Dev

.env.example

@@ -2,6 +2,7 @@ DATABASE_URL=postgres://postgres:postgres@localhost:5432/scrawn
 CLICKHOUSE_URL=http://default:clickhouse@localhost:8123/scrawn
 
 HMAC_SECRET=
+MASTER_API_KEY_HASH= # hex(HMAC-SHA256(HMAC_SECRET, <raw master key>)) — computed with HMAC_SECRET as the signing key (used for project creation during onboarding)
 APP_URL=http://localhost:8060 # URL the Scrawn backend is hosted on
 
 # SENTRY_DSN=

docker-compose.yml

@@ -60,6 +60,7 @@ services:
       NODE_ENV: production
       HMAC_SECRET: ${HMAC_SECRET}
       APP_URL: ${APP_URL}
+      MASTER_API_KEY_HASH: ${MASTER_API_KEY_HASH}
 
   dashboard:
     profiles:
@@ -77,6 +78,6 @@ services:
       BETTER_AUTH_URL: http://localhost:3000
       SCRAWN_BASE_URL: http://server:8060
       SCRAWN_HTTP_URL: http://server:8060
-      SCRAWN_KEY: ${SCRAWN_KEY}
+      MASTER_API_KEY: ${MASTER_API_KEY}
 
 

src/__tests__/auth.test.ts

@@ -15,11 +15,12 @@ import { getPostgresDB } from "../storage/db/postgres/db";
 import { webhookEndpointsTable } from "../storage/db/postgres/schema";
 import { DateTime } from "luxon";
 import { clearDatabase } from "./db";
-import { insertKey } from "./fixtures/apiKey";
+import { insertKey, TEST_PROJECT_ID } from "./fixtures/apiKey";
 
 async function insertWebhookEndpoint(apiKeyId: string): Promise<void> {
   const db = getPostgresDB();
   await db.insert(webhookEndpointsTable).values({
+    projectId: TEST_PROJECT_ID,
     apiKeyId,
     url: "https://example.com/webhook",
     privateKey: "test-private-key",

src/__tests__/createAPIKey.test.ts

@@ -14,7 +14,7 @@ import {
   registerEvent,
 } from "./fixtures/grpc";
 import { verifyApiKeyCreated } from "./assertions/events";
-import { createTestApiKey } from "./fixtures/apiKey";
+import { createTestApiKey, TEST_PROJECT_ID } from "./fixtures/apiKey";
 import { getPostgresDB } from "../storage/db/postgres/db";
 import { hashAPIKey } from "../utils/hashAPIKey";
 import {
@@ -44,6 +44,7 @@ async function createDashboardApiKey(): Promise<{
       key: hashAPIKey(rawKey),
       role: "dashboard",
       expiresAt: DateTime.utc().plus({ years: 1 }).toISO(),
+      projectId: TEST_PROJECT_ID,
     })
     .returning({ id: apiKeysTable.id });
   return { rawKey, id: key!.id };
@@ -149,6 +150,7 @@ describe("AuthService", () => {
 
       const db = getPostgresDB();
       await db.insert(webhookEndpointsTable).values({
+        projectId: TEST_PROJECT_ID,
         apiKeyId: res.apiKeyId,
         url: "https://example.com/webhook",
         privateKey: "test-private-key",