fix(auth): fail closed configuration compatibility

2026-08-16 17:35:40 +02:00
parent a66ef58766
commit e54ce15426
7 changed files with 120 additions and 13 deletions
@@ -190,6 +190,11 @@ export function loadConfig(env: Record<string, string | undefined>): AppConfig {
    if (!(["none", "mock", "upstream"] as const).includes(requestedMode as "none" | "mock" | "upstream")) {
      throw new Error(`unsupported AUTH_MODE=${requestedMode}; use none, mock, or upstream`);
    }
+    const nodeEnvironment = env.NODE_ENV ?? process.env.NODE_ENV;
+    if ((requestedMode === "none" || requestedMode === "mock")
+      && nodeEnvironment !== "development" && nodeEnvironment !== "test") {
+      throw new Error("production requires auth.yaml or AUTH_MODE=upstream");
+    }
    authMode = requestedMode as "none" | "mock" | "upstream";
  }
  const publicExposure = env.THOTH_PUBLIC_EXPOSURE === "true";