fix(gateway): set jwksUrl so the dispatcher builds a validator #68

Merged

rock merged 1 commits from feat/gateway-jwks-url into main

2026-10-27 08:17:27 +00:00

Author	SHA1	Message	Date
Admin Bot	ba8800d565	fix(gateway): set jwksUrl so the dispatcher builds a validator CI / CI (pull_request) Successful in 2m9s Details CI / CI (push) Successful in 3m29s Details cmd/gateway/main.go:144 constructs the adapter validator only when both cfg.Auth.Enabled and cfg.Auth.JWKSURL are set. The config left jwksUrl unset on purpose, so jwtValidator stayed nil and every adapter request passed with one warning line: auth required but jwtValidator nil; request unauthenticated That made auth.required cosmetic: sqs, workflow, memory, s3 and iam all answered unauthenticated calls. Set the JWKS URL to the ZITADEL key endpoint.	2026-10-27 01:17:09 -07:00

Author

SHA1

Message

Date

Admin Bot

ba8800d565

fix(gateway): set jwksUrl so the dispatcher builds a validator

CI / CI (pull_request) Successful in 2m9s

Details

CI / CI (push) Successful in 3m29s

Details

cmd/gateway/main.go:144 constructs the adapter validator only when both
cfg.Auth.Enabled and cfg.Auth.JWKSURL are set. The config left jwksUrl unset on
purpose, so jwtValidator stayed nil and every adapter request passed with one
warning line:

  auth required but jwtValidator nil; request unauthenticated

That made auth.required cosmetic: sqs, workflow, memory, s3 and iam all answered
unauthenticated calls. Set the JWKS URL to the ZITADEL key endpoint.

2026-10-27 01:17:09 -07:00