Move server secrets retrieval into secrets.ts

GSA-TTS · Jul 12, 2024 · fef924a · fef924a
1 parent 1d34742
commit fef924a
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 5 deletions.
diff --git a/packages/server/auth.config.ts b/packages/server/auth.config.ts
@@ -1,7 +1,11 @@
 import { defineConfig } from 'auth-astro';
 
+import { getServerSecrets } from './src/secrets';
+
+const secrets = getServerSecrets((import.meta as any).env);
+
 export default defineConfig({
-  secret: (import.meta as any).env.AUTH_SECRET,
+  secret: secrets.authSecret,
   providers: [
     /**
      * https://dashboard.int.identitysandbox.gov/service_providers/5237
@@ -21,7 +25,7 @@ export default defineConfig({
       issuer: 'https://idp.int.identitysandbox.gov',
       clientId:
         'urn:gov:gsa:openidconnect.profiles:sp:sso:gsa:tts-10x-atj-dev-server-doj',
-      clientSecret: (import.meta as any).env.SECRET_LOGIN_GOV_PRIVATE_KEY,
+      clientSecret: secrets.loginGov.clientSecret,
     },
   ],
 });
diff --git a/packages/server/src/secrets.ts b/packages/server/src/secrets.ts
@@ -1,13 +1,17 @@
 export type ServerSecrets = {
+  authSecret: string;
   loginGov: {
     //clientId: string;
     clientSecret: string;
   };
 };
 
-export const getServerSecrets = (env: ImportMetaEnv) => {
+export const getServerSecrets = (env: ImportMetaEnv): ServerSecrets => {
   return {
-    //clientId: 'urn:gov:gsa:openidconnect.profiles:sp:sso:gsa:tts-10x-atj-dev-server-doj',
-    clientSecret: (import.meta as any).env.SECRET_LOGIN_GOV_PRIVATE_KEY,
+    loginGov: {
+      //clientId: 'urn:gov:gsa:openidconnect.profiles:sp:sso:gsa:tts-10x-atj-dev-server-doj',
+      clientSecret: env.SECRET_LOGIN_GOV_PRIVATE_KEY,
+    },
+    authSecret: env.AUTH_SECRET,
   };
 };