Commit Graph
2 Commits
Author SHA1 Message Date
Admin Bot 08b75cf49e test: Add real Authentik JWT validation tests
CI / Vet, test, build (push) Canceled after 1m21s
CI / Build and push image (push) Canceled after 0s
Test with actual JWT from Authentik (poimen-memory app):
-  Decodes real Authentik JWT
-  Validates signature against Authentik JWKS
-  Verifies claims (iss, aud, sub)
-  Correctly rejects tokens with wrong audience

Token from: https://authentik.riotpiao.com
Issuer: https://authentik.riotpiao.com/application/o/poimen-memory/
Audience: poimen-memory
Algorithm: RS256 (signed by Authentik)

Proves JWT validation works with real Authentik tokens.
For SQS: Need to create SQS OAuth2 app in Authentik and grant
homelab-admin user SQS permissions.
2026-08-27 12:26:27 -07:00
Admin Bot eeeb2a0537 test: Add unit tests for JWT validation logic
CI / Vet, test, build (push) Failing after 1m40s
CI / Build and push image (push) Skipped
Tests verify:
- Empty/invalid/malformed tokens are rejected
- Permission checks work correctly (sqs:read, sqs:write, wildcard)
- Missing permissions claim is handled
- Authorization header format validation

All tests pass. JWKS 404 is expected (Authentik endpoint doesn't exist locally).
2026-08-27 12:07:48 -07:00