fix compile issues

Author: scottgerring

sticker-award/infra/aws/lib/api.ts

@@ -86,6 +86,7 @@ export class Api extends Construct {
         MESSAGING_PROVIDER: "aws",
         CATALOGUE_BASE_URL: `https://${props.serviceProps.cloudfrontDistribution.distributionDomainName}`,
         USER_REGISTERED_QUEUE_URL: userRegisteredQueue.queueUrl,
+        OAUTH_ISSUER: `https://${props.serviceProps.cloudfrontDistribution.distributionDomainName}`,
         ...props.serviceProps.messagingConfiguration.asEnvironmentVariables(),
       },
       secrets: secrets,

sticker-award/internal/api/middleware/jwt.go

@@ -40,7 +40,7 @@ func NewJWTValidator(cfg *config.AuthConfig) (*JWTValidator, error) {
 	ctx, cancel := context.WithCancel(context.Background())
 
 	// Create JWKS keyfunc with background refresh
-	jwks, err := keyfunc.NewDefaultCtx(ctx, []string{cfg.JWKSUrl})
+	jwks, err := keyfunc.NewDefaultCtx(ctx, []string{cfg.JWKSUrl()})
 	if err != nil {
 		cancel()
 		return nil, err

sticker-award/internal/config/config.go

@@ -37,11 +37,15 @@ type Config struct {
 
 // AuthConfig holds JWT authentication configuration
 type AuthConfig struct {
-	JWKSUrl   string `mapstructure:"jwks_url"`
 	Issuer    string `mapstructure:"issuer"`
 	ClockSkew int    `mapstructure:"clock_skew"`
 }
 
+// JWKSUrl returns the JWKS URL derived from the issuer
+func (a *AuthConfig) JWKSUrl() string {
+	return a.Issuer + "/.well-known/jwks"
+}
+
 // ServerConfig holds HTTP server configuration
 type ServerConfig struct {
 	Port string `mapstructure:"port"`
@@ -229,13 +233,11 @@ func setDefaults() {
 	viper.SetDefault("logging.level", "info")
 	viper.SetDefault("logging.format", "json")
 
-	// Auth defaults
-	viper.SetDefault("auth.jwks_url", "http://user-management:8080/.well-known/jwks")
+	// Auth defaults - JWKS URL is derived from issuer
 	viper.SetDefault("auth.issuer", "http://user-management:8080")
 	viper.SetDefault("auth.clock_skew", 30)
 
 	// Explicit env var bindings for auth config
-	_ = viper.BindEnv("auth.jwks_url", "JWKS_URI")
 	_ = viper.BindEnv("auth.issuer", "OAUTH_ISSUER")
 }
 

sticker-catalogue/infra/aws/lib/api.ts

@@ -77,6 +77,7 @@ export class Api extends Construct {
         QUARKUS_DATASOURCE_JDBC_ACQUISITION_TIMEOUT: "30S",
         QUARKUS_S3_PATH_STYLE_ACCESS: "true",
         STICKER_IMAGES_BUCKET: props.stickerImagesBucket.bucketName,
+        OAUTH_ISSUER: `https://${props.serviceProps.cloudfrontDistribution.distributionDomainName}`,
         ...props.serviceProps.messagingProps.asEnvironmentVariables(),
       },
       secrets: secrets,

sticker-catalogue/src/main/resources/application.properties

@@ -32,9 +32,9 @@ MESSAGING_PROVIDER=kafka
 quarkus.eventbridge.aws.region=${AWS_REGION:us-east-1}
 quarkus.eventbridge.aws.credentials.type=default
 
-# JWT Configuration
+# JWT Configuration - JWKS URL derived from issuer
 mp.jwt.verify.issuer=${OAUTH_ISSUER:http://user-management:8080}
-mp.jwt.verify.publickey.location=${JWKS_URI:http://user-management:8080/.well-known/jwks}
+mp.jwt.verify.publickey.location=${OAUTH_ISSUER:http://user-management:8080}/.well-known/jwks
 smallrye.jwt.clock.skew=30
 
 # Dev profile JWT overrides