felipe/mika-agent-assist
1
0
Fork 0
mirror of https://github.com/domfelipe/mika-agent-assist.git synced 2026-08-07 08:36:44 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Changes

Browse source 
Co-authored-by: domfelipe <53182096+domfelipe@users.noreply.github.com>
This commit is contained in:
gpt-engineer-app[bot] 2026-04-17 19:57:58 +00:00
parent a34ff1b17b
commit af4a6968a8
2 changed files with 69 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

52
supabase/migrations/20260417195755_b341c835-f177-4c9f-a114-641c72aa6022.sql Normal file
View file

@ -0,0 +1,52 @@
-- Wrappers para o Supabase Vault, executáveis apenas pelo service_role
-- (usados pelas Edge Functions Telegram para guardar tokens com criptografia).
CREATE OR REPLACE FUNCTION public.vault_create_secret(
secret_value text,
secret_name text,
secret_description text DEFAULT ''
)
RETURNS TABLE(secret_id uuid)
LANGUAGE plpgsql
SECURITY DEFINER
SET search_path = public, vault
AS $$
BEGIN
RETURN QUERY
SELECT vault.create_secret(secret_value, secret_name, secret_description);
END;
$$;
REVOKE ALL ON FUNCTION public.vault_create_secret(text, text, text) FROM PUBLIC, anon, authenticated;
GRANT EXECUTE ON FUNCTION public.vault_create_secret(text, text, text) TO service_role;
CREATE OR REPLACE FUNCTION public.vault_decrypt_secret(secret_id uuid)
RETURNS TABLE(decrypted_secret text)
LANGUAGE plpgsql
SECURITY DEFINER
SET search_path = public, vault
AS $$
BEGIN
RETURN QUERY
SELECT ds.decrypted_secret
FROM vault.decrypted_secrets ds
WHERE ds.id = secret_id;
END;
$$;
REVOKE ALL ON FUNCTION public.vault_decrypt_secret(uuid) FROM PUBLIC, anon, authenticated;
GRANT EXECUTE ON FUNCTION public.vault_decrypt_secret(uuid) TO service_role;
CREATE OR REPLACE FUNCTION public.vault_delete_secret(secret_id uuid)
RETURNS void
LANGUAGE plpgsql
SECURITY DEFINER
SET search_path = public, vault
AS $$
BEGIN
DELETE FROM vault.secrets WHERE id = secret_id;
END;
$$;
REVOKE ALL ON FUNCTION public.vault_delete_secret(uuid) FROM PUBLIC, anon, authenticated;
GRANT EXECUTE ON FUNCTION public.vault_delete_secret(uuid) TO service_role;