Oasis

[eriksson-daniel]

No description provided.

[Copilot]

Pull Request Overview

This PR, titled "Oasis", refactors the authentication middleware by replacing the old TokenX and persistent caching logic with a new flow based on the Oasis library. Key changes include the following:

• Updates to token request logic in the obo-token plugin to use the Oasis library’s requestOboToken and validateToken functions.
• Removal of legacy token-x client, persistent cache, and related gauges and types.
• Minor configuration and server startup adjustments to support the new authentication flow.

Reviewed Changes

Copilot reviewed 15 out of 15 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
server/src/plugins/obo-token.ts	Adjusted token retrieval logic and added a check for apps excluded from OBO.
server/src/config/config.ts	Removed legacy token-x configuration and local JWK.
server/src/server.ts	Removed initialization call previously used for token-x client setup.
nais/nais.yaml	Removed obsolete Redis valkey configuration.
server/src/plugins/health.ts	Removed health check for token-x client and OBO cache readiness.
Remaining auth/cache and token-x files	Deleted legacy implementations now replaced by the new Oasis logic.

Comments suppressed due to low confidence (2)

server/src/plugins/obo-token.ts:64

• The previous implementation provided a fallback to the cache via oboCache.getCached(getCacheKey(...)). Please verify that removing the cache fallback is intentional and that the new logic fully covers the required caching functionality.

return this.oboAccessTokenMap.get(appName);

server/src/server.ts:64

• The call to init() has been removed from the server startup. Confirm that this removal is intentional and that any required initialization logic has been migrated to the new flow.

// Initialize.
// init();