fix: finish 2.9.0 plugin moves and get every check green

plugins/step-ca/src/backend/client.ts

@@ -396,3 +396,22 @@ export function parseSshCertificate(line: string): SshCertificateInfo {
     validBefore: toDate(validBefore),
   };
 }
+
+/** Save-time checks for the admin page: a bad URL or fingerprint says so there. */
+export function validateCaSettings(
+  values: Record<string, unknown>,
+): Record<string, string> {
+  const errors: Record<string, string> = {};
+  const check = (key: string, normalize: (raw: string) => string) => {
+    const value = values[key];
+    if (typeof value !== "string" || value.trim() === "") return;
+    try {
+      normalize(value);
+    } catch (error) {
+      errors[key] = error instanceof Error ? error.message : String(error);
+    }
+  };
+  check("caUrl", normalizeCaUrl);
+  check("fingerprint", normalizeFingerprint);
+  return errors;
+}

plugins/step-ca/src/backend/index.ts

@@ -6,8 +6,10 @@ import { createRuntime } from "./runtime.js";
 import { createAuthSessions } from "./auth-session.js";
 import { createStepCaProvider } from "./provider.js";
 import { PUBLIC_PATHS, registerRoutes } from "./routes.js";
+import { validateCaSettings } from "./client.js";
 
 export async function activate(ctx: PluginContext) {
+  ctx.settings.onValidate("admin", validateCaSettings);
   const table = await ctx.db.define(certsTable);
   const certs = createCertStore(ctx, table);