Skip to content

feat(auth): validate tokens against the platform pool with a validate-only client #258

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Alexanderamiri merged 2 commits into from
Oct 23, 2026
Merged

feat(auth): validate tokens against the platform pool with a validate-only client #258

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
9bdb62c
feat(auth): validate tokens against the platform pool with a validate…
Alexanderamiri Oct 23, 2026
ceda2cf
[skip ci] Update generated Terraform from app.yaml
Oct 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions app.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,8 +22,11 @@ resources:
- name: bring_api_key
env: BRING_API_KEY

auth: internal
auth:
pool: internal
client: none
env:
COGNITO_WELL_KNOWN_URL: OIDC_WELL_KNOWN_URL

environment:
SP_BASE_URL: https://sleepingpill.javazone.no
OIDC_WELL_KNOWN_URL: https://cognito-idp.eu-central-1.amazonaws.com/eu-central-1_Icikv3dtD/.well-known/openid-configuration
33 changes: 16 additions & 17 deletions terraform/main.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@ module "platform" {

project = "javabin"
domain = "javazone.no"
team = "cupcake"
}

module "ecr" {
Expand Down Expand Up @@ -74,12 +75,11 @@ module "secret_bring_api_key" {
module "auth" {
source = "git::https://github.com/javaBin/platform//terraform/modules/cognito-app-client?ref=main"

app_name = "cupcake-backend"
team = "cupcake"
pool = "internal"
callback_urls = ["https://cupcake-backend.javazone.no/", "https://cupcake-backend.javazone.no/auth/callback"]
logout_urls = ["https://cupcake-backend.javazone.no/"]
project = "javabin"
app_name = "cupcake-backend"
team = "cupcake"
pool = "internal"
client_type = "none"
project = "javabin"
}

module "task_role" {
Expand Down Expand Up @@ -118,19 +118,18 @@ module "service" {
readonly_root_filesystem = true
target_group_arn = module.routing.target_group_arn
environment = {
SP_BASE_URL = "https://sleepingpill.javazone.no"
OIDC_WELL_KNOWN_URL = "https://cognito-idp.eu-central-1.amazonaws.com/eu-central-1_Icikv3dtD/.well-known/openid-configuration"
COGNITO_USER_POOL_ID = module.auth.user_pool_id
COGNITO_DOMAIN = module.auth.user_pool_domain
COGNITO_ISSUER_URL = module.auth.issuer_url
SP_BASE_URL = "https://sleepingpill.javazone.no"
COGNITO_USER_POOL_ID = module.auth.user_pool_id
COGNITO_DOMAIN = module.auth.user_pool_domain
COGNITO_ISSUER_URL = module.auth.issuer_url
COGNITO_WELL_KNOWN_URL = module.auth.well_known_url
OIDC_WELL_KNOWN_URL = module.auth.well_known_url
}
secrets = {
SP_USER = module.secret_sp_user.parameter_arn
SP_PASSWORD = module.secret_sp_password.parameter_arn
BRING_API_USER = module.secret_bring_api_user.parameter_arn
BRING_API_KEY = module.secret_bring_api_key.parameter_arn
COGNITO_CLIENT_ID = module.auth.client_id_arn
COGNITO_CLIENT_SECRET = module.auth.client_secret_arn
SP_USER = module.secret_sp_user.parameter_arn
SP_PASSWORD = module.secret_sp_password.parameter_arn
BRING_API_USER = module.secret_bring_api_user.parameter_arn
BRING_API_KEY = module.secret_bring_api_key.parameter_arn
}
}

Expand Down