fix(portal): skip unconfigured oauth providers

.env.example

@@ -9,3 +9,4 @@ Authentication__Naver__ClientId=
 Authentication__Naver__ClientSecret=
 Authentication__Kakao__ClientId=
 Authentication__Kakao__ClientSecret=
+# CI deploy trigger requires a real push on master.

.gitea/workflows/deploy.yml

@@ -1,6 +1,7 @@
 name: TaxBaik CI/CD
 
 on:
+  workflow_dispatch:
   push:
     branches:
       - master

README.md

@@ -2,6 +2,8 @@
 
 **온라인 세무 상담 플랫폼** | 블로그 SEO 최적화 | 전국 고객 확보
 
+CI deploy trigger verification note.
+
 ---
 
 ## 개요

TaxBaik.Web/Program.cs

@@ -64,7 +64,7 @@ if (isProduction && jwtKey.Contains("dev-secret", StringComparison.OrdinalIgnore
     throw new InvalidOperationException("Production JWT SecretKey must not use the development default.");
 var key = Encoding.ASCII.GetBytes(jwtKey);
 
-builder.Services.AddAuthentication(opts =>
+var authenticationBuilder = builder.Services.AddAuthentication(opts =>
 {
     opts.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
     opts.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
@@ -100,19 +100,30 @@ builder.Services.AddAuthentication(opts =>
     opts.Cookie.HttpOnly = true;
     opts.Cookie.SameSite = SameSiteMode.Lax;
     opts.Cookie.SecurePolicy = isProduction ? CookieSecurePolicy.Always : CookieSecurePolicy.SameAsRequest;
-})
-.AddGoogle(PortalOAuthDefaults.GoogleScheme, opts =>
+});
+
+var googleClientId = builder.Configuration["Authentication:Google:ClientId"];
+var googleClientSecret = builder.Configuration["Authentication:Google:ClientSecret"];
+if (!string.IsNullOrWhiteSpace(googleClientId) && !string.IsNullOrWhiteSpace(googleClientSecret))
+{
+    authenticationBuilder.AddGoogle(PortalOAuthDefaults.GoogleScheme, opts =>
     {
         opts.SignInScheme = PortalOAuthDefaults.ExternalScheme;
-    opts.ClientId = builder.Configuration["Authentication:Google:ClientId"] ?? "";
-    opts.ClientSecret = builder.Configuration["Authentication:Google:ClientSecret"] ?? "";
+        opts.ClientId = googleClientId;
+        opts.ClientSecret = googleClientSecret;
         opts.CallbackPath = "/taxbaik/portal/signin-google";
-})
-.AddOAuth(PortalOAuthDefaults.NaverScheme, opts =>
+    });
+}
+
+var naverClientId = builder.Configuration["Authentication:Naver:ClientId"];
+var naverClientSecret = builder.Configuration["Authentication:Naver:ClientSecret"];
+if (!string.IsNullOrWhiteSpace(naverClientId) && !string.IsNullOrWhiteSpace(naverClientSecret))
+{
+    authenticationBuilder.AddOAuth(PortalOAuthDefaults.NaverScheme, opts =>
     {
         opts.SignInScheme = PortalOAuthDefaults.ExternalScheme;
-    opts.ClientId = builder.Configuration["Authentication:Naver:ClientId"] ?? "";
-    opts.ClientSecret = builder.Configuration["Authentication:Naver:ClientSecret"] ?? "";
+        opts.ClientId = naverClientId;
+        opts.ClientSecret = naverClientSecret;
         opts.CallbackPath = "/taxbaik/portal/signin-naver";
         opts.AuthorizationEndpoint = "https://nid.naver.com/oauth2.0/authorize";
         opts.TokenEndpoint = "https://nid.naver.com/oauth2.0/token";
@@ -133,12 +144,18 @@ builder.Services.AddAuthentication(opts =>
                 context.Identity?.AddClaim(new System.Security.Claims.Claim(System.Security.Claims.ClaimTypes.Email, responseRoot.GetProperty("email").GetString() ?? ""));
             }
         };
-})
-.AddOAuth(PortalOAuthDefaults.KakaoScheme, opts =>
+    });
+}
+
+var kakaoClientId = builder.Configuration["Authentication:Kakao:ClientId"];
+var kakaoClientSecret = builder.Configuration["Authentication:Kakao:ClientSecret"];
+if (!string.IsNullOrWhiteSpace(kakaoClientId) && !string.IsNullOrWhiteSpace(kakaoClientSecret))
+{
+    authenticationBuilder.AddOAuth(PortalOAuthDefaults.KakaoScheme, opts =>
     {
         opts.SignInScheme = PortalOAuthDefaults.ExternalScheme;
-    opts.ClientId = builder.Configuration["Authentication:Kakao:ClientId"] ?? "";
-    opts.ClientSecret = builder.Configuration["Authentication:Kakao:ClientSecret"] ?? "";
+        opts.ClientId = kakaoClientId;
+        opts.ClientSecret = kakaoClientSecret;
         opts.CallbackPath = "/taxbaik/portal/signin-kakao";
         opts.AuthorizationEndpoint = "https://kauth.kakao.com/oauth/authorize";
         opts.TokenEndpoint = "https://kauth.kakao.com/oauth/token";
@@ -162,6 +179,7 @@ builder.Services.AddAuthentication(opts =>
             }
         };
     });
+}
 
 // Blazor 인증
 builder.Services.AddScoped<AuthService>();