a4e6ca5c
auth: fix OIDCVerifier injection wiring + OIDCDevStub root attachment
Surfaced by the first end-to-end smoke of `auth.oidc.enabled=true`:
- `OIDCVerifier.Cfg` was typed `config.OIDCConfig`, but only `AuthConfig`
is registered as a `config-section:""` (config.go:31-37). Steward's
type-keyed injection threw `failed to find dependency` at `mgr.Inject`,
panicking the daemon. Latent since 80b1c09 — never reached because no
prior verified path enabled OIDC. Retyped to `config.AuthConfig`,
Init now reads `Cfg.OIDC.{Issuer,Audience,UsernameClaim}`. Sibling-
consistent with `Authenticator` and `OIDCDevStub`.
- `OIDCDevStub` had no dependents and no `steward.Root()` modifier, so
steward logged `ERR empty dependents asset without root option` and
skipped it in lifecycle bookkeeping (Destroy never called on shutdown).
Added `steward.Root()` to its registration; shutdown log now shows
`destroying component component=auth.OIDCDevStub`.
Eugene Blikh <bigbes@gmail.com> — 2026-04-26 12:10:19 UTC
Commit a4e6ca5c5d5520261f0646c934559cb7914eaca6 —
view raw patch
Parent(s):
c832d32c
| File | Status | + | − |
|---|---|---|---|
cmd/lethe/main.go
|
M | +4 | -1 |
internal/server/auth/devstub_test.go
|
M | +7 | -5 |
internal/server/auth/middleware_test.go
|
M | +7 | -5 |
internal/server/auth/oidc.go
|
M | +9 | -7 |