#!/usr/bin/env sh
set -eu

rendered="$(docker compose config --format json)"
printf '%s\n' "$rendered" | jq -e '
  (.services["oauth2-proxy"].command | index("--provider=keycloak-oidc") != null)
  and
  (.services["oauth2-proxy"].command | index("--code-challenge-method=S256") != null)
  and
  (.services.app.ports == null)
  and
  (.services["oauth2-proxy"].ports == null)
' >/dev/null

rg -Fq 'auth_request /oauth2/auth;' frontend/default.conf.template
rg -Fq 'proxy_set_header X-Auth-Request-User $auth_user;' \
  frontend/default.conf.template
echo "AP4 local-identity edge profile verified"