Rauthy: build without the FIDO MDS dataset when the download fails

mds.fidoalliance.org rate-limits with 429; upstream embeds an empty
placeholder in that case and refreshes the dataset at runtime.

Author: MickLesk

install/rauthy-install.sh

@@ -27,9 +27,13 @@ cd /opt/rauthy-build
 # The prebuilt UI ships in every release, so Node.js and wasm-pack are not needed
 tar -xf assets/static_html/static_v1.tar.gz
 tar -xf assets/static_html/templates_html.tar.gz
-# A release build needs the FIDO MDS dataset; upstream's converter only builds in debug and its own download times out after 10s
-curl_with_retry "https://mds.fidoalliance.org/" "/opt/rauthy-build/mds.jwt"
-CARGO_PROFILE_DEV_DEBUG=0 $STD cargo run --bin fido-mds-prep -- --source mds.jwt
+# The FIDO MDS dataset is optional at compile time: without it build.rs embeds an empty placeholder and
+# Rauthy's scheduler fetches it at runtime. The alliance rate-limits downloads (429), so this is best-effort.
+if curl_with_retry "https://mds.fidoalliance.org/" "/opt/rauthy-build/mds.jwt"; then
+  CARGO_PROFILE_DEV_DEBUG=0 $STD cargo run --bin fido-mds-prep -- --source mds.jwt
+else
+  msg_warn "FIDO MDS download failed; Rauthy will fetch the dataset at runtime"
+fi
 # Upstream's fat LTO with a single codegen unit takes over an hour and close to 4 GB of RAM on 4 cores
 CARGO_PROFILE_RELEASE_LTO=thin CARGO_PROFILE_RELEASE_CODEGEN_UNITS=16 \
   $STD cargo build --release --bin rauthy