Fix Scala compilation of linkis-module (#5482)

bb26ad3 (#5456) referenced LinkisModuleErrorCodeSummary.CRYPT_KEY_INSECURE
without adding it to the enum, and 047ebde (#5457) used CommonVars in
SecurityFilter without importing it. Both broke scala-compile-first on
linkis-module, which cascades to every downstream module.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: pjfanning

linkis-commons/linkis-module/src/main/java/org/apache/linkis/errorcode/LinkisModuleErrorCodeSummary.java

@@ -41,7 +41,10 @@ public enum LinkisModuleErrorCodeSummary implements LinkisErrorCode {
       "The receive queue for WebSocket is full, please try again later(WebSocket的接收队列已满，请稍后重试)!"),
   WEBSOCKET_STOPPED(
       11035,
-      "WebSocket consumer has stopped, please contact the administrator to handle(WebSocket的消费器已停止，请联系管理员处理)!");
+      "WebSocket consumer has stopped, please contact the administrator to handle(WebSocket的消费器已停止，请联系管理员处理)!"),
+  CRYPT_KEY_INSECURE(
+      11036,
+      "The wds.linkis.crypt.key is missing or insecure, refusing to start(wds.linkis.crypt.key 缺失或不安全，拒绝启动)");
 
   /** error code(错误码) */
   private final int errorCode;

linkis-commons/linkis-module/src/main/scala/org/apache/linkis/server/security/SecurityFilter.scala

@@ -17,7 +17,7 @@
 
 package org.apache.linkis.server.security
 
-import org.apache.linkis.common.conf.Configuration
+import org.apache.linkis.common.conf.{CommonVars, Configuration}
 import org.apache.linkis.common.utils.{Logging, RSAUtils, Utils}
 import org.apache.linkis.errorcode.LinkisModuleErrorCodeSummary.ILLEGAL_USER_TOKEN
 import org.apache.linkis.server.{Message, _}
@@ -196,14 +196,16 @@ object SecurityFilter {
   // peer). External clients cannot set this cookie to trigger the bypass.
   def isRequestIgnoreTimeout(req: HttpServletRequest): Boolean = {
     val hasCookie = Option(req.getCookies).exists(
-      _.exists(c => c.getName == ALLOW_ACCESS_WITHOUT_TIMEOUT && c.getValue == "true"))
+      _.exists(c => c.getName == ALLOW_ACCESS_WITHOUT_TIMEOUT && c.getValue == "true")
+    )
     if (!hasCookie) return false
     if (!requireInternalIp) return true // escape hatch for legacy deployments
     val ip = getClientIp(req)
     if (!isTrustedInternal(ip)) {
       logger.warn(
         s"Ignore-timeout cookie present but client IP $ip is not in " +
-          "linkis.security.trusted.internal.sources; rejecting as potential auth bypass")
+          "linkis.security.trusted.internal.sources; rejecting as potential auth bypass"
+      )
       return false
     }
     true