mirror of
https://github.com/azaion/satellite-provider.git
synced 2026-06-21 08:31:14 +00:00
Oleksandr Bezdieniezhnykh
f979e18811
Option B per user decision: production ships with empty Jwt.Issuer / Jwt.Audience in appsettings.json so the API process refuses to start unless JWT_ISSUER + JWT_AUDIENCE env vars are supplied. Development ships with grep-friendly DEV-ONLY- placeholders so local + docker flows keep working unchanged. AuthenticationServiceCollectionExtensions flips ValidateIssuer + ValidateAudience to true and wires ValidIssuer / ValidAudience via a new ResolveRequiredOrThrow helper that all three required values (secret, iss, aud) now share. JwtTokenFactory.Create + CreateExpired gain optional iss / aud parameters (default null) so existing call sites compile unchanged. JwtTestHelpers adds MintAuthenticated / MintExpired wrappers that resolve iss + aud from env, plus ResolveIssuerOrThrow / ResolveAudienceOrThrow. PerfBootstrap.MintToken + Program.cs JWT bootstrap migrated to the new surface so the perf harness and the integration runner both validate against the same contract. Adds 4 fail-fast unit tests (missing/empty issuer + audience), 2 negative integration scenarios (WrongIssuer_Returns401, WrongAudience_Returns401), and re-tags every existing integration mint site via MintAuthenticated. Compose, .env.example, run-tests.sh, run-performance-tests.sh all load + export JWT_ISSUER + JWT_AUDIENCE alongside JWT_SECRET. Resolves F-AUTH-2 (security_report.md + owasp_review.md). AC-7 (cross-repo suite/_docs/10_auth.md write) deferred — outside this workspace; tracked in deploy_cycle2.md R3 follow-up. Co-authored-by: Cursor <cursoragent@cursor.com>
39 lines
987 B
YAML
39 lines
987 B
YAML
services:
|
|
postgres:
|
|
extends:
|
|
file: docker-compose.yml
|
|
service: postgres
|
|
|
|
api:
|
|
extends:
|
|
file: docker-compose.yml
|
|
service: api
|
|
|
|
integration-tests:
|
|
build:
|
|
context: .
|
|
dockerfile: SatelliteProvider.IntegrationTests/Dockerfile
|
|
container_name: satellite-provider-integration-tests
|
|
environment:
|
|
- API_URL=http://api:8080
|
|
- INTEGRATION_TESTS_MODE=${INTEGRATION_TESTS_MODE:-full}
|
|
- INTEGRATION_KEEP_STATE=${INTEGRATION_KEEP_STATE:-}
|
|
- ASPNETCORE_ENVIRONMENT=Testing
|
|
- DB_CONNECTION_STRING=Host=postgres;Port=5432;Database=satelliteprovider;Username=postgres;Password=postgres
|
|
- JWT_SECRET=${JWT_SECRET}
|
|
- JWT_ISSUER=${JWT_ISSUER}
|
|
- JWT_AUDIENCE=${JWT_AUDIENCE}
|
|
volumes:
|
|
- ./ready:/app/ready
|
|
- ./tiles:/app/tiles
|
|
depends_on:
|
|
api:
|
|
condition: service_started
|
|
postgres:
|
|
condition: service_healthy
|
|
restart: "no"
|
|
|
|
volumes:
|
|
postgres_data:
|
|
|