From a8060444c1a2d659eea445577b456a11608f077e Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Mon, 13 Jul 2026 10:57:28 -0700
Subject: [PATCH] feat: disable OIDC/JWT auth interceptors on gRPC+REST server

Server was crash-looping on TLS trust failures fetching Authentik's OIDC
discovery document (private-CA cert not trusted by the container image).
Drop the auth wiring for now to unblock the deployment; internal/auth and
internal/api/interceptors packages are left intact for when auth comes back.
---
 cmd/server/main.go | 12 +-----------
 1 file changed, 1 insertion(+), 11 deletions(-)

diff --git a/cmd/server/main.go b/cmd/server/main.go
index 3ef0672..13f02c1 100644
--- a/cmd/server/main.go
+++ b/cmd/server/main.go
@@ -22,8 +22,6 @@ import (
 	"google.golang.org/grpc"
 
 	"github.com/rockliang/kafka-management-service/internal/api/handlers"
-	"github.com/rockliang/kafka-management-service/internal/api/interceptors"
-	"github.com/rockliang/kafka-management-service/internal/auth"
 	"github.com/rockliang/kafka-management-service/internal/config"
 	"github.com/rockliang/kafka-management-service/internal/core/queue"
 	"github.com/rockliang/kafka-management-service/internal/core/reaper"
@@ -66,11 +64,6 @@ func run() error {
 	}
 	defer producer.Close()
 
-	validator, err := auth.NewValidator(ctx, cfg.AuthentikIssuerURL, cfg.AuthentikAudience)
-	if err != nil {
-		return err
-	}
-
 	router := &queue.ShardRouter{Redis: rdb}
 
 	svc := &handlers.QueueService{
@@ -88,10 +81,7 @@ func run() error {
 	}
 	defer svc.Consumers.Close()
 
-	grpcSrv := grpc.NewServer(
-		grpc.ChainUnaryInterceptor(interceptors.UnaryServerInterceptor(validator)),
-		grpc.ChainStreamInterceptor(interceptors.StreamServerInterceptor(validator)),
-	)
+	grpcSrv := grpc.NewServer()
 	kafkamgmtv1.RegisterQueueServiceServer(grpcSrv, svc)
 
 	mux := runtime.NewServeMux()