Skip to content

Conversation

@abachman-dsac
Copy link
Member

Problem

We need to be able to control our deployed environments' authentication requirement.

For launch, we would like nonprod to not (yet) require authentication and production to require it.

Solution

Make sure NPD_REQUIRE_AUTHENTICATION is set appropriately in the fhir-api containers for Dev and Prod.

Result

Dev will continue to not require authentication, while Prod will require it from the beginning.

@abachman-dsac abachman-dsac force-pushed the abachman-dsac/add-require-auth-to-infra branch from 4f4b3a0 to e21ab10 Compare November 12, 2025 21:40
Copy link
Contributor

@wbprice wbprice left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Shouldn't we test that the authentication works in lower environments before turning it on in prod?

@abachman-dsac abachman-dsac merged commit d412800 into main Nov 13, 2025
9 checks passed
@abachman-dsac abachman-dsac deleted the abachman-dsac/add-require-auth-to-infra branch November 13, 2025 17:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants