15918106629

Committed 27 Jun 2025 04:22AM UTC coverage: 55.52% (-0.03%) from 55.547%

Build # 15918106629

Build Type

Pull #3778

github

Committed by

web-flow

Commit Message

Merge 7c66283db into 2e8672d92

Pull Request Pull Request #3778: chore(deps): bump supabase/realtime from v2.37.9 to v2.37.11 in /pkg/config/templates

Run Details

6065 of 10924 relevant lines covered (55.52%)

6.26 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

12.9

/internal/gen/keys/keys.go

package keys

import (
        "context"
        "crypto/sha256"
        "encoding/hex"
        "fmt"
        "os"
        "strings"

        "github.com/go-errors/errors"
        "github.com/go-git/go-git/v5"
        "github.com/spf13/afero"
        "github.com/supabase/cli/internal/utils"
        "github.com/supabase/cli/pkg/config"
)

type CustomName struct {
        DbHost         string `env:"db.host,default=NEXT_PUBLIC_SUPABASE_URL"`
        DbPassword     string `env:"db.password,default=SUPABASE_DB_PASSWORD"`
        JWTSecret      string `env:"db.password,default=SUPABASE_AUTH_JWT_SECRET"`
        AnonKey        string `env:"auth.anon_key,default=SUPABASE_AUTH_ANON_KEY"`
        ServiceRoleKey string `env:"auth.service_role_key,default=SUPABASE_AUTH_SERVICE_ROLE_KEY"`
}

func Run(ctx context.Context, projectRef, format string, names CustomName, fsys afero.Fs) error {
        branch := GetGitBranch(fsys)
        if err := GenerateSecrets(ctx, projectRef, branch, fsys); err != nil {
                return err
        }
        return utils.EncodeOutput(format, os.Stdout, map[string]string{
                names.DbHost:         fmt.Sprintf("%s-%s.fly.dev", projectRef, branch),
                names.DbPassword:     utils.Config.Db.Password,
                names.JWTSecret:      utils.Config.Auth.JwtSecret.Value,
                names.AnonKey:        utils.Config.Auth.AnonKey.Value,
                names.ServiceRoleKey: utils.Config.Auth.ServiceRoleKey.Value,
        })
}

func GenerateSecrets(ctx context.Context, projectRef, branch string, fsys afero.Fs) error {
        // Load JWT secret from api
        resp, err := utils.GetSupabase().V1GetPostgrestServiceConfigWithResponse(ctx, projectRef)
        if err != nil {
                return errors.Errorf("failed to get postgrest config: %w", err)
        }
        if resp.JSON200 == nil {
                return errors.New("Unexpected error retrieving JWT secret: " + string(resp.Body))
        }
        utils.Config.Auth.JwtSecret.Value = *resp.JSON200.JwtSecret
        // Generate database password
        key := strings.Join([]string{
                projectRef,
                utils.Config.Auth.JwtSecret.Value,
                branch,
        }, ":")
        hash := sha256.Sum256([]byte(key))
        utils.Config.Db.Password = hex.EncodeToString(hash[:])
        // Generate JWT tokens
        anonToken := config.CustomClaims{
                Issuer: "supabase",
                Ref:    projectRef,
                Role:   "anon",
        }.NewToken()
        if utils.Config.Auth.AnonKey.Value, err = anonToken.SignedString([]byte(utils.Config.Auth.JwtSecret.Value)); err != nil {
                return errors.Errorf("failed to sign anon key: %w", err)
        }
        serviceToken := config.CustomClaims{
                Issuer: "supabase",
                Ref:    projectRef,
                Role:   "service_role",
        }.NewToken()
        if utils.Config.Auth.ServiceRoleKey.Value, err = serviceToken.SignedString([]byte(utils.Config.Auth.JwtSecret.Value)); err != nil {
                return errors.Errorf("failed to sign service_role key: %w", err)
        }
        return nil
}

func GetGitBranch(fsys afero.Fs) string {
        return GetGitBranchOrDefault("main", fsys)
}

func GetGitBranchOrDefault(def string, fsys afero.Fs) string {
        head := os.Getenv("GITHUB_HEAD_REF")
        if len(head) > 0 {
                return head
        }
        opts := &git.PlainOpenOptions{DetectDotGit: true}
        if repo, err := git.PlainOpenWithOptions(".", opts); err == nil {
                if ref, err := repo.Head(); err == nil {
                        return ref.Name().Short()
                }
        }
        return def
}

1	package keys
2
3	import (
4	"context"
5	"crypto/sha256"
6	"encoding/hex"
7	"fmt"
8	"os"
9	"strings"
10
11	"github.com/go-errors/errors"
12	"github.com/go-git/go-git/v5"
13	"github.com/spf13/afero"
14	"github.com/supabase/cli/internal/utils"
15	"github.com/supabase/cli/pkg/config"
16	)
17
18	type CustomName struct {
19	DbHost string `env:"db.host,default=NEXT_PUBLIC_SUPABASE_URL"`
20	DbPassword string `env:"db.password,default=SUPABASE_DB_PASSWORD"`
21	JWTSecret string `env:"db.password,default=SUPABASE_AUTH_JWT_SECRET"`
22	AnonKey string `env:"auth.anon_key,default=SUPABASE_AUTH_ANON_KEY"`
23	ServiceRoleKey string `env:"auth.service_role_key,default=SUPABASE_AUTH_SERVICE_ROLE_KEY"`
24	}
25
26	func Run(ctx context.Context, projectRef, format string, names CustomName, fsys afero.Fs) error {	×
27	branch := GetGitBranch(fsys)	×
28	if err := GenerateSecrets(ctx, projectRef, branch, fsys); err != nil {	×
29	return err	×
30	}	×
31	return utils.EncodeOutput(format, os.Stdout, map[string]string{	×
32	names.DbHost: fmt.Sprintf("%s-%s.fly.dev", projectRef, branch),	×
33	names.DbPassword: utils.Config.Db.Password,	×
34	names.JWTSecret: utils.Config.Auth.JwtSecret.Value,	×
35	names.AnonKey: utils.Config.Auth.AnonKey.Value,	×
36	names.ServiceRoleKey: utils.Config.Auth.ServiceRoleKey.Value,	×
37	})	×
38	}
39
40	func GenerateSecrets(ctx context.Context, projectRef, branch string, fsys afero.Fs) error {	×
41	// Load JWT secret from api	×
42	resp, err := utils.GetSupabase().V1GetPostgrestServiceConfigWithResponse(ctx, projectRef)	×
43	if err != nil {	×
44	return errors.Errorf("failed to get postgrest config: %w", err)	×
45	}	×
46	if resp.JSON200 == nil {	×
47	return errors.New("Unexpected error retrieving JWT secret: " + string(resp.Body))	×
48	}	×
49	utils.Config.Auth.JwtSecret.Value = *resp.JSON200.JwtSecret	×
50	// Generate database password	×
51	key := strings.Join([]string{	×
52	projectRef,	×
53	utils.Config.Auth.JwtSecret.Value,	×
54	branch,	×
55	}, ":")	×
56	hash := sha256.Sum256([]byte(key))	×
57	utils.Config.Db.Password = hex.EncodeToString(hash[:])	×
58	// Generate JWT tokens	×
59	anonToken := config.CustomClaims{	×
60	Issuer: "supabase",	×
61	Ref: projectRef,	×
62	Role: "anon",	×
63	}.NewToken()	×
64	if utils.Config.Auth.AnonKey.Value, err = anonToken.SignedString([]byte(utils.Config.Auth.JwtSecret.Value)); err != nil {	×
65	return errors.Errorf("failed to sign anon key: %w", err)	×
66	}	×
67	serviceToken := config.CustomClaims{	×
68	Issuer: "supabase",	×
69	Ref: projectRef,	×
70	Role: "service_role",	×
71	}.NewToken()	×
72	if utils.Config.Auth.ServiceRoleKey.Value, err = serviceToken.SignedString([]byte(utils.Config.Auth.JwtSecret.Value)); err != nil {	×
73	return errors.Errorf("failed to sign service_role key: %w", err)	×
74	}	×
75	return nil	×
76	}
77
78	func GetGitBranch(fsys afero.Fs) string {	2✔
79	return GetGitBranchOrDefault("main", fsys)	2✔
80	}	2✔
81
82	func GetGitBranchOrDefault(def string, fsys afero.Fs) string {	5✔
83	head := os.Getenv("GITHUB_HEAD_REF")	5✔
84	if len(head) > 0 {	10✔
85	return head	5✔
86	}	5✔
87	opts := &git.PlainOpenOptions{DetectDotGit: true}	×
88	if repo, err := git.PlainOpenWithOptions(".", opts); err == nil {	×
89	if ref, err := repo.Head(); err == nil {	×
90	return ref.Name().Short()	×
91	}	×
92	}
93	return def	×
94	}

supabase / cli / 15918106629

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous