riotpiao-poimen/homelab
2
0
Fork 0
Code Issues 9 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

P3.6: Enforce JWT auth on X-Service adapter dispatch #11

New Issue
Open
opened 2026-09-08 04:42:44 +00:00 by rock · 0 comments
rock commented 2026-09-08 04:42:44 +00:00
Owner
Copy Link
Copy Source

Summary

Wire JWT validation into ServiceAdapter dispatcher. Currently auth.required: true on SQS adapter is ignored.

Code repo: rock/homelab-frontend — internal/serviceadapter/

Acceptance Criteria

  • Dispatcher checks auth.required per adapter
  • Validates Bearer JWT, checks capability (<service>:read/<service>:write)
  • Injects X-Forwarded-User headers (reuse P3.4)
  • Adapters with auth.required: false unchanged
  • Unit tests

Depends on

  • P3.4
## Summary Wire JWT validation into ServiceAdapter dispatcher. Currently `auth.required: true` on SQS adapter is ignored. **Code repo:** `rock/homelab-frontend` — `internal/serviceadapter/` ## Acceptance Criteria - [ ] Dispatcher checks `auth.required` per adapter - [ ] Validates Bearer JWT, checks capability (`<service>:read`/`<service>:write`) - [ ] Injects X-Forwarded-User headers (reuse P3.4) - [ ] Adapters with `auth.required: false` unchanged - [ ] Unit tests ## Depends on - P3.4
rock added this to the Phase 3: OAuth2 Token Exchange & Identity Propagation milestone 2026-09-08 04:42:44 +00:00
rock added the area/autharea/gatewaytype/featurestatus/todopriority/medium labels 2026-09-08 04:42:45 +00:00
rock self-assigned this 2026-09-08 04:42:47 +00:00
rock added this to the API-GW OAuth project 2026-09-08 04:44:00 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
area/auth
Authentication & authorization
 area/authentik
Authentik OIDC provider config
 area/downstream
Downstream service changes
 area/gateway
API gateway code (homelab-frontend)
 priority/high
Must have
 priority/medium
Should have
 status/blocked
Blocked by dependency
 status/done
Completed
 status/in-progress
Currently being worked on
 status/review
Ready for review
 status/todo
Not started
 type/docs
Documentation
 type/feature
New feature
 type/infra
Infrastructure change
No labels area/auth area/gateway priority/medium status/todo type/feature
Milestone
No items
No Milestone Phase 3: OAuth2 Token Exchange & Identity Propagation
Projects
Clear projects
No projects
API-GW OAuth
Backlog
Assignees
Clear assignees
poimen rock (Rock)
No Assignees rock
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: riotpiao-poimen/homelab#11