runtime/DB2PoolRecorder.java
@@ -124,19 +124,19 @@ private DB2Pool initialize(VertxInternal vertx,
         PoolOptions poolOptions = toPoolOptions(eventLoopCount, dataSourceReactiveRuntimeConfig);
         DB2ConnectOptions db2ConnectOptions = toConnectOptions(dataSourceName, dataSourceRuntimeConfig,
                 dataSourceReactiveRuntimeConfig, dataSourceReactiveDB2Config);
-        Supplier<Future<DB2ConnectOptions>> databasesSupplier = toDatabasesSupplier(vertx, List.of(db2ConnectOptions),
+        Supplier<Future<DB2ConnectOptions>> databasesSupplier = toDatabasesSupplier(List.of(db2ConnectOptions),
                 dataSourceRuntimeConfig);
         return createPool(vertx, poolOptions, db2ConnectOptions, dataSourceName, databasesSupplier, context);
     }
 
-    private Supplier<Future<DB2ConnectOptions>> toDatabasesSupplier(Vertx vertx, List<DB2ConnectOptions> db2ConnectOptionsList,
+    private Supplier<Future<DB2ConnectOptions>> toDatabasesSupplier(List<DB2ConnectOptions> db2ConnectOptionsList,
             DataSourceRuntimeConfig dataSourceRuntimeConfig) {
         Supplier<Future<DB2ConnectOptions>> supplier;
         if (dataSourceRuntimeConfig.credentialsProvider().isPresent()) {
             String beanName = dataSourceRuntimeConfig.credentialsProviderName().orElse(null);
             CredentialsProvider credentialsProvider = CredentialsProviderFinder.find(beanName);
             String name = dataSourceRuntimeConfig.credentialsProvider().get();
-            supplier = new ConnectOptionsSupplier<>(vertx, credentialsProvider, name, db2ConnectOptionsList,
+            supplier = new ConnectOptionsSupplier<>(credentialsProvider, name, db2ConnectOptionsList,
                     DB2ConnectOptions::new);
         } else {
             supplier = Utils.roundRobinSupplier(db2ConnectOptionsList);
@@ -210,7 +210,7 @@ private DB2ConnectOptions toConnectOptions(String dataSourceName, DataSourceRunt
             String beanName = dataSourceRuntimeConfig.credentialsProviderName().orElse(null);
             CredentialsProvider credentialsProvider = CredentialsProviderFinder.find(beanName);
             String name = dataSourceRuntimeConfig.credentialsProvider().get();
-            Map<String, String> credentials = credentialsProvider.getCredentials(name);
+            Map<String, String> credentials = credentialsProvider.getCredentialsAsync(name).await().indefinitely();
             String user = credentials.get(USER_PROPERTY_NAME);
             String password = credentials.get(PASSWORD_PROPERTY_NAME);
             if (user != null) {
diff --git a/extensions/reactive-mssql-client/runtime/src/main/java/io/quarkus/reactive/mssql/client/runtime/MSSQLPoolRecorder.java b/extensions/reactive-mssql-client/runtime/src/main/java/io/quarkus/reactive/mssql/client/runtime/MSSQLPoolRecorder.java
@@ -124,20 +124,19 @@ private MSSQLPool initialize(VertxInternal vertx,
         PoolOptions poolOptions = toPoolOptions(eventLoopCount, dataSourceReactiveRuntimeConfig);
         MSSQLConnectOptions mssqlConnectOptions = toMSSQLConnectOptions(dataSourceName, dataSourceRuntimeConfig,
                 dataSourceReactiveRuntimeConfig, dataSourceReactiveMSSQLConfig);
-        Supplier<Future<MSSQLConnectOptions>> databasesSupplier = toDatabasesSupplier(vertx, List.of(mssqlConnectOptions),
+        Supplier<Future<MSSQLConnectOptions>> databasesSupplier = toDatabasesSupplier(List.of(mssqlConnectOptions),
                 dataSourceRuntimeConfig);
         return createPool(vertx, poolOptions, mssqlConnectOptions, dataSourceName, databasesSupplier, context);
     }
 
-    private Supplier<Future<MSSQLConnectOptions>> toDatabasesSupplier(Vertx vertx,
-            List<MSSQLConnectOptions> mssqlConnectOptionsList,
+    private Supplier<Future<MSSQLConnectOptions>> toDatabasesSupplier(List<MSSQLConnectOptions> mssqlConnectOptionsList,
             DataSourceRuntimeConfig dataSourceRuntimeConfig) {
         Supplier<Future<MSSQLConnectOptions>> supplier;
         if (dataSourceRuntimeConfig.credentialsProvider().isPresent()) {
             String beanName = dataSourceRuntimeConfig.credentialsProviderName().orElse(null);
             CredentialsProvider credentialsProvider = CredentialsProviderFinder.find(beanName);
             String name = dataSourceRuntimeConfig.credentialsProvider().get();
-            supplier = new ConnectOptionsSupplier<>(vertx, credentialsProvider, name, mssqlConnectOptionsList,
+            supplier = new ConnectOptionsSupplier<>(credentialsProvider, name, mssqlConnectOptionsList,
                     MSSQLConnectOptions::new);
         } else {
             supplier = Utils.roundRobinSupplier(mssqlConnectOptionsList);
@@ -214,7 +213,7 @@ private MSSQLConnectOptions toMSSQLConnectOptions(String dataSourceName, DataSou
             String beanName = dataSourceRuntimeConfig.credentialsProviderName().orElse(null);
             CredentialsProvider credentialsProvider = CredentialsProviderFinder.find(beanName);
             String name = dataSourceRuntimeConfig.credentialsProvider().get();
-            Map<String, String> credentials = credentialsProvider.getCredentials(name);
+            Map<String, String> credentials = credentialsProvider.getCredentialsAsync(name).await().indefinitely();
             String user = credentials.get(USER_PROPERTY_NAME);
             String password = credentials.get(PASSWORD_PROPERTY_NAME);
             if (user != null) {
diff --git a/extensions/reactive-mysql-client/runtime/src/main/java/io/quarkus/reactive/mysql/client/runtime/MySQLPoolRecorder.java b/extensions/reactive-mysql-client/runtime/src/main/java/io/quarkus/reactive/mysql/client/runtime/MySQLPoolRecorder.java
@@ -125,20 +125,19 @@ private MySQLPool initialize(VertxInternal vertx,
                 dataSourceReactiveMySQLConfig);
         List<MySQLConnectOptions> mySQLConnectOptions = toMySQLConnectOptions(dataSourceName, dataSourceRuntimeConfig,
                 dataSourceReactiveRuntimeConfig, dataSourceReactiveMySQLConfig);
-        Supplier<Future<MySQLConnectOptions>> databasesSupplier = toDatabasesSupplier(vertx, mySQLConnectOptions,
+        Supplier<Future<MySQLConnectOptions>> databasesSupplier = toDatabasesSupplier(mySQLConnectOptions,
                 dataSourceRuntimeConfig);
         return createPool(vertx, poolOptions, mySQLConnectOptions, dataSourceName, databasesSupplier, context);
     }
 
-    private Supplier<Future<MySQLConnectOptions>> toDatabasesSupplier(Vertx vertx,
-            List<MySQLConnectOptions> mySQLConnectOptions,
+    private Supplier<Future<MySQLConnectOptions>> toDatabasesSupplier(List<MySQLConnectOptions> mySQLConnectOptions,
             DataSourceRuntimeConfig dataSourceRuntimeConfig) {
         Supplier<Future<MySQLConnectOptions>> supplier;
         if (dataSourceRuntimeConfig.credentialsProvider().isPresent()) {
             String beanName = dataSourceRuntimeConfig.credentialsProviderName().orElse(null);
             CredentialsProvider credentialsProvider = CredentialsProviderFinder.find(beanName);
             String name = dataSourceRuntimeConfig.credentialsProvider().get();
-            supplier = new ConnectOptionsSupplier<>(vertx, credentialsProvider, name, mySQLConnectOptions,
+            supplier = new ConnectOptionsSupplier<>(credentialsProvider, name, mySQLConnectOptions,
                     MySQLConnectOptions::new);
         } else {
             supplier = Utils.roundRobinSupplier(mySQLConnectOptions);
@@ -213,7 +212,7 @@ private List<MySQLConnectOptions> toMySQLConnectOptions(String dataSourceName,
                 String beanName = dataSourceRuntimeConfig.credentialsProviderName().orElse(null);
                 CredentialsProvider credentialsProvider = CredentialsProviderFinder.find(beanName);
                 String name = dataSourceRuntimeConfig.credentialsProvider().get();
-                Map<String, String> credentials = credentialsProvider.getCredentials(name);
+                Map<String, String> credentials = credentialsProvider.getCredentialsAsync(name).await().indefinitely();
                 String user = credentials.get(USER_PROPERTY_NAME);
                 String password = credentials.get(PASSWORD_PROPERTY_NAME);
                 if (user != null) {
diff --git a/extensions/reactive-oracle-client/runtime/src/main/java/io/quarkus/reactive/oracle/client/runtime/OraclePoolRecorder.java b/extensions/reactive-oracle-client/runtime/src/main/java/io/quarkus/reactive/oracle/client/runtime/OraclePoolRecorder.java
@@ -119,20 +119,19 @@ private OraclePool initialize(VertxInternal vertx,
         PoolOptions poolOptions = toPoolOptions(eventLoopCount, dataSourceReactiveRuntimeConfig);
         OracleConnectOptions oracleConnectOptions = toOracleConnectOptions(dataSourceName, dataSourceRuntimeConfig,
                 dataSourceReactiveRuntimeConfig, dataSourceReactiveOracleConfig);
-        Supplier<Future<OracleConnectOptions>> databasesSupplier = toDatabasesSupplier(vertx, List.of(oracleConnectOptions),
+        Supplier<Future<OracleConnectOptions>> databasesSupplier = toDatabasesSupplier(List.of(oracleConnectOptions),
                 dataSourceRuntimeConfig);
         return createPool(vertx, poolOptions, oracleConnectOptions, dataSourceName, databasesSupplier, context);
     }
 
-    private Supplier<Future<OracleConnectOptions>> toDatabasesSupplier(Vertx vertx,
-            List<OracleConnectOptions> oracleConnectOptions,
+    private Supplier<Future<OracleConnectOptions>> toDatabasesSupplier(List<OracleConnectOptions> oracleConnectOptions,
             DataSourceRuntimeConfig dataSourceRuntimeConfig) {
         Supplier<Future<OracleConnectOptions>> supplier;
         if (dataSourceRuntimeConfig.credentialsProvider().isPresent()) {
             String beanName = dataSourceRuntimeConfig.credentialsProviderName().orElse(null);
             CredentialsProvider credentialsProvider = CredentialsProviderFinder.find(beanName);
             String name = dataSourceRuntimeConfig.credentialsProvider().get();
-            supplier = new ConnectOptionsSupplier<>(vertx, credentialsProvider, name, oracleConnectOptions,
+            supplier = new ConnectOptionsSupplier<>(credentialsProvider, name, oracleConnectOptions,
                     OracleConnectOptions::new);
         } else {
             supplier = Utils.roundRobinSupplier(oracleConnectOptions);
@@ -205,7 +204,7 @@ private OracleConnectOptions toOracleConnectOptions(String dataSourceName, DataS
             String beanName = dataSourceRuntimeConfig.credentialsProviderName().orElse(null);
             CredentialsProvider credentialsProvider = CredentialsProviderFinder.find(beanName);
             String name = dataSourceRuntimeConfig.credentialsProvider().get();
-            Map<String, String> credentials = credentialsProvider.getCredentials(name);
+            Map<String, String> credentials = credentialsProvider.getCredentialsAsync(name).await().indefinitely();
             String user = credentials.get(USER_PROPERTY_NAME);
             String password = credentials.get(PASSWORD_PROPERTY_NAME);
             if (user != null) {
diff --git a/extensions/reactive-pg-client/runtime/src/main/java/io/quarkus/reactive/pg/client/runtime/PgPoolRecorder.java b/extensions/reactive-pg-client/runtime/src/main/java/io/quarkus/reactive/pg/client/runtime/PgPoolRecorder.java
@@ -123,19 +123,19 @@ private PgPool initialize(VertxInternal vertx,
         PoolOptions poolOptions = toPoolOptions(eventLoopCount, dataSourceReactiveRuntimeConfig);
         List<PgConnectOptions> pgConnectOptionsList = toPgConnectOptions(dataSourceName, dataSourceRuntimeConfig,
                 dataSourceReactiveRuntimeConfig, dataSourceReactivePostgreSQLConfig);
-        Supplier<Future<PgConnectOptions>> databasesSupplier = toDatabasesSupplier(vertx, pgConnectOptionsList,
+        Supplier<Future<PgConnectOptions>> databasesSupplier = toDatabasesSupplier(pgConnectOptionsList,
                 dataSourceRuntimeConfig);
         return createPool(vertx, poolOptions, pgConnectOptionsList, dataSourceName, databasesSupplier, context);
     }
 
-    private Supplier<Future<PgConnectOptions>> toDatabasesSupplier(Vertx vertx, List<PgConnectOptions> pgConnectOptionsList,
+    private Supplier<Future<PgConnectOptions>> toDatabasesSupplier(List<PgConnectOptions> pgConnectOptionsList,
             DataSourceRuntimeConfig dataSourceRuntimeConfig) {
         Supplier<Future<PgConnectOptions>> supplier;
         if (dataSourceRuntimeConfig.credentialsProvider().isPresent()) {
             String beanName = dataSourceRuntimeConfig.credentialsProviderName().orElse(null);
             CredentialsProvider credentialsProvider = CredentialsProviderFinder.find(beanName);
             String name = dataSourceRuntimeConfig.credentialsProvider().get();
-            supplier = new ConnectOptionsSupplier<>(vertx, credentialsProvider, name, pgConnectOptionsList,
+            supplier = new ConnectOptionsSupplier<>(credentialsProvider, name, pgConnectOptionsList,
                     PgConnectOptions::new);
         } else {
             supplier = Utils.roundRobinSupplier(pgConnectOptionsList);
@@ -204,7 +204,7 @@ private List<PgConnectOptions> toPgConnectOptions(String dataSourceName, DataSou
                 String beanName = dataSourceRuntimeConfig.credentialsProviderName().orElse(null);
                 CredentialsProvider credentialsProvider = CredentialsProviderFinder.find(beanName);
                 String name = dataSourceRuntimeConfig.credentialsProvider().get();
-                Map<String, String> credentials = credentialsProvider.getCredentials(name);
+                Map<String, String> credentials = credentialsProvider.getCredentialsAsync(name).await().indefinitely();
                 String user = credentials.get(USER_PROPERTY_NAME);
                 String password = credentials.get(PASSWORD_PROPERTY_NAME);
                 if (user != null) {
diff --git a/extensions/smallrye-reactive-messaging-rabbitmq/runtime/src/main/java/io/quarkus/smallrye/reactivemessaging/rabbitmq/runtime/CredentialsProviderLink.java b/extensions/smallrye-reactive-messaging-rabbitmq/runtime/src/main/java/io/quarkus/smallrye/reactivemessaging/rabbitmq/runtime/CredentialsProviderLink.java
diff --git a/extensions/tls-registry/runtime/src/main/java/io/quarkus/tls/runtime/keystores/CredentialProviders.java b/extensions/tls-registry/runtime/src/main/java/io/quarkus/tls/runtime/keystores/CredentialProviders.java
diff --git a/extensions/vertx-http/runtime/src/main/java/io/quarkus/vertx/http/runtime/options/HttpServerOptionsUtils.java b/extensions/vertx-http/runtime/src/main/java/io/quarkus/vertx/http/runtime/options/HttpServerOptionsUtils.java

Original file line number	Diff line number	Diff line change
`@@ -18,7 +18,7 @@ public AgroalVaultCredentialsProviderPassword(String credentialsProviderName, Cr`
`18`	`18`	`@Override`
`19`	`19`	`public Properties asProperties() {`
`20`	`20`	`Properties properties = new Properties();`
`21`		`- Map<String, String> credentials = credentialsProvider.getCredentials(getWord());`
	`21`	`+ Map<String, String> credentials = credentialsProvider.getCredentialsAsync(getWord()).await().indefinitely();`
`22`	`22`	`credentials.forEach((key, value) -> properties.setProperty(key, value));`
`23`	`23`	`return properties;`
`24`	`24`	`}`
Original file line number	Diff line number	Diff line change
`@@ -393,6 +393,7 @@ public String get() {`
`393`	`393`	`String providerName = provider.name().orElse(null);`
`394`	`394`	`String keyringName = provider.keyringName().orElse(null);`
`395`	`395`	`CredentialsProvider credentialsProvider = CredentialsProviderFinder.find(providerName);`
	`396`	`+ // getCredentials invocation may block the event loop`
`396`	`397`	`return credentialsProvider.getCredentials(keyringName).get(provider.key().get());`
`397`	`398`	`}`
`398`	`399`	`return null;`