rock/kmsvc-manage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: disable OIDC/JWT auth interceptors on gRPC+REST server

Browse Source 
Server was crash-looping on TLS trust failures fetching Authentik's OIDC
discovery document (private-CA cert not trusted by the container image).
Drop the auth wiring for now to unblock the deployment; internal/auth and
internal/api/interceptors packages are left intact for when auth comes back.
This commit is contained in:
Story Crater Bot
2026-07-13 10:57:28 -07:00
parent b4cb3a7255
commit a8060444c1
1 changed files with 1 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cmd/server/main.go
+1 -11
View File
@@ -22,8 +22,6 @@ import (
"google.golang.org/grpc" "google.golang.org/grpc"
"github.com/rockliang/kafka-management-service/internal/api/handlers" "github.com/rockliang/kafka-management-service/internal/api/handlers"
"github.com/rockliang/kafka-management-service/internal/api/interceptors"
"github.com/rockliang/kafka-management-service/internal/auth"
"github.com/rockliang/kafka-management-service/internal/config" "github.com/rockliang/kafka-management-service/internal/config"
"github.com/rockliang/kafka-management-service/internal/core/queue" "github.com/rockliang/kafka-management-service/internal/core/queue"
"github.com/rockliang/kafka-management-service/internal/core/reaper" "github.com/rockliang/kafka-management-service/internal/core/reaper"
@@ -66,11 +64,6 @@ func run() error {
} }
defer producer.Close() defer producer.Close()
validator, err := auth.NewValidator(ctx, cfg.AuthentikIssuerURL, cfg.AuthentikAudience)
if err != nil {
return err
}
router := &queue.ShardRouter{Redis: rdb} router := &queue.ShardRouter{Redis: rdb}
svc := &handlers.QueueService{ svc := &handlers.QueueService{
@@ -88,10 +81,7 @@ func run() error {
} }
defer svc.Consumers.Close() defer svc.Consumers.Close()
grpcSrv := grpc.NewServer( grpcSrv := grpc.NewServer()
grpc.ChainUnaryInterceptor(interceptors.UnaryServerInterceptor(validator)),
grpc.ChainStreamInterceptor(interceptors.StreamServerInterceptor(validator)),
)
kafkamgmtv1.RegisterQueueServiceServer(grpcSrv, svc) kafkamgmtv1.RegisterQueueServiceServer(grpcSrv, svc)
mux := runtime.NewServeMux() mux := runtime.NewServeMux()