// Phase-5 stub. Replaced by real implementation in Phase 6.
//
// This stub only satisfies the compile-time surface that Server depends on:
// an Init that does nothing and a Middleware that is the identity passthrough.
// Phase 6 replaces this file with the forward-auth + OIDC implementation.
package auth

import (
	"context"
	"net/http"
)

// Authenticator is a no-op steward service. The real Phase-6 version will
// hold OIDC verifier state and forward-auth config.
type Authenticator struct{}

// Init satisfies the steward Service contract.
func (a *Authenticator) Init(_ context.Context) error { return nil }

// Middleware returns next unchanged. Phase 6 replaces this with the
// authentication chain.
func (a *Authenticator) Middleware(next http.Handler) http.Handler { return next }