8998328342

Committed 08 May 2024 07:59AM UTC coverage: 57.396% (-0.07%) from 57.468%

Build Type

github

Committed by

Commit Message

fix: add send sms hook as test

Pull Request Pull Request #2129: feat: add HTTP hook Secret Configuration

Run Details

26 of 56 new or added lines in 2 files covered. (46.43%)

10 existing lines in 3 files now uncovered.

6402 of 11154 relevant lines covered (57.4%)

656.46 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

56.0

/internal/utils/config.go

package utils

import (
        "bytes"
        _ "embed"
        "fmt"
        "net/url"
        "os"
        "path/filepath"
        "regexp"
        "strings"
        "text/template"
        "time"

        "github.com/BurntSushi/toml"
        "github.com/docker/go-units"
        "github.com/go-errors/errors"
        "github.com/golang-jwt/jwt/v5"
        "github.com/joho/godotenv"
        "github.com/spf13/afero"
        "github.com/spf13/viper"
        "golang.org/x/mod/semver"
)

var (
        NetId         string
        DbId          string
        ConfigId      string
        KongId        string
        GotrueId      string
        InbucketId    string
        RealtimeId    string
        RestId        string
        StorageId     string
        ImgProxyId    string
        DifferId      string
        PgmetaId      string
        StudioId      string
        EdgeRuntimeId string
        LogflareId    string
        VectorId      string
        PoolerId      string

        DbAliases          = []string{"db", "db.supabase.internal"}
        KongAliases        = []string{"kong", "api.supabase.internal"}
        GotrueAliases      = []string{"auth"}
        InbucketAliases    = []string{"inbucket"}
        RealtimeAliases    = []string{"realtime", Config.Realtime.TenantId}
        RestAliases        = []string{"rest"}
        StorageAliases     = []string{"storage"}
        ImgProxyAliases    = []string{"imgproxy"}
        PgmetaAliases      = []string{"pg_meta"}
        StudioAliases      = []string{"studio"}
        EdgeRuntimeAliases = []string{"edge_runtime"}
        LogflareAliases    = []string{"analytics"}
        VectorAliases      = []string{"vector"}
        PoolerAliases      = []string{"pooler"}

        InitialSchemaSql string
        //go:embed templates/initial_schemas/13.sql
        InitialSchemaPg13Sql string
        //go:embed templates/initial_schemas/14.sql
        InitialSchemaPg14Sql string

        //go:embed templates/init_config.toml
        initConfigEmbed    string
        initConfigTemplate = template.Must(template.New("initConfig").Parse(initConfigEmbed))
        invalidProjectId   = regexp.MustCompile("[^a-zA-Z0-9_.-]+")
        envPattern         = regexp.MustCompile(`^env\((.*)\)$`)
)

func GetId(name string) string {
        return "supabase_" + name + "_" + Config.ProjectId
}

func UpdateDockerIds() {
        NetId = GetId("network")
        DbId = GetId(DbAliases[0])
        ConfigId = GetId("config")
        KongId = GetId(KongAliases[0])
        GotrueId = GetId(GotrueAliases[0])
        InbucketId = GetId(InbucketAliases[0])
        RealtimeId = GetId(RealtimeAliases[0])
        RestId = GetId(RestAliases[0])
        StorageId = GetId(StorageAliases[0])
        ImgProxyId = GetId(ImgProxyAliases[0])
        DifferId = GetId("differ")
        PgmetaId = GetId(PgmetaAliases[0])
        StudioId = GetId(StudioAliases[0])
        EdgeRuntimeId = GetId(EdgeRuntimeAliases[0])
        LogflareId = GetId(LogflareAliases[0])
        VectorId = GetId(VectorAliases[0])
        PoolerId = GetId(PoolerAliases[0])
}

// Type for turning human-friendly bytes string ("5MB", "32kB") into an int64 during toml decoding.
type sizeInBytes int64

func (s *sizeInBytes) UnmarshalText(text []byte) error {
        size, err := units.RAMInBytes(string(text))
        if err == nil {
                *s = sizeInBytes(size)
        }
        return err
}

func (s sizeInBytes) MarshalText() (text []byte, err error) {
        return []byte(units.BytesSize(float64(s))), nil
}

type LogflareBackend string

const (
        LogflarePostgres LogflareBackend = "postgres"
        LogflareBigQuery LogflareBackend = "bigquery"
)

type PoolMode string

const (
        TransactionMode PoolMode = "transaction"
        SessionMode     PoolMode = "session"
)

type AddressFamily string

const (
        AddressIPv6 AddressFamily = "IPv6"
        AddressIPv4 AddressFamily = "IPv4"
)

func ToRealtimeEnv(addr AddressFamily) string {
        if addr == AddressIPv6 {
                return "-proto_dist inet6_tcp"
        }
        return "-proto_dist inet_tcp"
}

type CustomClaims struct {
        // Overrides Issuer to maintain json order when marshalling
        Issuer string `json:"iss,omitempty"`
        Ref    string `json:"ref,omitempty"`
        Role   string `json:"role"`
        jwt.RegisteredClaims
}

const (
        defaultJwtSecret = "super-secret-jwt-token-with-at-least-32-characters-long"
        defaultJwtExpiry = 1983812996
)

func (c CustomClaims) NewToken() *jwt.Token {
        if c.ExpiresAt == nil {
                c.ExpiresAt = jwt.NewNumericDate(time.Unix(defaultJwtExpiry, 0))
        }
        if len(c.Issuer) == 0 {
                c.Issuer = "supabase-demo"
        }
        return jwt.NewWithClaims(jwt.SigningMethodHS256, c)
}

var Config = config{
        Api: api{
                Image: PostgrestImage,
        },
        Db: db{
                Image:    Pg15Image,
                Password: "postgres",
                RootKey:  "d4dc5b6d4a1d6a10b2c1e76112c994d65db7cec380572cc1839624d4be3fa275",
        },
        Realtime: realtime{
                IpVersion:       AddressIPv4,
                MaxHeaderLength: 4096,
                TenantId:        "realtime-dev",
                EncryptionKey:   "supabaserealtime",
                SecretKeyBase:   "EAx3IQ/wRG1v47ZD4NE4/9RzBI8Jmil3x0yhcW4V2NHBP6c2iPIzwjofi2Ep4HIG",
        },
        Storage: storage{
                Image: StorageImage,
                S3Credentials: storageS3Credentials{
                        AccessKeyId:     "625729a08b95bf1b7ff351a663f3a23c",
                        SecretAccessKey: "850181e4652dd023b7a98c58ae0d2d34bd487ee0cc3254aed6eda37307425907",
                        Region:          "local",
                },
                ImageTransformation: imageTransformation{
                        Enabled: true,
                },
        },
        Auth: auth{
                Image: GotrueImage,
                Email: email{
                        Template: map[string]emailTemplate{
                                "invite":       {},
                                "confirmation": {},
                                "recovery":     {},
                                "magic_link":   {},
                                "email_change": {},
                        },
                },
                External: map[string]provider{
                        "apple":         {},
                        "azure":         {},
                        "bitbucket":     {},
                        "discord":       {},
                        "facebook":      {},
                        "github":        {},
                        "gitlab":        {},
                        "google":        {},
                        "keycloak":      {},
                        "linkedin":      {}, // TODO: remove this field in v2
                        "linkedin_oidc": {},
                        "notion":        {},
                        "twitch":        {},
                        "twitter":       {},
                        "slack":         {},
                        "spotify":       {},
                        "workos":        {},
                        "zoom":          {},
                },
                JwtSecret: defaultJwtSecret,
        },
        Analytics: analytics{
                ApiKey: "api-key",
                // Defaults to bigquery for backwards compatibility with existing config.toml
                Backend: LogflareBigQuery,
        },
}

// We follow these rules when adding new config:
//  1. Update init_config.toml (and init_config.test.toml) with the new key, default value, and comments to explain usage.
//  2. Update config struct with new field and toml tag (spelled in snake_case).
//  3. Add custom field validations to LoadConfigFS function for eg. integer range checks.
//
// If you are adding new user defined secrets, such as OAuth provider secret, the default value in
// init_config.toml should be an env var substitution. For example,
//
// > secret = "env(SUPABASE_AUTH_EXTERNAL_APPLE_SECRET)"
//
// If you are adding an internal config or secret that doesn't need to be overridden by the user,
// exclude the field from toml serialization. For example,
//
//        type auth struct {
//                AnonKey string `toml:"-" mapstructure:"anon_key"`
//        }
//
// Use `mapstructure:"anon_key"` tag only if you want inject values from a predictable environment
// variable, such as SUPABASE_AUTH_ANON_KEY.
//
// Default values for internal configs should be added to `var Config` initializer.
type (
        config struct {
                ProjectId    string              `toml:"project_id"`
                Hostname     string              `toml:"-"`
                Api          api                 `toml:"api"`
                Db           db                  `toml:"db" mapstructure:"db"`
                Realtime     realtime            `toml:"realtime"`
                Studio       studio              `toml:"studio"`
                Inbucket     inbucket            `toml:"inbucket"`
                Storage      storage             `toml:"storage"`
                Auth         auth                `toml:"auth" mapstructure:"auth"`
                Functions    map[string]function `toml:"functions"`
                Analytics    analytics           `toml:"analytics"`
                Experimental experimental        `toml:"experimental" mapstructure:"-"`
                // TODO
                // Scripts   scripts
        }

        api struct {
                Enabled         bool     `toml:"enabled"`
                Image           string   `toml:"-"`
                Port            uint16   `toml:"port"`
                Schemas         []string `toml:"schemas"`
                ExtraSearchPath []string `toml:"extra_search_path"`
                MaxRows         uint     `toml:"max_rows"`
        }

        db struct {
                Image        string `toml:"-"`
                Port         uint16 `toml:"port"`
                ShadowPort   uint16 `toml:"shadow_port"`
                MajorVersion uint   `toml:"major_version"`
                Password     string `toml:"-"`
                RootKey      string `toml:"-" mapstructure:"root_key"`
                Pooler       pooler `toml:"pooler"`
        }

        pooler struct {
                Enabled          bool     `toml:"enabled"`
                Port             uint16   `toml:"port"`
                PoolMode         PoolMode `toml:"pool_mode"`
                DefaultPoolSize  uint     `toml:"default_pool_size"`
                MaxClientConn    uint     `toml:"max_client_conn"`
                ConnectionString string   `toml:"-"`
        }

        realtime struct {
                Enabled         bool          `toml:"enabled"`
                IpVersion       AddressFamily `toml:"ip_version"`
                MaxHeaderLength uint          `toml:"max_header_length"`
                TenantId        string        `toml:"-"`
                EncryptionKey   string        `toml:"-"`
                SecretKeyBase   string        `toml:"-"`
        }

        studio struct {
                Enabled      bool   `toml:"enabled"`
                Port         uint16 `toml:"port"`
                ApiUrl       string `toml:"api_url"`
                OpenaiApiKey string `toml:"openai_api_key"`
        }

        inbucket struct {
                Enabled  bool   `toml:"enabled"`
                Port     uint16 `toml:"port"`
                SmtpPort uint16 `toml:"smtp_port"`
                Pop3Port uint16 `toml:"pop3_port"`
        }

        storage struct {
                Enabled             bool                 `toml:"enabled"`
                Image               string               `toml:"-"`
                FileSizeLimit       sizeInBytes          `toml:"file_size_limit"`
                S3Credentials       storageS3Credentials `toml:"-"`
                ImageTransformation imageTransformation  `toml:"image_transformation"`
        }

        imageTransformation struct {
                Enabled bool `toml:"enabled"`
        }

        storageS3Credentials struct {
                AccessKeyId     string `toml:"-"`
                SecretAccessKey string `toml:"-"`
                Region          string `toml:"-"`
        }

        auth struct {
                Enabled                bool     `toml:"enabled"`
                Image                  string   `toml:"-"`
                SiteUrl                string   `toml:"site_url"`
                AdditionalRedirectUrls []string `toml:"additional_redirect_urls"`

                JwtExpiry                  uint `toml:"jwt_expiry"`
                EnableRefreshTokenRotation bool `toml:"enable_refresh_token_rotation"`
                RefreshTokenReuseInterval  uint `toml:"refresh_token_reuse_interval"`
                EnableManualLinking        bool `toml:"enable_manual_linking"`
                Hook                       hook `toml:"hook"`

                EnableSignup           bool  `toml:"enable_signup"`
                EnableAnonymousSignIns bool  `toml:"enable_anonymous_sign_ins"`
                Email                  email `toml:"email"`
                Sms                    sms   `toml:"sms"`
                External               map[string]provider

                // Custom secrets can be injected from .env file
                JwtSecret      string `toml:"-" mapstructure:"jwt_secret"`
                AnonKey        string `toml:"-" mapstructure:"anon_key"`
                ServiceRoleKey string `toml:"-" mapstructure:"service_role_key"`
        }

        email struct {
                EnableSignup         bool                     `toml:"enable_signup"`
                DoubleConfirmChanges bool                     `toml:"double_confirm_changes"`
                EnableConfirmations  bool                     `toml:"enable_confirmations"`
                Template             map[string]emailTemplate `toml:"template"`
                MaxFrequency         time.Duration            `toml:"max_frequency"`
        }

        emailTemplate struct {
                Subject     string `toml:"subject"`
                ContentPath string `toml:"content_path"`
        }

        sms struct {
                EnableSignup        bool              `toml:"enable_signup"`
                EnableConfirmations bool              `toml:"enable_confirmations"`
                Template            string            `toml:"template"`
                Twilio              twilioConfig      `toml:"twilio" mapstructure:"twilio"`
                TwilioVerify        twilioConfig      `toml:"twilio_verify" mapstructure:"twilio_verify"`
                Messagebird         messagebirdConfig `toml:"messagebird" mapstructure:"messagebird"`
                Textlocal           textlocalConfig   `toml:"textlocal" mapstructure:"textlocal"`
                Vonage              vonageConfig      `toml:"vonage" mapstructure:"vonage"`
                TestOTP             map[string]string `toml:"test_otp"`
                MaxFrequency        time.Duration     `toml:"max_frequency"`
        }

        hook struct {
                MFAVerificationAttempt      hookConfig `toml:"mfa_verification_attempt"`
                PasswordVerificationAttempt hookConfig `toml:"password_verification_attempt"`
                CustomAccessToken           hookConfig `toml:"custom_access_token"`
                SendSMS                     hookConfig `toml:"send_sms"`
                SendEmail                   hookConfig `toml:"send_email"`
        }

        hookConfig struct {
                Enabled bool   `toml:"enabled"`
                URI     string `toml:"uri"`
                Secrets string `toml:"secrets"`
        }

        twilioConfig struct {
                Enabled           bool   `toml:"enabled"`
                AccountSid        string `toml:"account_sid"`
                MessageServiceSid string `toml:"message_service_sid"`
                AuthToken         string `toml:"auth_token" mapstructure:"auth_token"`
        }

        messagebirdConfig struct {
                Enabled    bool   `toml:"enabled"`
                Originator string `toml:"originator"`
                AccessKey  string `toml:"access_key" mapstructure:"access_key"`
        }

        textlocalConfig struct {
                Enabled bool   `toml:"enabled"`
                Sender  string `toml:"sender"`
                ApiKey  string `toml:"api_key" mapstructure:"api_key"`
        }

        vonageConfig struct {
                Enabled   bool   `toml:"enabled"`
                From      string `toml:"from"`
                ApiKey    string `toml:"api_key" mapstructure:"api_key"`
                ApiSecret string `toml:"api_secret" mapstructure:"api_secret"`
        }

        provider struct {
                Enabled        bool   `toml:"enabled"`
                ClientId       string `toml:"client_id"`
                Secret         string `toml:"secret"`
                Url            string `toml:"url"`
                RedirectUri    string `toml:"redirect_uri"`
                SkipNonceCheck bool   `toml:"skip_nonce_check"`
        }

        function struct {
                VerifyJWT *bool  `toml:"verify_jwt"`
                ImportMap string `toml:"import_map"`
        }

        analytics struct {
                Enabled          bool            `toml:"enabled"`
                Port             uint16          `toml:"port"`
                Backend          LogflareBackend `toml:"backend"`
                VectorPort       uint16          `toml:"vector_port"`
                GcpProjectId     string          `toml:"gcp_project_id"`
                GcpProjectNumber string          `toml:"gcp_project_number"`
                GcpJwtPath       string          `toml:"gcp_jwt_path"`
                ApiKey           string          `toml:"-" mapstructure:"api_key"`
        }

        experimental struct {
                OrioleDBVersion string `toml:"orioledb_version"`
                S3Host          string `toml:"s3_host"`
                S3Region        string `toml:"s3_region"`
                S3AccessKey     string `toml:"s3_access_key"`
                S3SecretKey     string `toml:"s3_secret_key"`
        }

        // TODO
        // scripts struct {
        //         BeforeMigrations string `toml:"before_migrations"`
        //         AfterMigrations  string `toml:"after_migrations"`
        // }
)

func (h *hookConfig) HandleHook(hookType string) error {
        // If not enabled do nothing
        if !h.Enabled {
                return nil
        }
        if h.URI == "" {
                return errors.Errorf("missing required field in config: auth.hook.%s.uri", hookType)
        }
        if err := validateHookURI(h.URI, hookType); err != nil {
                return err
        }
        var err error
        if h.Secrets, err = maybeLoadEnv(h.Secrets); err != nil {
                return errors.Errorf("missing required field in config: auth.hook.%s.secrets", hookType)
        }
        return nil
}

func LoadConfigFS(fsys afero.Fs) error {
        // Load default values
        var buf bytes.Buffer
        if err := initConfigTemplate.Execute(&buf, nil); err != nil {
                return errors.Errorf("failed to initialise config template: %w", err)
        }
        dec := toml.NewDecoder(&buf)
        if _, err := dec.Decode(&Config); err != nil {
                return errors.Errorf("failed to decode config template: %w", err)
        }
        // Load user defined config
        if metadata, err := toml.DecodeFS(afero.NewIOFS(fsys), ConfigPath, &Config); err != nil {
                CmdSuggestion = fmt.Sprintf("Have you set up the project with %s?", Aqua("supabase init"))
                cwd, osErr := os.Getwd()
                if osErr != nil {
                        cwd = "current directory"
                }
                return errors.Errorf("cannot read config in %s: %w", Bold(cwd), err)
        } else if undecoded := metadata.Undecoded(); len(undecoded) > 0 {
                fmt.Fprintf(os.Stderr, "Unknown config fields: %+v\n", undecoded)
        }
        // Load secrets from .env file
        if err := loadDefaultEnv(); err != nil {
                return err
        }
        if err := viper.Unmarshal(&Config); err != nil {
                return errors.Errorf("failed to parse env to config: %w", err)
        }

        // Generate JWT tokens
        if len(Config.Auth.AnonKey) == 0 {
                anonToken := CustomClaims{Role: "anon"}.NewToken()
                if signed, err := anonToken.SignedString([]byte(Config.Auth.JwtSecret)); err != nil {
                        return errors.Errorf("failed to generate anon key: %w", err)
                } else {
                        Config.Auth.AnonKey = signed
                }
        }
        if len(Config.Auth.ServiceRoleKey) == 0 {
                anonToken := CustomClaims{Role: "service_role"}.NewToken()
                if signed, err := anonToken.SignedString([]byte(Config.Auth.JwtSecret)); err != nil {
                        return errors.Errorf("failed to generate service_role key: %w", err)
                } else {
                        Config.Auth.ServiceRoleKey = signed
                }
        }

        // Process decoded TOML.
        {
                if Config.ProjectId == "" {
                        return errors.New("Missing required field in config: project_id")
                }
                Config.Hostname = GetHostname()
                UpdateDockerIds()
                // Validate api config
                if Config.Api.Port == 0 {
                        return errors.New("Missing required field in config: api.port")
                }
                if Config.Api.Enabled {
                        if version, err := afero.ReadFile(fsys, RestVersionPath); err == nil && len(version) > 0 && Config.Db.MajorVersion > 14 {
                                Config.Api.Image = replaceImageTag(PostgrestImage, string(version))
                        }
                }
                // Append required schemas if they are missing
                Config.Api.Schemas = RemoveDuplicates(append([]string{"public", "storage"}, Config.Api.Schemas...))
                Config.Api.ExtraSearchPath = RemoveDuplicates(append([]string{"public"}, Config.Api.ExtraSearchPath...))
                // Validate db config
                if Config.Db.Port == 0 {
                        return errors.New("Missing required field in config: db.port")
                }
                switch Config.Db.MajorVersion {
                case 0:
                        return errors.New("Missing required field in config: db.major_version")
                case 12:
                        return errors.New("Postgres version 12.x is unsupported. To use the CLI, either start a new project or follow project migration steps here: https://supabase.com/docs/guides/database#migrating-between-projects.")
                case 13:
                        Config.Db.Image = Pg13Image
                        InitialSchemaSql = InitialSchemaPg13Sql
                case 14:
                        Config.Db.Image = Pg14Image
                        InitialSchemaSql = InitialSchemaPg14Sql
                case 15:
                        if len(Config.Experimental.OrioleDBVersion) > 0 {
                                Config.Db.Image = "supabase/postgres:orioledb-" + Config.Experimental.OrioleDBVersion
                                var err error
                                if Config.Experimental.S3Host, err = maybeLoadEnv(Config.Experimental.S3Host); err != nil {
                                        return err
                                }
                                if Config.Experimental.S3Region, err = maybeLoadEnv(Config.Experimental.S3Region); err != nil {
                                        return err
                                }
                                if Config.Experimental.S3AccessKey, err = maybeLoadEnv(Config.Experimental.S3AccessKey); err != nil {
                                        return err
                                }
                                if Config.Experimental.S3SecretKey, err = maybeLoadEnv(Config.Experimental.S3SecretKey); err != nil {
                                        return err
                                }
                        } else if version, err := afero.ReadFile(fsys, PostgresVersionPath); err == nil {
                                if strings.HasPrefix(string(version), "15.") && semver.Compare(string(version[3:]), "1.0.55") >= 0 {
                                        Config.Db.Image = replaceImageTag(Pg15Image, string(version))
                                }
                        }
                default:
                        return errors.Errorf("Failed reading config: Invalid %s: %v.", Aqua("db.major_version"), Config.Db.MajorVersion)
                }
                // Validate pooler config
                if Config.Db.Pooler.Enabled {
                        allowed := []PoolMode{TransactionMode, SessionMode}
                        if !SliceContains(allowed, Config.Db.Pooler.PoolMode) {
                                return errors.Errorf("Invalid config for db.pooler.pool_mode. Must be one of: %v", allowed)
                        }
                }
                if connString, err := afero.ReadFile(fsys, PoolerUrlPath); err == nil && len(connString) > 0 {
                        Config.Db.Pooler.ConnectionString = string(connString)
                }
                // Validate realtime config
                if Config.Realtime.Enabled {
                        allowed := []AddressFamily{AddressIPv6, AddressIPv4}
                        if !SliceContains(allowed, Config.Realtime.IpVersion) {
                                return errors.Errorf("Invalid config for realtime.ip_version. Must be one of: %v", allowed)
                        }
                }
                // Validate storage config
                if Config.Storage.Enabled {
                        if version, err := afero.ReadFile(fsys, StorageVersionPath); err == nil && len(version) > 0 && Config.Db.MajorVersion > 14 {
                                Config.Storage.Image = replaceImageTag(StorageImage, string(version))
                        }
                }
                // Validate studio config
                if Config.Studio.Enabled {
                        if Config.Studio.Port == 0 {
                                return errors.New("Missing required field in config: studio.port")
                        }
                        Config.Studio.OpenaiApiKey, _ = maybeLoadEnv(Config.Studio.OpenaiApiKey)
                }
                // Validate email config
                if Config.Inbucket.Enabled {
                        if Config.Inbucket.Port == 0 {
                                return errors.New("Missing required field in config: inbucket.port")
                        }
                }

                // Validate auth config
                if Config.Auth.Enabled {
                        if Config.Auth.SiteUrl == "" {
                                return errors.New("Missing required field in config: auth.site_url")
                        }
                        if version, err := afero.ReadFile(fsys, GotrueVersionPath); err == nil && len(version) > 0 && Config.Db.MajorVersion > 14 {
                                Config.Auth.Image = replaceImageTag(GotrueImage, string(version))
                        }
                        // Validate email template
                        for _, tmpl := range Config.Auth.Email.Template {
                                if len(tmpl.ContentPath) > 0 {
                                        if _, err := fsys.Stat(tmpl.ContentPath); err != nil {
                                                return errors.Errorf("failed to read file info: %w", err)
                                        }
                                }
                        }
                        // Validate sms config
                        var err error
                        if Config.Auth.Sms.Twilio.Enabled {
                                if len(Config.Auth.Sms.Twilio.AccountSid) == 0 {
                                        return errors.New("Missing required field in config: auth.sms.twilio.account_sid")
                                }
                                if len(Config.Auth.Sms.Twilio.MessageServiceSid) == 0 {
                                        return errors.New("Missing required field in config: auth.sms.twilio.message_service_sid")
                                }
                                if len(Config.Auth.Sms.Twilio.AuthToken) == 0 {
                                        return errors.New("Missing required field in config: auth.sms.twilio.auth_token")
                                }
                                if Config.Auth.Sms.Twilio.AuthToken, err = maybeLoadEnv(Config.Auth.Sms.Twilio.AuthToken); err != nil {
                                        return err
                                }
                        }
                        if Config.Auth.Sms.TwilioVerify.Enabled {
                                if len(Config.Auth.Sms.TwilioVerify.AccountSid) == 0 {
                                        return errors.New("Missing required field in config: auth.sms.twilio_verify.account_sid")
                                }
                                if len(Config.Auth.Sms.TwilioVerify.MessageServiceSid) == 0 {
                                        return errors.New("Missing required field in config: auth.sms.twilio_verify.message_service_sid")
                                }
                                if len(Config.Auth.Sms.TwilioVerify.AuthToken) == 0 {
                                        return errors.New("Missing required field in config: auth.sms.twilio_verify.auth_token")
                                }
                                if Config.Auth.Sms.TwilioVerify.AuthToken, err = maybeLoadEnv(Config.Auth.Sms.TwilioVerify.AuthToken); err != nil {
                                        return err
                                }
                        }
                        if Config.Auth.Sms.Messagebird.Enabled {
                                if len(Config.Auth.Sms.Messagebird.Originator) == 0 {
                                        return errors.New("Missing required field in config: auth.sms.messagebird.originator")
                                }
                                if len(Config.Auth.Sms.Messagebird.AccessKey) == 0 {
                                        return errors.New("Missing required field in config: auth.sms.messagebird.access_key")
                                }
                                if Config.Auth.Sms.Messagebird.AccessKey, err = maybeLoadEnv(Config.Auth.Sms.Messagebird.AccessKey); err != nil {
                                        return err
                                }
                        }
                        if Config.Auth.Sms.Textlocal.Enabled {
                                if len(Config.Auth.Sms.Textlocal.Sender) == 0 {
                                        return errors.New("Missing required field in config: auth.sms.textlocal.sender")
                                }
                                if len(Config.Auth.Sms.Textlocal.ApiKey) == 0 {
                                        return errors.New("Missing required field in config: auth.sms.textlocal.api_key")
                                }
                                if Config.Auth.Sms.Textlocal.ApiKey, err = maybeLoadEnv(Config.Auth.Sms.Textlocal.ApiKey); err != nil {
                                        return err
                                }
                        }
                        if Config.Auth.Sms.Vonage.Enabled {
                                if len(Config.Auth.Sms.Vonage.From) == 0 {
                                        return errors.New("Missing required field in config: auth.sms.vonage.from")
                                }
                                if len(Config.Auth.Sms.Vonage.ApiKey) == 0 {
                                        return errors.New("Missing required field in config: auth.sms.vonage.api_key")
                                }
                                if len(Config.Auth.Sms.Vonage.ApiSecret) == 0 {
                                        return errors.New("Missing required field in config: auth.sms.vonage.api_secret")
                                }
                                if Config.Auth.Sms.Vonage.ApiKey, err = maybeLoadEnv(Config.Auth.Sms.Vonage.ApiKey); err != nil {
                                        return err
                                }
                                if Config.Auth.Sms.Vonage.ApiSecret, err = maybeLoadEnv(Config.Auth.Sms.Vonage.ApiSecret); err != nil {
                                        return err
                                }
                        }
                        if err := Config.Auth.Hook.MFAVerificationAttempt.HandleHook("mfa_verification_attempt"); err != nil {
                                return err
                        }
                        if err := Config.Auth.Hook.PasswordVerificationAttempt.HandleHook("password_verification_attempt"); err != nil {
                                return err
                        }
                        if err := Config.Auth.Hook.CustomAccessToken.HandleHook("custom_access_token"); err != nil {
                                return err
                        }
                        if err := Config.Auth.Hook.SendSMS.HandleHook("send_sms"); err != nil {
                                return err
                        }
                        if err := Config.Auth.Hook.SendEmail.HandleHook("send_email"); err != nil {
                                return err
                        }
                        // Validate oauth config
                        for ext, provider := range Config.Auth.External {
                                if !provider.Enabled {
                                        continue
                                }
                                if provider.ClientId == "" {
                                        return errors.Errorf("Missing required field in config: auth.external.%s.client_id", ext)
                                }
                                if !SliceContains([]string{"apple", "google"}, ext) && provider.Secret == "" {
                                        return errors.Errorf("Missing required field in config: auth.external.%s.secret", ext)
                                }
                                if provider.ClientId, err = maybeLoadEnv(provider.ClientId); err != nil {
                                        return err
                                }
                                if provider.Secret, err = maybeLoadEnv(provider.Secret); err != nil {
                                        return err
                                }
                                if provider.RedirectUri, err = maybeLoadEnv(provider.RedirectUri); err != nil {
                                        return err
                                }
                                if provider.Url, err = maybeLoadEnv(provider.Url); err != nil {
                                        return err
                                }
                                Config.Auth.External[ext] = provider
                        }
                }
        }
        // Validate functions config
        for name, functionConfig := range Config.Functions {
                if functionConfig.VerifyJWT == nil {
                        verifyJWT := true
                        functionConfig.VerifyJWT = &verifyJWT
                        Config.Functions[name] = functionConfig
                }
        }
        // Validate logflare config
        if Config.Analytics.Enabled {
                switch Config.Analytics.Backend {
                case LogflareBigQuery:
                        if len(Config.Analytics.GcpProjectId) == 0 {
                                return errors.New("Missing required field in config: analytics.gcp_project_id")
                        }
                        if len(Config.Analytics.GcpProjectNumber) == 0 {
                                return errors.New("Missing required field in config: analytics.gcp_project_number")
                        }
                        if len(Config.Analytics.GcpJwtPath) == 0 {
                                return errors.New("Path to GCP Service Account Key must be provided in config, relative to config.toml: analytics.gcp_jwt_path")
                        }
                case LogflarePostgres:
                        break
                default:
                        allowed := []LogflareBackend{LogflarePostgres, LogflareBigQuery}
                        return errors.Errorf("Invalid config for analytics.backend. Must be one of: %v", allowed)
                }
        }
        return nil
}

func maybeLoadEnv(s string) (string, error) {
        matches := envPattern.FindStringSubmatch(s)
        if len(matches) == 0 {
                return s, nil
        }

        envName := matches[1]
        if value := os.Getenv(envName); value != "" {
                return value, nil
        }

        return "", errors.Errorf(`Error evaluating "%s": environment variable %s is unset.`, s, envName)
}

func sanitizeProjectId(src string) string {
        // A valid project ID must only contain alphanumeric and special characters _.-
        sanitized := invalidProjectId.ReplaceAllString(src, "_")
        // It must also start with an alphanumeric character
        return strings.TrimLeft(sanitized, "_.-")
}

type InitParams struct {
        ProjectId   string
        UseOrioleDB bool
        Overwrite   bool
}

func InitConfig(params InitParams, fsys afero.Fs) error {
        // Defaults to current directory name as project id
        if len(params.ProjectId) == 0 {
                cwd, err := os.Getwd()
                if err != nil {
                        return errors.Errorf("failed to get working directory: %w", err)
                }
                params.ProjectId = filepath.Base(cwd)
        }
        params.ProjectId = sanitizeProjectId(params.ProjectId)
        // Create config file
        if err := MkdirIfNotExistFS(fsys, filepath.Dir(ConfigPath)); err != nil {
                return err
        }
        flag := os.O_WRONLY | os.O_CREATE
        if params.Overwrite {
                flag |= os.O_TRUNC
        } else {
                flag |= os.O_EXCL
        }
        f, err := fsys.OpenFile(ConfigPath, flag, 0644)
        if err != nil {
                return errors.Errorf("failed to create config file: %w", err)
        }
        defer f.Close()
        // Update from template
        if err := initConfigTemplate.Execute(f, params); err != nil {
                return errors.Errorf("failed to initialise config: %w", err)
        }
        return nil
}

func WriteConfig(fsys afero.Fs, _test bool) error {
        return InitConfig(InitParams{}, fsys)
}

func RemoveDuplicates(slice []string) (result []string) {
        set := make(map[string]struct{})
        for _, item := range slice {
                if _, exists := set[item]; !exists {
                        set[item] = struct{}{}
                        result = append(result, item)
                }
        }
        return result
}

func loadDefaultEnv() error {
        env := viper.GetString("ENV")
        if env == "" {
                env = "development"
        }
        filenames := []string{".env." + env + ".local"}
        if env != "test" {
                filenames = append(filenames, ".env.local")
        }
        filenames = append(filenames, ".env."+env, ".env")
        for _, path := range filenames {
                if err := loadEnvIfExists(path); err != nil {
                        return err
                }
        }
        return nil
}

func loadEnvIfExists(path string) error {
        if err := godotenv.Load(path); err != nil && !errors.Is(err, os.ErrNotExist) {
                return errors.Errorf("failed to load %s: %w", Bold(".env"), err)
        }
        return nil
}

func validateHookURI(uri, hookName string) error {
        parsed, err := url.Parse(uri)
        if err != nil {
                return errors.Errorf("failed to parse template url: %w", err)
        }
        if !(parsed.Scheme == "http" || parsed.Scheme == "https" || parsed.Scheme == "pg-functions") {
                return errors.Errorf("Invalid HTTP hook config: auth.hook.%v should be a Postgres function URI, or a HTTP or HTTPS URL", hookName)
        }
        return nil
}

supabase / cli / 8998328342

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous