supabase · dependabot · Feb 12, 2025
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -97,7 +97,7 @@
     "@typescript-eslint/eslint-plugin": "^8.7.0",
     "@typescript-eslint/parser": "^8.7.0",
     "babel-jest": "^29.2.2",
-    "esbuild": "0.21.5",
+    "esbuild": "0.25.0",
     "eslint": "^8.9.0",
     "eslint-config-prettier": "^8.10.0",
     "eslint-plugin-prettier": "^4.2.1",

diff --git a/src/admin-app.ts b/src/admin-app.ts
    app.get('/metrics', async (req, reply) => {
      if (registriesToMerge.length === 0) {
        const globalRegistry = appInstance.metrics.client.register
        const defaultRegistries = (appInstance.metrics as any).getCustomDefaultMetricsRegistries()
        const routeRegistries = (appInstance.metrics as any).getCustomRouteMetricsRegistries()

        registriesToMerge = Array.from(
          new Set([globalRegistry, ...defaultRegistries, ...routeRegistries])
diff --git a/src/config.ts b/src/config.ts
    try {
      const parsed = JSON.parse(jwtJWKS)
      config.jwtJWKS = parsed
    } catch (e: any) {
      throw new Error('Unable to parse JWT_JWKS value to JSON')
    }
  }
diff --git a/src/http/error-handler.ts b/src/http/error-handler.ts
    // Fastify errors
    if ('statusCode' in error) {
      const err = error as FastifyError
      return reply.status((error as any).statusCode || 500).send({
        statusCode: `${err.statusCode}`,
        error: err.name,
        message: err.message,
diff --git a/src/http/plugins/jwt.ts b/src/http/plugins/jwt.ts
    fastify.decorateRequest('jwt', '')
    fastify.decorateRequest('jwtPayload', undefined)

    fastify.addHook('preHandler', async (request, reply) => {
      request.jwt = (request.headers.authorization || '').replace(BEARER, '')

      if (!request.jwt && request.routeOptions.config.allowInvalidJwt) {
        request.jwtPayload = payload
        request.owner = payload.sub
        request.isAuthenticated = true
      } catch (err: any) {
        request.jwtPayload = { role: 'anon' }
        request.isAuthenticated = false

diff --git a/src/http/plugins/log-request.ts b/src/http/plugins/log-request.ts

  interface FastifyContextConfig {
    operation?: { type: string }
    resources?: (req: FastifyRequest<any>) => string[]
  }
 }

        const resources = getFirstDefined<string[]>(
          req.resources,
          req.routeOptions.config.resources?.(req),
          (req.raw as any).resources,
          resourceFromParams ? [resourceFromParams] : ([] as string[])
        )

  const rId = req.id
  const cIP = req.ip
  const statusCode = options.statusCode
  const error = (req.raw as any).executionError || req.executionError
  const tenantId = req.tenantId

  const buildLogMessage = `${tenantId} | ${rMeth} | ${statusCode} | ${cIP} | ${rId} | ${rUrl} | ${uAgent}`
	app.get('/metrics', async (req, reply) => {
	if (registriesToMerge.length === 0) {
	const globalRegistry = appInstance.metrics.client.register
	const defaultRegistries = (appInstance.metrics as any).getCustomDefaultMetricsRegistries()
Check warning on line 21 in src/admin-app.ts GitHub Actions / Test / OS ubuntu-20.04 / Node 20 `Unexpected any. Specify a different type`
	const routeRegistries = (appInstance.metrics as any).getCustomRouteMetricsRegistries()
Check warning on line 22 in src/admin-app.ts GitHub Actions / Test / OS ubuntu-20.04 / Node 20 `Unexpected any. Specify a different type`

	registriesToMerge = Array.from(
	new Set([globalRegistry, ...defaultRegistries, ...routeRegistries])
	try {
	const parsed = JSON.parse(jwtJWKS)
	config.jwtJWKS = parsed
	} catch (e: any) {
Check warning on line 456 in src/config.ts GitHub Actions / Test / OS ubuntu-20.04 / Node 20 `'e' is defined but never used` Check warning on line 456 in src/config.ts GitHub Actions / Test / OS ubuntu-20.04 / Node 20 `Unexpected any. Specify a different type`
	throw new Error('Unable to parse JWT_JWKS value to JSON')
	}
	}
	// Fastify errors
	if ('statusCode' in error) {
	const err = error as FastifyError
	return reply.status((error as any).statusCode \|\| 500).send({
Check warning on line 67 in src/http/error-handler.ts GitHub Actions / Test / OS ubuntu-20.04 / Node 20 `Unexpected any. Specify a different type`
	statusCode: `${err.statusCode}`,
	error: err.name,
	message: err.message,
	fastify.decorateRequest('jwt', '')
	fastify.decorateRequest('jwtPayload', undefined)

	fastify.addHook('preHandler', async (request, reply) => {
Check warning on line 28 in src/http/plugins/jwt.ts GitHub Actions / Test / OS ubuntu-20.04 / Node 20 `'reply' is defined but never used`
	request.jwt = (request.headers.authorization \|\| '').replace(BEARER, '')

	if (!request.jwt && request.routeOptions.config.allowInvalidJwt) {
	request.jwtPayload = payload
	request.owner = payload.sub
	request.isAuthenticated = true
	} catch (err: any) {
Check warning on line 44 in src/http/plugins/jwt.ts GitHub Actions / Test / OS ubuntu-20.04 / Node 20 `Unexpected any. Specify a different type`
	request.jwtPayload = { role: 'anon' }
	request.isAuthenticated = false

	interface FastifyContextConfig {
	operation?: { type: string }
	resources?: (req: FastifyRequest<any>) => string[]
Check warning on line 21 in src/http/plugins/log-request.ts GitHub Actions / Test / OS ubuntu-20.04 / Node 20 `Unexpected any. Specify a different type`
	}
	}

	const resources = getFirstDefined<string[]>(
	req.resources,
	req.routeOptions.config.resources?.(req),
	(req.raw as any).resources,
Check warning on line 63 in src/http/plugins/log-request.ts GitHub Actions / Test / OS ubuntu-20.04 / Node 20 `Unexpected any. Specify a different type`
	resourceFromParams ? [resourceFromParams] : ([] as string[])
	)

	const rId = req.id
	const cIP = req.ip
	const statusCode = options.statusCode
	const error = (req.raw as any).executionError \|\| req.executionError
Check warning on line 118 in src/http/plugins/log-request.ts GitHub Actions / Test / OS ubuntu-20.04 / Node 20 `Unexpected any. Specify a different type`
	const tenantId = req.tenantId

	const buildLogMessage = `${tenantId} \| ${rMeth} \| ${statusCode} \| ${cIP} \| ${rId} \| ${rUrl} \| ${uAgent}`