feat(server): activate projected authentication safely

2026-08-22 01:01:36 +02:00
parent 903c0b4de5
commit 3d9a9f0675
32 changed files with 1837 additions and 38 deletions
@@ -79,6 +79,9 @@ const authConfig = config.services.core.volumes?.filter((mount) => mount.target
 if (authConfig.length !== 1 || authConfig[0].type !== "bind" || !authConfig[0].read_only) {
  throw new Error(profile + ": core must receive one read-only authentication config bind");
 }
+if (Object.hasOwn(config.services.core.environment || {}, "THT_AUTH_RUNTIME_PROJECTION_ROOT")) {
+  throw new Error(profile + ": non-projected fixture unexpectedly selected runtime projection");
+}
 if (profile === "local") {
  const authState = config.services.core.volumes?.filter((mount) => mount.target === "/data/auth") || [];
  if (authState.length !== 1 || authState[0].type !== "volume" || authState[0].source !== "auth-state") {