mirror of
https://github.com/tiennm99/DocsGPT.git
synced 2026-10-04 14:12:58 +00:00
Review follow-up. SCIM_ENABLED=true with no SCIM_TOKEN was only caught per request, as a 503 from the SCIM routes. The auth group's model validator now rejects that combination when Settings loads, the same way it rejects AUTH_TYPE=oidc without its required settings, so the misconfiguration is reported once at startup rather than on the first provisioning call. The route-level guard stays as defence in depth.