feat(auth): validate mapped groups through Authentik

2026-08-17 10:44:56 +02:00
parent 33ae7cfdc2
commit f0ae680671
9 changed files with 669 additions and 2 deletions
@@ -8,6 +8,7 @@ export const SECRET_BUNDLE_KEYS = Object.freeze([
  "THT_MODEL_API_KEY", "THT_DWH_API_KEY", "THT_VEC_API_KEY", "THT_VEC_WRITE_API_KEY",
  "THT_CA", "THT_SSL_CA", "THT_VECTOR_BOOTSTRAP_PASSWORD", "THT_VECTOR_MIGRATOR_PASSWORD",
  "THT_VECTOR_READER_PASSWORD", "THT_VECTOR_WRITER_PASSWORD", "PI_PROVIDER_API_KEY",
+  "THT_OIDC_CLIENT_SECRET", "THT_AUTHENTIK_API_TOKEN",
 ] as const);

 const ALLOWED = new Set<string>(SECRET_BUNDLE_KEYS);