test(auth): gate local and OIDC authentication release

2026-08-18 06:02:25 +02:00
parent 7cf7d9db6b
commit 8a3fa5031d
23 changed files with 1711 additions and 168 deletions
@@ -8,12 +8,18 @@ trap 'rm -rf "$tmp"' EXIT HUP INT TERM
 auth_file="$tmp/auth.json"
 printf '%s\n' '{}' >"$auth_file"
 chmod 0600 "$auth_file"
+auth_config="$tmp/auth"
+mkdir "$auth_config"
+chmod 0700 "$auth_config"
+printf '%s\n' 'mode: local' >"$auth_config/auth.yaml"
+chmod 0600 "$auth_config/auth.yaml"
 secrets_file="$tmp/thothii.secrets"
 printf '%s\n' 'THT_MODEL_API_KEY=fixture-model-api-key' >"$secrets_file"
 chmod 0600 "$secrets_file"

 rendered=$(THT_WORKSPACE_GIT_REMOTE=https://git.example.invalid/platform/thoth-workspaces.git \
-  PI_AUTH_FILE="$auth_file" THT_SECRETS_FILE="$secrets_file" docker compose config)
+  PI_AUTH_FILE="$auth_file" THT_SECRETS_FILE="$secrets_file" \
+  THT_AUTH_CONFIG_ROOT="$auth_config" docker compose config)
 printf '%s\n' "$rendered" | grep -q "source: $auth_file"
 printf '%s\n' "$rendered" | grep -q 'target: /home/thoth/.pi/agent/auth.json'
 printf '%s\n' "$rendered" | grep -A4 'target: /home/thoth/.pi/agent/auth.json' \
@@ -33,6 +39,7 @@ fi

 dev_rendered=$(THT_WORKSPACE_GIT_REMOTE=https://git.example.invalid/platform/thoth-workspaces.git \
  PI_AUTH_FILE="$auth_file" THT_SECRETS_FILE="$secrets_file" \
+  THT_AUTH_CONFIG_ROOT="$auth_config" \
  docker compose --env-file deploy/env/local.env.example -f docker-compose.dev.yml config)
 printf '%s\n' "$dev_rendered" | grep -q "source: $auth_file"
 printf '%s\n' "$dev_rendered" | grep -q 'target: /home/thoth/.pi/agent/auth.json'