fix: handle new tenant api key

Author: sweatybridge

internal/status/status.go

@@ -176,16 +176,11 @@ var (
 
 func checkHTTPHead(ctx context.Context, path string) error {
 	healthOnce.Do(func() {
-		server := utils.Config.Api.ExternalUrl
-		header := func(req *http.Request) {
-			req.Header.Add("apikey", utils.Config.Auth.AnonKey.Value)
-		}
-		client := NewKongClient()
-		healthClient = fetcher.NewFetcher(
-			server,
-			fetcher.WithHTTPClient(client),
-			fetcher.WithRequestEditor(header),
-			fetcher.WithExpectedStatus(http.StatusOK),
+		healthClient = fetcher.NewServiceGateway(
+			utils.Config.Api.ExternalUrl,
+			utils.Config.Auth.AnonKey.Value,
+			fetcher.WithHTTPClient(NewKongClient()),
+			fetcher.WithUserAgent("SupabaseCLI/"+utils.Version),
 		)
 	})
 	// HEAD method does not return response body

internal/storage/client/api.go

@@ -28,21 +28,19 @@ func NewStorageAPI(ctx context.Context, projectRef string) (storage.StorageAPI,
 }
 
 func newLocalClient() *fetcher.Fetcher {
-	client := status.NewKongClient()
-	return fetcher.NewFetcher(
+	return fetcher.NewServiceGateway(
 		utils.Config.Api.ExternalUrl,
-		fetcher.WithHTTPClient(client),
-		fetcher.WithBearerToken(utils.Config.Auth.ServiceRoleKey.Value),
+		utils.Config.Auth.ServiceRoleKey.Value,
+		fetcher.WithHTTPClient(status.NewKongClient()),
 		fetcher.WithUserAgent("SupabaseCLI/"+utils.Version),
-		fetcher.WithExpectedStatus(http.StatusOK),
 	)
 }
 
 func newRemoteClient(projectRef, token string) *fetcher.Fetcher {
-	return fetcher.NewFetcher(
+	return fetcher.NewServiceGateway(
 		"https://"+utils.GetSupabaseHost(projectRef),
-		fetcher.WithBearerToken(token),
+		token,
+		fetcher.WithHTTPClient(http.DefaultClient),
 		fetcher.WithUserAgent("SupabaseCLI/"+utils.Version),
-		fetcher.WithExpectedStatus(http.StatusOK),
 	)
 }

internal/utils/tenant/client.go

@@ -2,8 +2,7 @@ package tenant
 
 import (
 	"context"
-	"net/http"
-	"time"
+	"strings"
 
 	"github.com/go-errors/errors"
 	"github.com/supabase/cli/internal/utils"
@@ -39,9 +38,37 @@ func NewApiKey(resp []api.ApiKeyResponse) ApiKey {
 			result.ServiceRole = value
 		}
 	}
+	// Apply new keys
+	for _, key := range resp {
+		t, err := key.Type.Get()
+		if err != nil {
+			continue
+		}
+		value, err := key.ApiKey.Get()
+		if err != nil {
+			continue
+		}
+		switch t {
+		case api.ApiKeyResponseTypePublishable:
+			result.Anon = value
+		case api.ApiKeyResponseTypeSecret:
+			if isServiceRole(key) {
+				result.ServiceRole = value
+			}
+		}
+	}
 	return result
 }
 
+func isServiceRole(key api.ApiKeyResponse) bool {
+	if tmpl, err := key.SecretJwtTemplate.Get(); err == nil {
+		if role, ok := tmpl["role"].(string); ok {
+			return strings.EqualFold(role, "service_role")
+		}
+	}
+	return false
+}
+
 func GetApiKeys(ctx context.Context, projectRef string) (ApiKey, error) {
 	resp, err := utils.GetSupabase().V1GetProjectApiKeysWithResponse(ctx, projectRef, &api.V1GetProjectApiKeysParams{})
 	if err != nil {
@@ -62,19 +89,9 @@ type TenantAPI struct {
 }
 
 func NewTenantAPI(ctx context.Context, projectRef, anonKey string) TenantAPI {
-	server := "https://" + utils.GetSupabaseHost(projectRef)
-	client := &http.Client{
-		Timeout: 10 * time.Second,
-	}
-	header := func(req *http.Request) {
-		req.Header.Add("apikey", anonKey)
-	}
-	api := TenantAPI{Fetcher: fetcher.NewFetcher(
-		server,
-		fetcher.WithHTTPClient(client),
-		fetcher.WithRequestEditor(header),
+	return TenantAPI{Fetcher: fetcher.NewServiceGateway(
+		"https://"+utils.GetSupabaseHost(projectRef),
+		anonKey,
 		fetcher.WithUserAgent("SupabaseCLI/"+utils.Version),
-		fetcher.WithExpectedStatus(http.StatusOK),
 	)}
-	return api
 }

pkg/fetcher/gateway.go

@@ -0,0 +1,28 @@
+package fetcher
+
+import (
+	"net/http"
+	"strings"
+	"time"
+)
+
+func NewServiceGateway(server, token string, overrides ...FetcherOption) *Fetcher {
+	opts := append([]FetcherOption{
+		WithHTTPClient(&http.Client{
+			Timeout: 10 * time.Second,
+		}),
+		withAuthToken(token),
+		WithExpectedStatus(http.StatusOK),
+	}, overrides...)
+	return NewFetcher(server, opts...)
+}
+
+func withAuthToken(token string) FetcherOption {
+	if strings.HasPrefix(token, "sb_") {
+		header := func(req *http.Request) {
+			req.Header.Add("apikey", token)
+		}
+		return WithRequestEditor(header)
+	}
+	return WithBearerToken(token)
+}