feat(ap4): add oauth2-proxy OIDC flow

2026-07-25 14:50:00 +09:00
parent e2fba41f56
commit 4ac0133586
13 changed files with 342 additions and 1 deletions
@@ -40,4 +40,20 @@ class ApiSecurityTest {
            .andExpect(jsonPath("$.subject").value("test-subject"))
            .andExpect(jsonPath("$.username").value("regular-user"));
    }
+
+    @Test
+    void edgeEndpointRejectsMissingIdentityHeader() throws Exception {
+        mockMvc.perform(get("/edge/me"))
+            .andExpect(status().isUnauthorized());
+    }
+
+    @Test
+    void edgeEndpointCurrentlyTrustsForwardedUserHeader() throws Exception {
+        mockMvc.perform(get("/edge/me")
+                .header("X-Forwarded-User", "regular-user")
+                .header("X-Forwarded-Email", "regular-user@example.test"))
+            .andExpect(status().isOk())
+            .andExpect(jsonPath("$.user").value("regular-user"))
+            .andExpect(jsonPath("$.identityHeader").value("X-Forwarded-User"));
+    }
 }