feat: enforce OIDC session introspection

2026-07-12 05:44:37 +08:00
parent b9c0e1a7a5
commit f8d766b916
5 changed files with 145 additions and 32 deletions
@@ -32,6 +32,9 @@ OIDC_ROLE_PREFIX=gateway.
 OIDC_REQUIRED_SCOPES=gateway.access
 OIDC_JWKS_CACHE_TTL_SECONDS=300
 OIDC_ACCEPT_LEGACY_HS256=true
+OIDC_INTROSPECTION_ENABLED=false
+OIDC_INTROSPECTION_CLIENT_ID=
+OIDC_INTROSPECTION_CLIENT_SECRET=
 OIDC_CLIENT_ID=
 OIDC_REDIRECT_URI=http://localhost:5178/auth/callback
 AI_GATEWAY_WEB_BASE_PATH=/