forked from wangziqi/gongxue-base
test: add supabase jwks auth regression
This commit is contained in:
@@ -202,6 +202,11 @@ function validateEnv() {
|
||||
} else {
|
||||
pass('env.auth_jwt_jwks_url', 'AUTH_JWT_JWKS_URL is configured');
|
||||
}
|
||||
if (!env('AUTH_JWT_ISSUER', '').trim()) {
|
||||
block('env.auth_jwt_issuer', 'AUTH_JWT_ISSUER is required when AUTH_JWT_JWKS_URL is configured');
|
||||
} else {
|
||||
pass('env.auth_jwt_issuer', 'AUTH_JWT_ISSUER is configured for JWKS verification');
|
||||
}
|
||||
} else if (isUnsafeSecret(jwtSecret, DEFAULT_AUTH_JWT_SECRET)) {
|
||||
block('env.auth_jwt_secret', 'AUTH_JWT_SECRET or AUTH_JWT_JWKS_URL must be configured for production JWT verification');
|
||||
} else {
|
||||
|
||||
Reference in New Issue
Block a user