fix: don't require keycloak algorithms in background_jobs (#869)

Author: Panaetius

bases/renku_data_services/data_api/dependencies.py

@@ -528,6 +528,9 @@ def from_env(cls, prefix: str = "") -> "DependencyManager":
                     message="The JWKS url for Keycloak cannot be found from the OIDC discovery endpoint."
                 )
             jwks = PyJWKClient(jwks_url)
+            if config.keycloak.algorithms is None:
+                raise errors.ConfigurationError(message="At least one token signature algorithm is required.")
+
             authenticator = KeycloakAuthenticator(jwks=jwks, algorithms=config.keycloak.algorithms)
             assert config.gitlab_url is not None
             gitlab_authenticator = GitlabAuthenticator(gitlab_url=config.gitlab_url)

bases/renku_data_services/secrets_storage_api/dependencies.py

@@ -51,6 +51,9 @@ def from_env(cls) -> "DependencyManager":
                     message="The JWKS url for Keycloak cannot be found from the OIDC discovery endpoint."
                 )
             jwks = PyJWKClient(jwks_url)
+            if config.keycloak.algorithms is None:
+                raise errors.ConfigurationError(message="At least one token signature algorithm is required.")
+
             authenticator = KeycloakAuthenticator(jwks=jwks, algorithms=config.keycloak.algorithms)
             core_client = K8sCoreClient()
 

components/renku_data_services/app_config/config.py

@@ -23,7 +23,7 @@ class KeycloakConfig:
     realm: str
     client_id: str
     client_secret: str
-    algorithms: list[str]
+    algorithms: list[str] | None
 
     @classmethod
     def from_env(cls) -> "KeycloakConfig":
@@ -36,9 +36,9 @@ def from_env(cls) -> "KeycloakConfig":
         client_id = os.environ["KEYCLOAK_CLIENT_ID"]
         client_secret = os.environ["KEYCLOAK_CLIENT_SECRET"]
         algorithms = os.environ.get("KEYCLOAK_TOKEN_SIGNATURE_ALGS")
-        if algorithms is None:
-            raise errors.ConfigurationError(message="At least one token signature algorithm is required.")
-        algorithms_lst = [i.strip() for i in algorithms.split(",")]
+        algorithms_lst = None
+        if algorithms is not None:
+            algorithms_lst = [i.strip() for i in algorithms.split(",")]
         return cls(
             url=url,
             realm=realm,