~bigbes/lethe: a4e6ca5c

auth: fix OIDCVerifier injection wiring + OIDCDevStub root attachment

Surfaced by the first end-to-end smoke of `auth.oidc.enabled=true`:

- `OIDCVerifier.Cfg` was typed `config.OIDCConfig`, but only `AuthConfig`
  is registered as a `config-section:""` (config.go:31-37). Steward's
  type-keyed injection threw `failed to find dependency` at `mgr.Inject`,
  panicking the daemon. Latent since 80b1c09 — never reached because no
  prior verified path enabled OIDC. Retyped to `config.AuthConfig`,
  Init now reads `Cfg.OIDC.{Issuer,Audience,UsernameClaim}`. Sibling-
  consistent with `Authenticator` and `OIDCDevStub`.

- `OIDCDevStub` had no dependents and no `steward.Root()` modifier, so
  steward logged `ERR empty dependents asset without root option` and
  skipped it in lifecycle bookkeeping (Destroy never called on shutdown).
  Added `steward.Root()` to its registration; shutdown log now shows
  `destroying component component=auth.OIDCDevStub`.

Eugene Blikh <bigbes@gmail.com> — 2026-04-26 12:10:19 UTC

Commit a4e6ca5c5d5520261f0646c934559cb7914eaca6view raw patch

Parent(s): c832d32c

4 changed file(s)

FileStatus+
cmd/lethe/main.go M +4 -1
internal/server/auth/devstub_test.go M +7 -5
internal/server/auth/middleware_test.go M +7 -5
internal/server/auth/oidc.go M +9 -7