Dedicated Dev UI interface to execute HQL (Hibernate ORM) queries

extensions/agroal/runtime-dev/src/main/java/io/quarkus/agroal/runtime/dev/ui/DatabaseInspector.java

@@ -223,7 +223,10 @@ public DataSet executeSQL(String datasource, String sql, Integer pageNumber, Int
                         }
                     }
                 } else {
-                    return new DataSet(null, null, "Only supported for Local Databases", null, -1);
+                    return new DataSet(null, null,
+                            "Datasource access not allowed. By default only local databases are enabled; you can use the"
+                                    + " 'quarkus.datasource.dev-ui.allowed-db-host' configuration property to configure allowed hosts ('*' to allow all).",
+                            null, -1);
                 }
             } catch (SQLException ex) {
                 return new DataSet(null, null, ex.getMessage(), null, -1);
@@ -325,14 +328,20 @@ private List<String> getPrimaryKeys(DatabaseMetaData metaData, String tableSchem
     }
 
     private boolean isAllowedDatabase(AgroalDataSource ads) {
+        final String allowedHost = this.allowedHost == null ? null : this.allowedHost.trim();
+        if (allowedHost != null && allowedHost.equals("*")) {
+            // special value indicating to allow any host
+            return true;
+        }
+
         AgroalDataSourceConfiguration configuration = ads.getConfiguration();
         String jdbcUrl = configuration.connectionPoolConfiguration().connectionFactoryConfiguration().jdbcUrl();
 
         try {
             if (jdbcUrl.startsWith("jdbc:h2:mem:") || jdbcUrl.startsWith("jdbc:h2:file:")
                     || jdbcUrl.startsWith("jdbc:h2:tcp://localhost")
-                    || (this.allowedHost != null && !this.allowedHost.isBlank()
-                            && jdbcUrl.startsWith("jdbc:h2:tcp://" + this.allowedHost))
+                    || (allowedHost != null && !allowedHost.isBlank()
+                            && jdbcUrl.startsWith("jdbc:h2:tcp://" + allowedHost))
                     || jdbcUrl.startsWith("jdbc:derby:memory:")) {
                 return true;
             }
@@ -343,7 +352,7 @@ private boolean isAllowedDatabase(AgroalDataSource ads) {
             String host = uri.getHost();
 
             return host != null && ((host.equals("localhost") || host.equals("127.0.0.1") || host.equals("::1")) ||
-                    (this.allowedHost != null && !this.allowedHost.isBlank() && host.equalsIgnoreCase(this.allowedHost)));
+                    (allowedHost != null && !allowedHost.isBlank() && host.equalsIgnoreCase(allowedHost)));
 
         } catch (URISyntaxException e) {
             Log.warn(e.getMessage());

extensions/agroal/runtime/src/main/java/io/quarkus/agroal/runtime/DataSourcesJdbcBuildTimeConfig.java

@@ -65,7 +65,8 @@ public interface DevUIBuildTimeConfig {
         public Optional<String> appendToDefaultSelect();
 
         /**
-         * Allowed database host. By default only localhost is allowed. Any provided host here will also be allowed
+         * Allowed database host. By default, only localhost is allowed. Any provided host here will also be allowed.
+         * You can use the special value {@code *} to allow any DB host.
          */
         public Optional<String> allowedDBHost();
     }

extensions/hibernate-orm/deployment/src/main/java/io/quarkus/hibernate/orm/deployment/HibernateOrmConfig.java

@@ -90,6 +90,13 @@ default Map<String, HibernateOrmConfigPersistenceUnit> namedPersistenceUnits() {
      */
     HibernateOrmConfigMetric metrics();
 
+    /**
+     * Dev UI.
+     */
+    @WithDefaults
+    @WithName("dev-ui")
+    HibernateOrmConfigDevUI devui();
+
     default boolean isAnyNonPersistenceXmlPropertySet() {
         // Do NOT include persistenceXml in here.
         return defaultPersistenceUnit().isAnyPropertySet() ||
@@ -182,4 +189,12 @@ default boolean isAnyPropertySet() {
         }
     }
 
+    @ConfigGroup
+    interface HibernateOrmConfigDevUI {
+        /**
+         * Allow hql queries in the Dev UI page
+         */
+        @WithDefault("false")
+        boolean allowHql();
+    }
 }

extensions/hibernate-orm/deployment/src/main/java/io/quarkus/hibernate/orm/deployment/dev/HibernateOrmDevUIProcessor.java

@@ -12,6 +12,7 @@
 import io.quarkus.devui.spi.JsonRPCProvidersBuildItem;
 import io.quarkus.devui.spi.page.CardPageBuildItem;
 import io.quarkus.devui.spi.page.Page;
+import io.quarkus.hibernate.orm.deployment.HibernateOrmConfig;
 import io.quarkus.hibernate.orm.deployment.HibernateOrmEnabled;
 import io.quarkus.hibernate.orm.deployment.PersistenceUnitDescriptorBuildItem;
 import io.quarkus.hibernate.orm.runtime.PersistenceUnitUtil;
@@ -22,7 +23,7 @@
 public class HibernateOrmDevUIProcessor {
 
     @BuildStep
-    public CardPageBuildItem create() {
+    public CardPageBuildItem create(HibernateOrmConfig config) {
         CardPageBuildItem card = new CardPageBuildItem();
         card.addPage(Page.webComponentPageBuilder()
                 .title("Persistence Units")
@@ -39,7 +40,11 @@ public CardPageBuildItem create() {
                 .componentLink("hibernate-orm-named-queries.js")
                 .icon("font-awesome-solid:circle-question")
                 .dynamicLabelJsonRPCMethodName("getNumberOfNamedQueries"));
-
+        card.addPage(Page.webComponentPageBuilder()
+                .title("HQL Console")
+                .componentLink("hibernate-orm-hql-console.js")
+                .icon("font-awesome-solid:play")
+                .metadata("allowHql", String.valueOf(config.devui().allowHql())));
         return card;
     }
 

extensions/hibernate-orm/deployment/src/main/resources/dev-ui/hibernate-orm-entity-types.js

@@ -87,6 +87,10 @@ export class HibernateOrmEntityTypesComponent extends QwcHotReloadElement {
         }
         return html`
                 <vaadin-grid .items="${pu.managedEntities}" class="datatable" theme="no-border row-stripes">
+                    <vaadin-grid-column auto-width
+                                        header="JPA entity name"
+                                        path="name">
+                    </vaadin-grid-column>
                     <vaadin-grid-column auto-width
                                         header="Class name"
                                         path="className">