feat(auth): pluggable auth with static-token and OIDC/JWT modes - #32

Merged

mickamy merged 9 commits into

mainfrom

feat/auth-authenticator

Jul 10, 2026

Commits on Jul 2, 2026

refactor(server): introduce Authenticator abstraction behind the auth middleware
mickamy
committed
5051f90
refactor(config): restructure auth settings into an auth block with mode
mickamy
committed
1def0da
feat(auth): add OIDC/JWT authentication mode
mickamy
committed
d93295e

Commits on Jul 10, 2026

refactor(server): build the authenticator in Prepare with a cancelable context
mickamy
committed
333a562
test(server): use slices.Equal for slice comparison in OIDC tests
mickamy
committed
3289a03
fix(server): attach an anonymous Principal on the /healthz auth bypass
mickamy
committed
d2718e7
fix(config): reject auth settings when auth.mode is none (fail closed)
mickamy
committed
6053b96
feat(cli): warn when the bundled UI is enabled under auth.mode oidc
mickamy
committed
eba2e89
fix(server): bound OIDC discovery by the configured timeout
mickamy
committed
5da9023