RSHB/DFiP_Budget_planing
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix

Browse Source
This commit is contained in:
Raykov-MS 2026-09-03 11:43:47 +03:00
parent 919440d62f
commit fa4cfc9db8
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
api/src/core/security.py
View File

@ -93,7 +93,9 @@ def email_from_keycloak_payload(payload: dict | None) -> str | None:
def _get_jwks(*, force_refresh: bool = False) -> dict: def _get_jwks(*, force_refresh: bool = False) -> dict:
global _jwks_cache global _jwks_cache
if _jwks_cache is None or force_refresh: if _jwks_cache is None or force_refresh:
response = httpx.get(settings.JWKS_URL, timeout=10.0) # Внутренний Keycloak Raisa отдаёт JWKS с корпоративным/self-signed CA;
# certifi в httpx эту цепочку не знает.
response = httpx.get(settings.JWKS_URL, timeout=10.0, verify=False)
response.raise_for_status() response.raise_for_status()
_jwks_cache = response.json() _jwks_cache = response.json()
return _jwks_cache return _jwks_cache