Transcoder: If empty JWKS env var, do not enable JWKS (#1025)

docker-compose.dev.yml

@@ -10,6 +10,8 @@ x-transcoder: &transcoder-base
     - "7666:7666"
   restart: unless-stopped
   cpus: 1
+  environment:
+    - JWKS_URL=http://auth:4568/.well-known/jwks.json
   env_file:
     - ./.env
   volumes:

transcoder/main.go

@@ -76,6 +76,9 @@ func main() {
 		return
 	}
 
+	g := e.Group("/video")
+
+	if src.Settings.JwksUrl != "" {
 		ctx, cancel := context.WithCancel(context.Background())
 		defer cancel()
 
@@ -85,8 +88,6 @@ func main() {
 			return
 		}
 		jwks.Register(ctx, src.Settings.JwksUrl)
-
-	g := e.Group("/video")
 		g.Use(echojwt.WithConfig(echojwt.Config{
 			KeyFunc: func(token *jwt.Token) (any, error) {
 				keys, err := jwks.CachedSet(src.Settings.JwksUrl)
@@ -110,6 +111,7 @@ func main() {
 				return pubkey, nil
 			},
 		}))
+	}
 
 	api.RegisterStreamHandlers(g, transcoder)
 	api.RegisterMetadataHandlers(g, metadata)

transcoder/src/settings.go

@@ -32,6 +32,6 @@ var Settings = SettingsT{
 	// we manually add a folder to make sure we do not delete user data.
 	Outpath:  path.Join(GetEnvOr("GOCODER_CACHE_ROOT", "/cache"), "kyoo_cache"),
 	SafePath: GetEnvOr("GOCODER_SAFE_PATH", "/video"),
-	JwksUrl:  GetEnvOr("JWKS_URL", "http://auth:4568/.well-known/jwks.json"),
+	JwksUrl:  os.Getenv("JWKS_URL"),
 	HwAccel:  DetectHardwareAccel(),
 }