fix(gateway): set jwksUrl so the dispatcher builds a validator

Browse Source

cmd/gateway/main.go:144 constructs the adapter validator only when both
cfg.Auth.Enabled and cfg.Auth.JWKSURL are set. The config left jwksUrl unset on
purpose, so jwtValidator stayed nil and every adapter request passed with one
warning line:

  auth required but jwtValidator nil; request unauthenticated

That made auth.required cosmetic: sqs, workflow, memory, s3 and iam all answered
unauthenticated calls. Set the JWKS URL to the ZITADEL key endpoint.

This commit was merged in pull request #68.

...

This commit is contained in:

Admin Bot

2026-10-27 01:17:09 -07:00

parent 29f5c64fab

commit ba8800d565

1 changed files with 1 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

k8s/gateway-config-secret.yaml

+1 -1

File diff suppressed because one or more lines are too long