homelab-frontend

95 Commits 1 Branch 2 Tags

2 Commits

Author	SHA1	Message	Date
poimenandrock	ddee0f2dc9	feat(config): add tokenUrl, clientId, clientSecret to auth config (#17 ) CI / CI (push) Successful in 3m20s Details Closes homelab#12 (P3.7) ## Changes - `AuthConfig`: added `TokenURL`, `ClientID`, `ClientSecret` fields - `loader.go`: reads `tokenUrl`/`clientId` from YAML, `ClientSecret` from `AUTH_CLIENT_SECRET` env - `deployment.yaml`: `AUTH_CLIENT_SECRET` from `api-gw-client-secret` Secret (optional) - `gateway-config-secret.enc.yaml` + `configmap.yaml`: added `tokenUrl` and `clientId` ## Secret never in YAML `clientSecret` deliberately omitted from YAML struct. Loaded from env only. ## Tests 3 tests: full config load, env-only secret, backward compat (missing fields = zero). Co-authored-by: poimen <[email protected]>	2026-09-08 23:43:29 +00:00
poimenandrock	09318778fa	feat(serviceadapter): enforce JWT auth on X-Service dispatch (#16 ) CI / CI (push) Successful in 3m43s Details SQS dispatcher hardcoded a JWT validator pointing at authentik.riotpiao.com/application/o/sqs/jwks/ — provider doesn't exist. Every SQS request got 403 regardless of token. Co-authored-by: poimen <[email protected]>	2026-09-08 23:20:31 +00:00

Author

SHA1

Message

Date

poimenandrock

ddee0f2dc9

feat(config): add tokenUrl, clientId, clientSecret to auth config (#17 )

CI / CI (push) Successful in 3m20s

Details

Closes homelab#12 (P3.7)

## Changes

- `AuthConfig`: added `TokenURL`, `ClientID`, `ClientSecret` fields
- `loader.go`: reads `tokenUrl`/`clientId` from YAML, `ClientSecret` from `AUTH_CLIENT_SECRET` env
- `deployment.yaml`: `AUTH_CLIENT_SECRET` from `api-gw-client-secret` Secret (optional)
- `gateway-config-secret.enc.yaml` + `configmap.yaml`: added `tokenUrl` and `clientId`

## Secret never in YAML

`clientSecret` deliberately omitted from YAML struct. Loaded from env only.

## Tests

3 tests: full config load, env-only secret, backward compat (missing fields = zero).

Co-authored-by: poimen <[email protected]>

2026-09-08 23:43:29 +00:00

poimenandrock

09318778fa

feat(serviceadapter): enforce JWT auth on X-Service dispatch (#16 )

CI / CI (push) Successful in 3m43s

Details

SQS dispatcher hardcoded a JWT validator pointing at authentik.riotpiao.com/application/o/sqs/jwks/ — provider doesn't exist. Every SQS request got 403 regardless of token.

Co-authored-by: poimen <[email protected]>

2026-09-08 23:20:31 +00:00