stacklok / toolhive / 39961847053

73%

Build Type

push

github

Committed by web-flow

Commit Message

Wire OIDC transport flags into thv run auth middleware config (#6529)

Wire CA bundle, auth token file and insecure HTTP into run OIDC middleware config

createOIDCConfig builds the TokenValidatorConfig that WithMiddlewareFromFlags
serializes into the auth middleware config, which is what the proxy uses at
runtime to build the token validator. It only set AllowPrivateIP, so
--thv-ca-bundle, --jwks-auth-token-file and --oidc-insecure-allow-http reached
the deprecated top-level RunConfig.OIDCConfig via WithOIDCConfig but never the
validator, and thv run could not talk to a local HTTP or private-CA issuer.

Pass the three flags through setupOIDCConfiguration into createOIDCConfig,
mirroring what #1470 did for AllowPrivateIP, and add a regression test that
checks the auth middleware parameters carry them.

Fixes #6522

Signed-off-by: 7487 <1042653432@qq.com>
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
Co-authored-by: Alejandro Ponce de Leon <aponcedeleonch@stacklok.com>

Coverage Stats

14 of 14 new or added lines in 1 file covered. (100.0%)

1 existing line in 1 file now uncovered.

89366 of 124557 relevant lines covered (71.75%)

127.83 hits per line