supabase / wrappers
81%

DEFAULT BRANCH: main
Repo Added
Files 66
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH main
branch: main
CHANGE BRANCH
x

coverage: 80.916% (-0.07%) from 80.987%
26991105463

push

github

web-flow 
feat(wasm): per-request credentials from session variables (#604)

* feat(openapi_fdw): session variable auth override for per-request credentials

Adds `auth_token_setting` and `auth_token_prefix` server options to the
OpenAPI FDW, allowing a Postgres session configuration variable to supply
the authentication credential at query time rather than at server creation.

The credential is resolved via `current_setting(name, true)` each time a
request is made, so a security-definer wrapper function can inject a
per-user or per-transaction token via `set_config(..., true)` before
querying the foreign table. An empty or absent setting is a no-op,
preserving any static credential configured at server level.

Implementation:
- Add `query-setting` to the utils WIT interface (v1 + v2)
- Implement `query_setting()` in supabase-wrappers via SPI
- Wire host binding in wasm_fdw/host/utils.rs (v1 + v2)
- Add `auth_token_setting` / `auth_token_prefix` fields to ServerConfig
- Extract `apply_session_token()` as a pure testable helper
- Apply override in `make_request` before each HTTP call
- Add 15 unit tests covering all override edge cases

* test(openapi_fdw): integration test for session-token injection

Adds a pgrx integration test exercising the auth_token_setting path
end-to-end: with a session GUC unset the FDW injects no Authorization
header, and after set_config(...) the resolved token is sent prefixed.

This is the only runtime coverage of the query-setting host function ->
SPI -> guest round-trip; the existing unit tests only cover the pure
apply_session_token helper in isolation.

- wasm_fdw/tests.rs: new #[pg_test] openapi_session_token_injection
  (negative + positive cases) against the local mock on :8096
- dockerfiles/wasm/server.py: add /whoami route that reflects the
  received Authorization header so the test can assert on it

* fix(openapi_fdw): address review feedback

- apply_session_token: match the authorization header case-insensitively
  so ... (continued)

0 of 9 new or added lines in 1 file covered. (0.0%)

1 existing line in 1 file now uncovered.

9468 of 11701 relevant lines covered (80.92%)

70.17 hits per line

Relevant lines Covered
11701 RELEVANT LINES 9468 COVERED LINES
70.17 HITS PER LINE
Source Files on main

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
26991105463 main feat(wasm): per-request credentials from session variables (#604) * feat(openapi_fdw): session variable auth override for per-request credentials Adds `auth_token_setting` and `auth_token_prefix` server options to the OpenAPI FDW, allowing a Pos... push web-flow github
80.92
26933770501 main feat(mongodb): [WRA-22] add MongoDB foreign data wrapper (#606) * feat(mongodb_fdw): add cargo feature and dependencies * ci(mongodb_fdw): add mongo:7 service to native docker-compose * feat(mongodb_fdw): scaffold module, error type, README * ... push web-flow github
80.99
26076674512 main chore: update wasmtime version to 36.0.7 (#602) push web-flow github
81.01
25627781377 main Merge b37ba179b into adfb7a311 Pull #601 web-flow github
81.63
25627664838 main Merge 22d0e7c5d into adfb7a311 Pull #601 web-flow github
81.63
25476086624 main chore: bump Wrappers version to 0.6.1 (#597) push web-flow github
81.01
25302345241 main feat(mysql): add aggregate pushdown support for MySQL FDW (#596) * feat: add aggregate pushdown support for MySQL FDW * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github... push web-flow github
81.01
25217488007 main feat: add aggregate pushdown support (COUNT/SUM/AVG/MIN/MAX) (#586) * feat: add aggregate pushdown support (COUNT/SUM/AVG/MIN/MAX) Based on PR #549 by JohnCari with critical fix: aggregates and group_by are now stored in FdwState and passed thro... push web-flow github
80.79
24066154514 main feat: [WRA-17] add DynamoDB FDW (#593) * feat: add DynamoDB FDW * fix: follow copilot suggestions * ci: add cache deletion step to native wrappers test * fix: update clickhouse-rs source references to latest commit push web-flow github
80.32
23775507213 main feat: allow vault secret lookup by name in _id options (#591) * feat: allow vault secret lookup by name in `_id` options Change `get_vault_secret()` to fall back to name-based lookup when the input is not a valid UUID. This allows all FDW `*_id... push web-flow github
80.35
See All Builds (454)