HIDRA Update (#38)

* refactor(env,auth): update JWKS endpoints

* chore: format based on default Biome styles

* feature: add Tiltfile

* refactor(plugins): set `plugin.ts` extension

* refactor(plugins): set `plugin.ts` extensions

* fix(plugins): fix barrel

* chore: add TODO

* chore: remove unused code

* chore: add TODO

* chore: add TODO

* refactor(use-auth): handle opaque access token by fetching from OIDC userinfo

* chore: set type import

* build(deps): upgrade dependencies

* chore: format

* refactor: extract auth issuer env vars

* refactor: change configs file extension

* fix: fix file extensions

* chore(graphile): update exec schema

* fix: fix file extensions

* chore(env): update TODOs

* chore(env): remove `AUTH_JWKS_URL`

* chore(use-auth): update TODOs

* build(deps): upgrade Graphile dependencies

* build(scripts): generate and migrate DB before starting

* feature: add Dockerfile, .dockerignore

* feature(docker): add build step

* build(deps): rollback Graphile dependencies

* build(scripts): remove DB generation from start script

* chore: remove Docker

Author: coopbri

.env.development

@@ -1 +1,2 @@
-AUTH_JWKS_URL="https://hidra.omni.dev/realms/test/protocol/openid-connect/certs"
+# TODO change once base path changes (https://linear.app/omnidev/issue/OMNI-254/move-apiauth-paths-to-base-path-or-subpath-eg-auth)
+AUTH_BASE_URL="https://localhost:8000/api/auth"

.env.production

@@ -1 +1,2 @@
-AUTH_JWKS_URL="https://hidra.omni.dev/realms/omni/protocol/openid-connect/certs"
+# TODO change once base path changes (https://linear.app/omnidev/issue/OMNI-254/move-apiauth-paths-to-base-path-or-subpath-eg-auth)
+AUTH_BASE_URL="https://identity.omni.dev/api/auth"

Tiltfile

@@ -0,0 +1,13 @@
+# load environment variables
+load("ext://dotenv", "dotenv")
+
+dotenv(fn=".env.local")
+
+project_name = "backfeed-api"
+
+local_resource(
+    "install-deps-%s" % project_name,
+    cmd="bun i",
+    deps=["package.json"],
+    labels=[project_name],
+)

biome.json renamed to biome.jsonc

@@ -29,13 +29,5 @@
         "noNonNullAssertion": "off"
       }
     }
-  },
-  "javascript": {
-    "formatter": {
-      "quoteStyle": "double",
-      "arrowParentheses": "always",
-      "semicolons": "always",
-      "trailingCommas": "es5"
-    }
   }
 }

bun.lock

@@ -1,6 +1,6 @@
 import { defineConfig } from "drizzle-kit";
 
-import { DATABASE_URL } from "./src/lib/config/env";
+import { DATABASE_URL } from "./src/lib/config/env.config";
 
 export default defineConfig({
   out: "./src/lib/drizzle/migrations",

drizzle.config.ts

@@ -4,7 +4,7 @@ import { PostGraphileConnectionFilterPreset } from "postgraphile-plugin-connecti
 import { makePgService } from "postgraphile/adaptors/pg";
 import { PostGraphileAmberPreset } from "postgraphile/presets/amber";
 
-import { DATABASE_URL, isProdEnv } from "./src/lib/config/env";
+import { DATABASE_URL, isProdEnv } from "./src/lib/config/env.config";
 import {
   CommentRBACPlugin,
   DownvoteRBACPlugin,

graphile.config.ts

@@ -5,7 +5,7 @@
   "scripts": {
     "dev": "GRAPHILE_ENV=development NODE_ENV=development bun run --hot src/server.ts",
     "build": "bun build --target node --outdir build src/server.ts",
-    "start": "GRAPHILE_ENV=production NODE_ENV=production bun run build/server.js",
+    "start": "GRAPHILE_ENV=production NODE_ENV=production bun db:migrate && GRAPHILE_ENV=production NODE_ENV=production bun run build/server.js",
     "lint": "biome lint src",
     "format": "biome format --write src",
     "db:check": "bun --env-file .env.local drizzle-kit check",
@@ -22,33 +22,36 @@
   },
   "devDependencies": {
     "@biomejs/biome": "^1.9.4",
-    "@faker-js/faker": "^9.1.0",
-    "@types/bun": "^1.1.12",
-    "@types/node": "^22.8.6",
-    "@types/pg": "^8.11.10",
-    "drizzle-kit": "^0.30.1",
-    "husky": "^9.1.6",
-    "replace-in-file": "^8.2.0",
-    "typescript": "^5.6.3"
+    "@faker-js/faker": "^9.6.0",
+    "@types/bun": "^1.2.8",
+    "@types/node": "^22.13.14",
+    "@types/pg": "^8.11.11",
+    "drizzle-kit": "^0.30.6",
+    "husky": "^9.1.7",
+    "replace-in-file": "^8.3.0",
+    "typescript": "^5.8.2"
   },
   "dependencies": {
-    "@envelop/generic-auth": "^8.0.1",
+    "@envelop/generic-auth": "^9.1.3",
     "@envelop/parser-cache": "^8.1.3",
     "@envelop/validation-cache": "^8.1.3",
     "@escape.tech/graphql-armor": "^3.1.2",
     "@graphile/pg-aggregates": "0.2.0-beta.7",
     "@graphile/simplify-inflection": "8.0.0-beta.5",
     "dayjs": "^1.11.13",
-    "drizzle-orm": "^0.38.2",
-    "drizzle-seed": "^0.3.0",
+    "drizzle-orm": "^0.41.0",
+    "drizzle-seed": "^0.3.1",
     "graphile-export": "0.0.2-beta.24",
-    "graphql": "^16.9.0",
-    "graphql-yoga": "^5.8.0",
-    "hono": "^4.6.8",
-    "jose": "^5.9.6",
-    "pg": "^8.13.1",
+    "graphql": "^16.10.0",
+    "graphql-yoga": "^5.13.2",
+    "hono": "^4.7.5",
+    "jose": "^6.0.10",
+    "pg": "^8.14.1",
     "postgraphile": "5.0.0-beta.37",
     "postgraphile-plugin-connection-filter": "3.0.0-beta.7"
   },
-  "trustedDependencies": ["@biomejs/biome", "esbuild"]
+  "trustedDependencies": [
+    "@biomejs/biome",
+    "esbuild"
+  ]
 }

package.json

@@ -148,7 +148,7 @@ const spec_downvote = {
   }),
   description: undefined,
   extensions: {
-    oid: "62509",
+    oid: "64252",
     isTableLike: true,
     pg: {
       serviceName: "main",
@@ -228,7 +228,7 @@ const spec_invitation = {
   }),
   description: undefined,
   extensions: {
-    oid: "62609",
+    oid: "64351",
     isTableLike: true,
     pg: {
       serviceName: "main",
@@ -308,7 +308,7 @@ const spec_upvote = {
   }),
   description: undefined,
   extensions: {
-    oid: "62422",
+    oid: "64165",
     isTableLike: true,
     pg: {
       serviceName: "main",
@@ -400,7 +400,7 @@ const spec_comment = {
   }),
   description: undefined,
   extensions: {
-    oid: "62489",
+    oid: "64232",
     isTableLike: true,
     pg: {
       serviceName: "main",
@@ -469,7 +469,7 @@ const spec_organization = {
       description: undefined,
       codec: TYPES.text,
       notNull: true,
-      hasDefault: true,
+      hasDefault: false,
       extensions: {
         tags: {},
         canSelect: true,
@@ -480,7 +480,7 @@ const spec_organization = {
   }),
   description: undefined,
   extensions: {
-    oid: "62384",
+    oid: "64127",
     isTableLike: true,
     pg: {
       serviceName: "main",
@@ -596,7 +596,7 @@ const spec_project = {
   }),
   description: undefined,
   extensions: {
-    oid: "62408",
+    oid: "64151",
     isTableLike: true,
     pg: {
       serviceName: "main",
@@ -724,7 +724,7 @@ const spec_post = {
   }),
   description: undefined,
   extensions: {
-    oid: "62398",
+    oid: "64141",
     isTableLike: true,
     pg: {
       serviceName: "main",
@@ -742,7 +742,7 @@ const roleCodec = enumCodec({
   values: ["owner", "admin", "member"],
   description: undefined,
   extensions: {
-    oid: "62528",
+    oid: "64271",
     pg: {
       serviceName: "main",
       schemaName: "public",
@@ -819,7 +819,7 @@ const spec_member = {
   }),
   description: undefined,
   extensions: {
-    oid: "62444",
+    oid: "64187",
     isTableLike: true,
     pg: {
       serviceName: "main",
@@ -935,7 +935,7 @@ const spec_postStatus = {
   }),
   description: undefined,
   extensions: {
-    oid: "62583",
+    oid: "64325",
     isTableLike: true,
     pg: {
       serviceName: "main",
@@ -1051,7 +1051,7 @@ const spec_user = {
   }),
   description: undefined,
   extensions: {
-    oid: "62432",
+    oid: "64175",
     isTableLike: true,
     pg: {
       serviceName: "main",
@@ -10739,7 +10739,7 @@ input OrganizationInput {
   name: String!
   createdAt: Datetime
   updatedAt: Datetime
-  slug: String
+  slug: String!
 }
 
 """The output of our create \`Project\` mutation."""

src/generated/graphql/schema.executable.ts

@@ -0,0 +1,9 @@
+/**
+ * Application configuration.
+ */
+const app = {
+  name: "Backfeed",
+  url: "https://backfeed.omni.dev",
+};
+
+export default app;