Zayden-Jung/foundry-core
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

修复 Google/Slack OAuth 回调的系统 CA 证书缺失 #6

Merged
Zayden-Jung merged 1 commits from codex/fix-oauth-ca into main 2026-11-05 15:16:12 +00:00
Conversation 0 Commits 1 Files Changed 2
+19
codex-bot commented 2026-11-05 13:40:20 +00:00
Collaborator
Copy Link
Copy Source

Go 后端在 node:24-bookworm-slim 中没有系统 CA 根证书，Google 授权返回后的 HTTPS 兑换失败，页面显示 service_unavailable。

部署时只读挂载宿主机维护的 CA bundle，并显式设置 SSL_CERT_FILE；缺失或不可读时在切换流量前失败。TLS 校验保持开启。README 补充运行时证书依赖。

本地通过 bash -n 和 git diff --check；Go 构建、回归与 schema 检查由 ces-control CI 执行。线上使用同一二进制的候选容器验证系统信任 HTTPS 和实际 Go token 请求，真人授权仍需回跳验收。

等待用户手动合并。

Go 后端在 node:24-bookworm-slim 中没有系统 CA 根证书，Google 授权返回后的 HTTPS 兑换失败，页面显示 service_unavailable。 部署时只读挂载宿主机维护的 CA bundle，并显式设置 SSL_CERT_FILE；缺失或不可读时在切换流量前失败。TLS 校验保持开启。README 补充运行时证书依赖。 本地通过 bash -n 和 git diff --check；Go 构建、回归与 schema 检查由 ces-control CI 执行。线上使用同一二进制的候选容器验证系统信任 HTTPS 和实际 Go token 请求，真人授权仍需回跳验收。 等待用户手动合并。
codex-bot added 1 commit 2026-11-05 13:40:21 +00:00
Mount system CA roots for OAuth HTTPS requests
Foundry Go checks / check (push) Successful in 3m22s
Details
Foundry Go checks / check (pull_request) Successful in 3m16s
Details
b1e0d783e6
Zayden-Jung merged commit e8ed5e4f9f into main 2026-11-05 15:16:12 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
codex-bot Zayden-Jung
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Zayden-Jung/foundry-core#6
Delete Branch "codex/fix-oauth-ca"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?