Bump version to 0.1.0-RC.12 [skip ci]

With AUTHENTIK_QBIT_TOKENS off the check could only ever report UNKNOWN
"not configured", and core has no way to remove a registered check, so the
health page showed a permanent UNKNOWN row. Register it only when
getTokensEnabled() is true; the other checks are unchanged.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

pom.xml

@@ -21,7 +21,7 @@
       <qqq.version>4.1.0-RC.26</qqq.version> <!-- feeds qbit-build-parent's qqq-bom-pom import -->
       <qbit.guardrails.enforce>true</qbit.guardrails.enforce>
       <qbit.guardrails.strictUiApiRoutes>true</qbit.guardrails.strictUiApiRoutes>
-      <revision>0.1.0-SNAPSHOT</revision>
+      <revision>0.1.0-RC.12</revision>
       <maven.compiler.source>21</maven.compiler.source>
       <maven.compiler.target>21</maven.compiler.target>
       <jacoco.version>0.8.15</jacoco.version>

src/main/java/com/kingsrook/qbits/authentik/health/AuthentikHealthChecks.java

@@ -65,7 +65,13 @@ public final class AuthentikHealthChecks
    public static void register(QInstance instance, AuthentikQBitConfig config)
    {
       HealthChecksMetaData registry = HealthChecksMetaData.ofOrWithNew(instance);
-      for(String name : List.of("api", "api_token", "mapper", "token_broker"))
+      /////////////////////////////////////////////////////////////////////////////////////////////////
+      // the token broker is only used when tokens are on; with tokens off a registered check        //
+      // could only ever report UNKNOWN "not configured", and core cannot remove a registered check. //
+      /////////////////////////////////////////////////////////////////////////////////////////////////
+      List<String> names = Boolean.TRUE.equals(config.getTokensEnabled())
+         ? List.of("api", "api_token", "mapper", "token_broker") : List.of("api", "api_token", "mapper");
+      for(String name : names)
       {
          registry.withCheck(new HealthCheckMetaData().withName("authentik." + name).withLabel("Authentik " + name)
             .withComponent("authentik").withCategory(HealthCategory.IDENTITY).withKind(HealthCheckKind.DEPENDENCY)

src/test/java/com/kingsrook/qbits/authentik/health/AuthentikHealthChecksTest.java

@@ -117,6 +117,33 @@ class AuthentikHealthChecksTest
 
 
 
+   /*******************************************************************************
+    ** With tokens off the token broker is not used, so no token_broker check is
+    ** registered (it could only ever show UNKNOWN "not configured"); the rest stay.
+    *******************************************************************************/
+   @Test
+   void registrationWithTokensOffOmitsTokenBroker() throws QException
+   {
+      QInstance tokensOff = AuthentikTestSupport.produce(AuthentikTestSupport.unitConfig().withApiToken(SECRET).withTokensEnabled(false));
+      var checks = HealthChecksMetaData.ofOrWithNew(tokensOff).resolveAll(tokensOff);
+      assertThat(checks).extracting(c -> c.getName()).containsExactly("authentik.api", "authentik.api_token", "authentik.mapper");
+   }
+
+
+
+   /*******************************************************************************
+    ** With tokens explicitly on the token broker check is registered as before.
+    *******************************************************************************/
+   @Test
+   void registrationWithTokensOnKeepsTokenBroker() throws QException
+   {
+      QInstance tokensOn = AuthentikTestSupport.produce(AuthentikTestSupport.unitConfig().withApiToken(SECRET).withTokensEnabled(true));
+      var checks = HealthChecksMetaData.ofOrWithNew(tokensOn).resolveAll(tokensOn);
+      assertThat(checks).extracting(c -> c.getName()).containsExactly("authentik.api", "authentik.api_token", "authentik.mapper", "authentik.token_broker");
+   }
+
+
+
    /*******************************************************************************
     ** Version responses are allowlisted before entering details.
     *******************************************************************************/