fix: JWT-валидация через lk-api-gateway PROD + User-Agent в PingNubesAPI

Dockerfile

@@ -16,7 +16,8 @@ EXPOSE 4100
 # Нечувствительные значения зашиты в образ. Секреты (SHARED_SQS_ADMIN_TOKEN, REDIS_PASSWORD) — env'ом контейнера в deck.
 ENV REDIS_ADDR=redisk8s.4ff5678b-b683-4aef-91da-22d89dec8a25.svc.cluster.local:6379 \
     REDIS_USER=default \
-    SHARED_SQS_SEED_DEMO=false
+    SHARED_SQS_SEED_DEMO=false \
+    NUBES_ENDPOINT=https://lk-api-gateway.ngcloud.ru/api/v1/svc
 HEALTHCHECK --interval=10s --timeout=5s --retries=3 \
   CMD wget -q -O - http://localhost:4100/health || exit 1
 ENTRYPOINT ["shared-sqs", "--config", "/conf/goaws.yaml"]

app/admin/admin.go

@@ -65,7 +65,7 @@ type Handler struct {
 func NewHandler(store *tenant.TenantStore, adminToken string) *Handler {
 	nubesEndpoint := os.Getenv("NUBES_ENDPOINT")
 	if nubesEndpoint == "" {
-		nubesEndpoint = "https://deck-api-test.ngcloud.ru/api/v1"
+		nubesEndpoint = "https://lk-api-gateway.ngcloud.ru/api/v1/svc"
 	}
 	return &Handler{store: store, adminToken: adminToken, nubesEndpoint: nubesEndpoint}
 }

app/auth/jwt.go

@@ -84,6 +84,7 @@ func PingNubesAPI(ctx context.Context, endpoint, token string) error {
 		return fmt.Errorf("build nubes ping request: %w", err)
 	}
 	req.Header.Set("Authorization", "Bearer "+token)
+	req.Header.Set("User-Agent", "Mozilla/5.0")
 
 	client := &http.Client{Timeout: 10 * time.Second}
 	resp, err := client.Do(req)