feat: add authentik jwt verification and me endpoints

2026-03-29 23:06:19 +08:00
parent 970693a6d5
commit 5790878c87
15 changed files with 238 additions and 2 deletions
--- a/docs/BACKEND_BOOTSTRAP.md
+++ b/docs/BACKEND_BOOTSTRAP.md
@@ -20,7 +20,15 @@ source .venv/bin/activate
 uvicorn app.main:app --host 127.0.0.1 --port 8000 --reload
 ```

-## 4. 快速驗證
+## 4. Authentik JWT 最小設定
+`.env` 至少填一種：
+- `AUTHENTIK_JWKS_URL=<jwks endpoint>`
+- `AUTHENTIK_ISSUER=<issuer url>`（系統會推導 `<issuer>/jwks/`）
+
+可選：
+- `AUTHENTIK_AUDIENCE=<audience>`
+
+## 5. 快速驗證
 ```bash
 curl -sS http://127.0.0.1:8000/healthz
 ```