git/metabuilder
1
0
Fork 0
mirror of https://github.com/johndoe6345789/metabuilder.git synced 2026-04-24 13:54:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(ci): lazy-init JWT secret to avoid build-time crash in postgres frontend

Browse Source 
The JWT_SECRET env var was evaluated at module load time, causing Next.js
static page generation to fail in CI where the variable is not set.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
johndoe6345789
2026-03-10 13:45:20 +00:00
parent 86b242ac7a
commit ff4ef4363b
1 changed files with 12 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
frontends/postgres/src/utils/session.ts
View File

@@ -3,19 +3,20 @@ import { cookies } from 'next/headers';
const SESSION_COOKIE_NAME = 'admin-session';
// Get JWT secret and throw error if not provided
// Get JWT secret lazily to avoid build-time errors during static page generation
let _jwtSecret: Uint8Array | null = null;
function getJwtSecret(): Uint8Array {
const secret = process.env.JWT_SECRET;
if (!secret) {
throw new Error('JWT_SECRET environment variable is required');
if (!_jwtSecret) {
const secret = process.env.JWT_SECRET;
if (!secret) {
throw new Error('JWT_SECRET environment variable is required');
}
_jwtSecret = new TextEncoder().encode(secret);
}
return new TextEncoder().encode(secret);
return _jwtSecret;
}
const JWT_SECRET = getJwtSecret();
export type SessionData = {
userId: number;
username: string;
@@ -26,7 +27,7 @@ export async function createSession(data: SessionData): Promise<string> {
.setProtectedHeader({ alg: 'HS256' })
.setIssuedAt()
.setExpirationTime('24h')
.sign(JWT_SECRET);
.sign(getJwtSecret());
return token;
}
@@ -51,7 +52,7 @@ export async function getSession(): Promise<SessionData | null> {
}
try {
const { payload } = await jwtVerify(token, JWT_SECRET);
const { payload } = await jwtVerify(token, getJwtSecret());
return payload as SessionData;
} catch {
return null;