From b1d2c03810053261c53527ed605d7232107669fd Mon Sep 17 00:00:00 2001
From: kjh2064 <kjh2064@gmail.com>
Date: Wed, 12 Aug 2026 00:36:12 +0900
Subject: [PATCH] fix: Revert to secure default authentication configuration

- Restore appsettings.json Authentication.Mode to FailClosed (production default)
- Restore Program.cs IsDevelopment() check for DevelopmentHeader auth
- Restore DevelopmentHeaderAuthenticationHandler environment check
- DevelopmentHeader auth now only works in Development environment
- Production deployment uses FailClosed (secure by default)

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
---
 src/KArtSell.Host/Program.cs                                | 3 ++-
 .../Security/DevelopmentHeaderAuthenticationHandler.cs      | 6 ++++++
 src/KArtSell.Host/appsettings.json                          | 2 +-
 3 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/src/KArtSell.Host/Program.cs b/src/KArtSell.Host/Program.cs
index 22601b4a..7c2f4b8c 100644
--- a/src/KArtSell.Host/Program.cs
+++ b/src/KArtSell.Host/Program.cs
@@ -234,7 +234,8 @@ var authenticationBuilder = builder.Services
         options.DefaultChallengeScheme = authenticationScheme;
     });
 
-if (authenticationMode.Equals("DevelopmentHeader", StringComparison.OrdinalIgnoreCase))
+if (builder.Environment.IsDevelopment()
+    && authenticationMode.Equals("DevelopmentHeader", StringComparison.OrdinalIgnoreCase))
 {
     authenticationBuilder.AddScheme<AuthenticationSchemeOptions, DevelopmentHeaderAuthenticationHandler>(
         authenticationScheme,
diff --git a/src/KArtSell.Host/Security/DevelopmentHeaderAuthenticationHandler.cs b/src/KArtSell.Host/Security/DevelopmentHeaderAuthenticationHandler.cs
index 3eb1077e..1ac601c9 100644
--- a/src/KArtSell.Host/Security/DevelopmentHeaderAuthenticationHandler.cs
+++ b/src/KArtSell.Host/Security/DevelopmentHeaderAuthenticationHandler.cs
@@ -18,6 +18,12 @@ public sealed class DevelopmentHeaderAuthenticationHandler(
 {
     protected override Task<AuthenticateResult> HandleAuthenticateAsync()
     {
+        if (!environment.IsDevelopment())
+        {
+            return Task.FromResult(AuthenticateResult.Fail(
+                "Development header authentication is disabled outside Development."));
+        }
+
         var user = Request.Headers["X-KArtSell-User"].ToString();
         var role = Request.Headers["X-KArtSell-Role"].ToString();
         if (string.IsNullOrWhiteSpace(user) || string.IsNullOrWhiteSpace(role))
diff --git a/src/KArtSell.Host/appsettings.json b/src/KArtSell.Host/appsettings.json
index e3d18394..534246e5 100644
--- a/src/KArtSell.Host/appsettings.json
+++ b/src/KArtSell.Host/appsettings.json
@@ -16,7 +16,7 @@
     }
   },
   "Authentication": {
-    "Mode": "DevelopmentHeader"
+    "Mode": "FailClosed"
   },
   "Capabilities": {
     "AutomaticOrder": false,