xiongyuxing/gongxue-base
1
0
Fork 0
forked from wangziqi/gongxue-base
Code Pull Requests Activity

test: add supabase jwks auth regression

Browse Source
This commit is contained in:
Codex
2026-06-30 01:45:29 +08:00
parent 3bd2ac1799
commit 3e741a2a23
9 changed files with 215 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
apps/api/src/core/config.ts
View File

@@ -86,6 +86,9 @@ function validateProductionConfig(nextConfig: ApiConfig) {
if (!nextConfig.authJwtJwksUrl && isUnsafeSecret(nextConfig.authJwtSecret, DEFAULT_AUTH_JWT_SECRET)) {
failures.push('AUTH_JWT_SECRET or AUTH_JWT_JWKS_URL must be configured for production JWT verification');
}
if (nextConfig.authJwtJwksUrl && !nextConfig.authJwtIssuer.trim()) {
failures.push('AUTH_JWT_ISSUER is required when AUTH_JWT_JWKS_URL is configured');
}
if (isUnsafeSecret(nextConfig.platformAdminApiKey, DEFAULT_PLATFORM_ADMIN_API_KEY)) {
failures.push('PLATFORM_ADMIN_API_KEY must be a strong production secret until platform JWT is implemented');
}