fixed dev api server

app/controllers/config.ts

@@ -7,15 +7,17 @@ interface Config {
   apiEndpoint: string;
   viewsDir: string;
   rootUrl: URL;
-  openid: {
+  openid:
-    issuer: string;
+    | false
-    client: {
+    | {
-      client_id: string;
+        issuer: string;
-      client_secret: string;
+        client: {
-    };
+          client_id: string;
-    request: HttpOptions;
+          client_secret: string;
-  };
+        };
-  key: KeyObject;
+        request: HttpOptions;
+      };
+  key: false | KeyObject;
 }
 
 export type { Config };
@@ -31,18 +33,20 @@ function defaultConfig(): Config {
     apiUrl: new URL(process.env.QUOT_API_URL ?? "http://127.0.0.1:3000"),
     apiEndpoint: process.env.QUOT_API_ENDPOINT ?? "/api",
     viewsDir: "views",
-    openid: {
+    openid: Boolean(process.env.QUOT_OPENID_ISSUER) && {
-      issuer: process.env.QUOT_OPENID_ISSUER ?? "",
+      issuer: process.env.QUOT_OPENID_ISSUER!,
       client: {
-        client_id: process.env.QUOT_OPENID_CLIENT_ID ?? "",
+        client_id: process.env.QUOT_OPENID_CLIENT_ID!,
-        client_secret: process.env.QUOT_OPENID_CLIENT_SECRET ?? "",
+        client_secret: process.env.QUOT_OPENID_CLIENT_SECRET!,
       },
       request: { timeout: 5_000 },
     },
-    key: crypto.createPrivateKey({
+    key:
-      key: JSON.parse(process.env.QUOT_JWK ?? "{}"),
+      Boolean(process.env.QUOT_JWK) &&
-      format: "jwk",
+      crypto.createPrivateKey({
-    }),
+        key: JSON.parse(process.env.QUOT_JWK!),
+        format: "jwk",
+      }),
   };
 }
 

app/controllers/routes/login.ts

@@ -3,9 +3,21 @@ import { SignJWT } from "jose";
 import type { FastifyInstance } from "fastify";
 
 async function login(fastify: FastifyInstance) {
-  custom.setHttpOptionsDefaults(fastify.config.openid.request);
+  const key = fastify.config.key;
-  const issuer = await Issuer.discover(fastify.config.openid.issuer);
+  if (!key) {
-  const client = new issuer.Client(fastify.config.openid.client);
+    fastify.log.warn("The key is required to use login endpoint.");
+    return;
+  }
+  const openid = fastify.config.openid;
+  if (!openid) {
+    fastify.log.warn(
+      "The openid parameters is required to use login endpoint."
+    );
+    return;
+  }
+  custom.setHttpOptionsDefaults(openid.request);
+  const issuer = await Issuer.discover(openid.issuer);
+  const client = new issuer.Client(openid.client);
 
   fastify.get("/login", async (request, reply) => {
     const params = client.callbackParams(request.raw);
@@ -22,7 +34,7 @@ async function login(fastify: FastifyInstance) {
       .setProtectedHeader({ typ: "JWT", alg: "RS256" })
       .setExpirationTime("30days")
       .setSubject(userUrl.href)
-      .sign(fastify.config.key);
+      .sign(key);
     const url = new URL(fastify.config.rootUrl);
     url.hash = new URLSearchParams({ jwt }).toString();
     return reply.redirect(url.href);

app/views/pages/page.tsx

@@ -11,13 +11,12 @@ async function updatePage(
   content: Pages.RequestContentPage
 ): Promise<boolean> {
   const jwt = window.localStorage.getItem("jwt");
-  if (!jwt) return false;
   const res = await fetch(
     `${import.meta.env.QUOT_API_ENDPOINT}/pages?id=eq.${id}`,
     {
       method: "PUT",
       headers: {
-        authorization: `Bearer ${jwt}`,
+        ...(jwt ? { authorization: `Bearer ${jwt}` } : {}),
         "content-type": "application/json",
       },
       body: JSON.stringify(content),
@@ -28,12 +27,11 @@ async function updatePage(
 
 async function deletePage(id: number): Promise<boolean> {
   const jwt = window.localStorage.getItem("jwt");
-  if (!jwt) return false;
   const res = await fetch(
     `${import.meta.env.QUOT_API_ENDPOINT}/pages?id=eq.${id}`,
     {
       method: "DELETE",
-      headers: { authorization: `Bearer ${jwt}` },
+      headers: jwt ? { authorization: `Bearer ${jwt}` } : {},
     }
   );
   return res.ok;

compose.yml

@@ -22,8 +22,8 @@ services:
     restart: unless-stopped
     ports: ["3000:3000"]
     environment:
-      QUOT_JWK: ${QUOT_JWK:?} # https://mkjwk.org
       DATABASE_URL: postgresql://postgres:${POSTGRES_PASSWORD}@/postgres?host=/var/run/postgresql
+      PGRST_DB_ANON_ROLE: postgres
     volumes:
       - postgres_socket:/var/run/postgresql
     depends_on: