Check for/ DWYL_API_KEY before AUTH_API_KEY

[nelsonic]

At present we are using SECRET_KEY_BASE as our single environment variable:

auth_plug/.env_sample

Line 1 in 1ebb609

export SECRET_KEY_BASE=2PzB7PPnpuLsbWmWtXpGyI+kfSQSQ1zUW2Atz/+8PdZuSEJzHgzGnJWV35nTKRwx

Which is then used in:

auth_plug/lib/token.ex

Line 7 in 1ebb609

@secret System.get_env("SECRET_KEY_BASE")

As part of our Quest to only have a Single Environment Variable to run the App on localhost dwyl/auth#42 we need to use that variable in our Token module.

Todo

• Check for DWYL_API_KEY as the @secret in Token module
• Test for it! 💯
• Split the DWYL_API_KEY on / and
  • use the second half (corresponding to the client_secret) to verify the JWT
  • If JWT verification fails, send the first half of the DWYL_API_KEY (corresponding to the client_id) as the client_id in the URL query param so that the Auth App can verify it.

[nelsonic]

auth_plug/lib/token.ex

Lines 17 to 21 in b612845

	def api_key do
	if not is_nil(System.get_env("DWYL_API_KEY")),
	do: System.get_env("DWYL_API_KEY"),
	else: System.get_env("AUTH_API_KEY")
	end

auth_plug/lib/auth_plug.ex

Lines 160 to 167 in b612845

	defp redirect_to_auth(conn, opts) do
	baseurl = AuthPlug.Helpers.get_baseurl_from_conn(conn)
	to =
	opts.auth_url <>
	"?referer=" <>
	URI.encode(baseurl <> conn.request_path) <>
	"&client_id=" <> AuthPlug.Token.client_id

[nelsonic]

I've got this working. Closing. ✅