fix: support PKCE public client without client secret

2026-09-18 19:59:06 +09:00
commit a420407c18
17 changed files with 1310 additions and 0 deletions
@@ -0,0 +1,37 @@
+name = "baron-qa-gateway-test"
+main = "src/index.js"
+compatibility_date = "2026-09-18"
+account_id = "81fa2d48964d31dd0da9558f9ce601d1"
+preview_urls = false
+
+routes = [
+  { pattern = "qa-test.baroncs.co.kr", custom_domain = true }
+]
+
+[vars]
+AUTH_REDIRECT_URI = "https://qa-test.baroncs.co.kr/auth/callback"
+AUTH_POST_LOGOUT_REDIRECT_URI = "https://qa-test.baroncs.co.kr/"
+AUTH_SCOPE = "openid tenants profile email"
+AUTH_CLIENT_ID = "e16898a7-acd2-420a-a224-cdcd89ff66cd"
+AUTH_AUTHORIZE_URL = "https://sso.hmac.kr/oidc/oauth2/auth"
+AUTH_TOKEN_URL = "https://sso.hmac.kr/oidc/oauth2/token"
+AUTH_USERINFO_URL = "https://sso.hmac.kr/oidc/userinfo"
+SESSION_COOKIE_NAME = "baron_qa_session"
+OAUTH_COOKIE_NAME = "baron_qa_oauth"
+SESSION_TTL_SECONDS = "3600"
+
+PUBLIC_EXACT_PATHS = "/,/index.html,/favicon.ico"
+PUBLIC_PREFIXES = "/egbim/,/tova/,/gaia/,/shared/,/assets/,/auth/"
+PROTECTED_PREFIXES = "/egbim/,/tova/,/gaia/"
+PROTECTED_EXACT_PATHS = "/write.html,/detail.html"
+INTERNAL_ONLY_PREFIXES = "/protected/"
+
+[[r2_buckets]]
+binding = "QA_BUCKET"
+bucket_name = "baron-qa-pages"
+
+[observability]
+enabled = true
+
+[observability.logs]
+enabled = true