http: migrate grpc_stats/jwt_authn/... to exception free

[wbpcode]

Commit Message: http: migrate grpc_stats/jwt_authn/... to exception free
Additional Description:
Migrate exceptions of these filters to absl::Status and absl::StatusOr.

NOTE: This is AI assisted. But I reviewed all the changes and tests, and also did some manually update.

Risk Level: low.
Testing: unit/integration.
Docs Changes: n/a.
Release Notes: n/a.
Platform Specific Features: n/a.

[Copilot]

Pull request overview

This pull request migrates several HTTP filters (notably jwt_authn, plus grpc_web, grpc_stats, health_check, and kill_request) toward Envoy’s exception-free configuration model by switching factories and internal construction paths from throwing EnvoyException to returning absl::Status/absl::StatusOr.

Changes:

• Convert multiple filter config factories to Common::ExceptionFreeFactoryBase and return absl::StatusOr<Http::FilterFactoryCb>.
• Update jwt_authn core components (FilterConfigImpl, Verifier, Matcher, JwksCache) to propagate configuration/creation failures via absl::Status/StatusOr instead of exceptions.
• Update affected unit tests/fuzz test to use status-based assertions rather than EXPECT_THROW.

Reviewed changes

Copilot reviewed 30 out of 30 changed files in this pull request and generated 12 comments.

Show a summary per file

File	Description
test/extensions/filters/http/jwt_authn/provider_verifier_test.cc	Updates verifier/config construction to status-based APIs and adjusts expectations for invalid config.
test/extensions/filters/http/jwt_authn/matcher_test.cc	Updates matcher creation to StatusOr API.
test/extensions/filters/http/jwt_authn/jwt_authn_fuzz_test.cc	Replaces exception handling with status-based filter config construction in fuzz harness.
test/extensions/filters/http/jwt_authn/jwks_cache_test.cc	Updates JWKS cache creation to StatusOr API.
test/extensions/filters/http/jwt_authn/group_verifier_test.cc	Updates verifier creation to StatusOr API.
test/extensions/filters/http/jwt_authn/filter_factory_test.cc	Updates factory failure expectations to match returned status instead of exceptions.
test/extensions/filters/http/jwt_authn/filter_config_test.cc	Updates config construction and error assertions to use absl::Status.
test/extensions/filters/http/jwt_authn/BUILD	Adds dependency on status_utility test helpers.
test/extensions/filters/http/jwt_authn/authenticator_test.cc	Updates filter config construction to status-based API.
test/extensions/filters/http/jwt_authn/all_verifier_test.cc	Updates verifier/config creation to status-based APIs.
test/extensions/filters/http/health_check/config_test.cc	Updates factory error expectations to status-based assertions.
test/extensions/filters/http/health_check/BUILD	Adds dependency on status_utility test helpers.
source/extensions/filters/http/kill_request/kill_request_config.h	Switches filter factory to exception-free base and StatusOr factory callback.
source/extensions/filters/http/kill_request/kill_request_config.cc	Implements StatusOr<Http::FilterFactoryCb> factory callback return.
source/extensions/filters/http/jwt_authn/verifier.h	Changes verifier factory method to return absl::StatusOr<VerifierConstPtr>.
source/extensions/filters/http/jwt_authn/verifier.cc	Propagates verifier creation failures via status instead of throwing.
source/extensions/filters/http/jwt_authn/matcher.h	Changes matcher factory method to return absl::StatusOr<MatcherConstPtr>.
source/extensions/filters/http/jwt_authn/matcher.cc	Propagates path-match-policy creation failures via status instead of throwing.
source/extensions/filters/http/jwt_authn/jwks_cache.h	Changes JWKS cache factory to return absl::StatusOr<JwksCachePtr>.
source/extensions/filters/http/jwt_authn/jwks_cache.cc	Propagates JWKS cache construction/validation failures via status.
source/extensions/filters/http/jwt_authn/filter_factory.h	Switches jwt_authn factory to exception-free base and StatusOr callback return.
source/extensions/filters/http/jwt_authn/filter_factory.cc	Converts inline-JWKS validation and config creation to status-based flow.
source/extensions/filters/http/jwt_authn/filter_config.h	Updates FilterConfigImpl ctor to accept absl::Status& for construction status.
source/extensions/filters/http/jwt_authn/filter_config.cc	Threads status propagation through verifier/matcher/JWKS cache construction.
source/extensions/filters/http/health_check/config.h	Switches health_check factory to exception-free base and StatusOr callback return.
source/extensions/filters/http/health_check/config.cc	Returns InvalidArgument status instead of throwing for invalid config.
source/extensions/filters/http/grpc_web/config.h	Switches grpc_web factory to exception-free base and StatusOr callback return.
source/extensions/filters/http/grpc_web/config.cc	Updates factory callback return type to StatusOr.
source/extensions/filters/http/grpc_stats/grpc_stats_filter.h	Switches grpc_stats factory to exception-free base and StatusOr callback return.
source/extensions/filters/http/grpc_stats/grpc_stats_filter.cc	Updates factory callback return type to StatusOr.

[wbpcode]

/coverage

[repokitteh-read-only]

Coverage for this Pull Request will be rendered here:

https://storage.googleapis.com/envoy-cncf-pr/46037/coverage/index.html

For comparison, current coverage on main branch is here:

https://storage.googleapis.com/envoy-cncf-postsubmit/main/coverage/index.html

The coverage results are (re-)rendered each time the CI Envoy/Checks (coverage) job completes.

🐱

Caused by: a #46037 (comment) was created by @wbpcode.

see: more, trace.

[Copilot]

Pull request overview

Copilot reviewed 31 out of 31 changed files in this pull request and generated 1 comment.

[wbpcode]

/retest