riotpiao-poimen/homelab-frontend
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(config): add tokenUrl, clientId, clientSecret to auth config #17

Merged
rock merged 1 commits from feat/p3.7-auth-config into main 2026-09-08 23:43:32 +00:00
Conversation 0 Commits 1 Files Changed 6
+125
poimen commented 2026-09-08 23:25:54 +00:00
Member
Copy Link
Copy Source

Closes homelab#12 (P3.7)

Changes

  • AuthConfig: added TokenURL, ClientID, ClientSecret fields
  • loader.go: reads tokenUrl/clientId from YAML, ClientSecret from AUTH_CLIENT_SECRET env
  • deployment.yaml: AUTH_CLIENT_SECRET from api-gw-client-secret Secret (optional)
  • gateway-config-secret.enc.yaml + configmap.yaml: added tokenUrl and clientId

Secret never in YAML

clientSecret deliberately omitted from YAML struct. Loaded from env only.

Tests

3 tests: full config load, env-only secret, backward compat (missing fields = zero).

Closes homelab#12 (P3.7) ## Changes - `AuthConfig`: added `TokenURL`, `ClientID`, `ClientSecret` fields - `loader.go`: reads `tokenUrl`/`clientId` from YAML, `ClientSecret` from `AUTH_CLIENT_SECRET` env - `deployment.yaml`: `AUTH_CLIENT_SECRET` from `api-gw-client-secret` Secret (optional) - `gateway-config-secret.enc.yaml` + `configmap.yaml`: added `tokenUrl` and `clientId` ## Secret never in YAML `clientSecret` deliberately omitted from YAML struct. Loaded from env only. ## Tests 3 tests: full config load, env-only secret, backward compat (missing fields = zero).
poimen added 1 commit 2026-09-08 23:25:56 +00:00
feat(config): add tokenUrl, clientId, clientSecret to auth config
CI / CI (pull_request) Successful in 3m20s
Details
136c85ad13 
Wire token exchange config for /auth/token and /auth/refresh endpoints.
clientSecret loaded from AUTH_CLIENT_SECRET env var (never from YAML).
Backward compatible — missing fields default to zero values.

3 new tests covering: full config, env-only secret, backward compat.

Closes homelab#12

Co-authored-by: poimen <[email protected]>
rock merged commit ddee0f2dc9 into main 2026-09-08 23:43:32 +00:00
rock deleted branch feat/p3.7-auth-config 2026-09-08 23:44:01 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
area/auth
Authentication & authorization
 area/authentik
Authentik OIDC provider config
 area/downstream
Downstream service changes
 area/gateway
API gateway code
 priority/high
Must have
 priority/low
Nice to have
 priority/medium
Should have
 status/blocked
Blocked by dependency
 status/done
Completed
 status/in-progress
Currently being worked on
 status/review
Ready for review
 status/todo
Not started
 type/docs
Documentation
 type/feature
New feature
 type/infra
Infrastructure change
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
poimen rock (Rock)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: riotpiao-poimen/homelab-frontend#17