REAL tests that call actual services, not fake routing checks:
- Get real JWT from Authentik (client_credentials flow)
- Call SQS list-queues and send-message
- Call MinIO/S3 list-objects with JWT
- Call Authentik API with JWT
- Call Memory query operations
- Call Temporal (gRPC not yet implemented)
Tests gracefully skip if services unreachable (502/504).
Tests warn if operations partially integrated (e.g., MinIO JWT not validated).
Tests document current JWT integration state vs. what's still TODO.
Configuration:
GATEWAY_URL=https://api.riotpiao.com
AUTHENTIK_CLIENT_ID=<from OAuth2 provider>
AUTHENTIK_CLIENT_SECRET=<from OAuth2 provider>
TEST_TIMEOUT=30
Run: ./scripts/test-integration.sh
Documentation:
- INTEGRATION_TESTS.md lists what's working vs. TODO
- Phase 3: Implement actual JWT validation in services
- Phase 9: Add gRPC proxying for Temporal