!NhAsaYbbgmzHtXTPQJ:funklause.de

Nix NodeJS

203 Members
58 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
21 Dec 2023
@lily:lily.flowersLily Foster
In reply to @peter-lustig:matrix.org
i had everything working with dynamic env variables and now nothing of that works anymore
well i'm worried it's trying to include these vars in client-side generated code. which handing over secrets to the client feels ,,, problematic. would you mind sharing more of the code to help me understand?
16:22:04
@peter-lustig:matrix.orgpeter-lustig
In reply to @lily:lily.flowers
well i'm worried it's trying to include these vars in client-side generated code. which handing over secrets to the client feels ,,, problematic. would you mind sharing more of the code to help me understand?
import { github, google } from '@lucia-auth/oauth/providers';
import {
	GITHUB_CLIENT_ID,
	GITHUB_CLIENT_SECRET,
	GOOGLE_CLIENT_ID,
	GOOGLE_CLIENT_SECRET
} from '$env/static/private';

export const pool = new postgres.Pool({
	host: '/run/postgresql',
	user: 'postgres',
	database: 'app'
});

export const auth = lucia({
	env: dev ? 'DEV' : 'PROD',
	middleware: sveltekit(),
	adapter: pg(pool, {
		user: 'auth_user',
		key: 'user_key',
		session: 'user_session'
	}),
	getUserAttributes: (data) => {
		return {
			username: data.username,
			authProvider: data.auth_provider
		};
	}
});

export const githubAuth = github(auth, {
	clientId: GITHUB_CLIENT_ID,
	clientSecret: GITHUB_CLIENT_SECRET
});
16:23:14
@peter-lustig:matrix.orgpeter-lustigwith $env/dynamic/priavate everything just worked16:23:31
@peter-lustig:matrix.orgpeter-lustigbut in sveltekit 2.0 it does not work anymore16:23:36
@lily:lily.flowersLily Fosterwell apparently prior to 2.0, there was no strong distinction between those types of vars apparently16:24:13
@lily:lily.flowersLily Foster * well apparently prior to 2.0, there was no strong distinction between those types of vars16:24:16
@lily:lily.flowersLily Fosteri'm gonna look up more about how lucia-auth works real quick16:24:39
@lily:lily.flowersLily Foster oh apparently lucia-auth is now just under lucia for v2 16:24:58
@lily:lily.flowersLily Foster * oh apparently lucia-auth is now just under lucia for v2 16:25:05
@lily:lily.flowersLily Fosteroh but other packages are the same. ignore me. i can't read16:25:15
@lily:lily.flowersLily Foster (reading https://lucia-auth.com/migrate/v2/ rn) 16:25:19

Show newer messages


Back to Room ListRoom Version: 6