Run the dockerised e2e suite with write auth enabled

Real clients now authenticate every local publish against a static mock OIDC issuer, and each type checks unauthenticated publishes are refused while anonymous reads keep working.
2026-11-02 22:01:44 +11:00
parent f8d6db3bd2
commit a161c44575
17 changed files with 249 additions and 34 deletions
@@ -4,3 +4,6 @@ bin/
 # e2e-docker fixtures are real package files (.rpm, .tgz, .whl, .zip, ...) that
 # are intentionally tracked, overriding any global ignore of those extensions.
 !e2e-docker/fixtures/**
+
+# Written per run by the dockerised e2e TestMain.
+e2e-docker/oidc/jwks.json