Update env by AnilKumar3494 · Pull Request #715 · phlask/phlask-map

AnilKumar3494 · 2026-02-25T00:10:46Z

Change Summary

Moved harded coded API keys and passwords to .env and imported

Change Reason

It is not secure to have these keys in the open

Related Issue:
#696

AnilKumar3494 · 2026-02-25T00:34:36Z

Now, we need to add the needed env variables to the CI for tests to use.

Failed logs hint:
at new SupabaseClient (http://localhost:5173/node_modules/.vite/deps/@supabase_supabase-js.js?v=7998445e:11315:29)
at createClient (http://localhost:5173/node_modules/.vite/deps/@supabase_supabase-js.js?v=7998445e:11493:10)

gcardonag · 2026-03-04T02:10:32Z

This is a good step forward! In order to ensure that the build process support this change, we'll need to update the GitHub actions and the Dockerfile to support injecting those environment variables during the build phase. In support of this, we now have the following secrets available:

POSTHOG_KEY
REACT_GOOGLE_MAPS_APIKEY
SUPABASE_API_KEY
VERIFICATION_PASSWORD
OPEN_ROUTE_SERVICE_API_KEY

AnilKumar3494 · 2026-03-07T04:37:21Z

This is a good step forward! In order to ensure that the build process support this change, we'll need to update the GitHub actions and the Dockerfile to support injecting those environment variables during the build phase. In support of this, we now have the following secrets available:

POSTHOG_KEY

REACT_GOOGLE_MAPS_APIKEY

SUPABASE_API_KEY

VERIFICATION_PASSWORD

Please add the below to GH Secrets with the same name:

OPEN_ROUTE_SERVICE_API_KEY

… fixes workflow references to GMaps API key secret

gcardonag

Thanks for helping secure the site! 🔒

* add Claude Code tooling and Supabase helpers Adds CLAUDE.md for project context, a CLI script to query Supabase tables, and a centralized db module for database access. Co-Authored-By: Claude Opus 4.6 <[email protected]> * Dedupe Supabase client: reuse src/db.js in fetch script Use optional chaining on import.meta.env so src/db.js works in both Vite and Node contexts, then import the shared client in the CLI script instead of duplicating the connection setup. Also fix typo in CLAUDE.md. Co-Authored-By: Claude Opus 4.6 <[email protected]> * Delete duplicate src/db.js, reuse src/services/db.ts in fetch script src/db.js was dead code — nothing imported it. The fetch script now imports the supabase client from src/services/db.ts directly, run via node --experimental-strip-types. Added optional chaining on import.meta.env for Node compatibility. Co-Authored-By: Claude Opus 4.6 <[email protected]> * Fixes cypress testing action * feat: add ProvidedBy component for resource attribution (#692) * feat: add ProvidedBy component for resource attribution Add Provider type to ResourceEntry and create ProvidedBy component that displays organization attribution with logo/name support. Supports multiple providers with "+X more" overflow handling. * feat: add logo support and image fallback for ProvidedBy - Add Share Food Program logo as local asset for testing - Implement image fallback to Avatar when logo fails to load - Increase logo size to 40x40 for better visibility - Position ProvidedBy below Last Modified section * feat: add provider logo mapping utility Logo resolution now checks both provider.logo_url and a local mapping by provider name. This allows storing logos as local assets while keeping provider data simple (just name and url). * refactor: remove hardcoded mock provider data Component now only displays when resource.providers has actual data. * refactor: address PR feedback for ProvidedBy component Reviewers flagged that provider logos should come from the database, not static assets. This removes the hardcoded logo file and providerLogos utility. Also extracts ProviderItem and ProviderLogo as separate components, uses optional Provider[] prop with default, and replaces deprecated primaryTypographyProps with slotProps.primary. * refactor: migrate deprecated inputProps to slotProps.htmlInput MUI codemod flagged TextField's inputProps as deprecated. Migrating to slotProps.htmlInput aligns with the current MUI API. * Adds Supabase querying for resource providers * Adds providers database name variable * Fixes cypress testing action --------- Co-authored-by: Gabriel Cardona <[email protected]> * build(deps): bump tornado in /data/scrape-share-food-program (#721) Bumps [tornado](https://github.com/tornadoweb/tornado) from 6.5.1 to 6.5.5. - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.5.1...v6.5.5) --- updated-dependencies: - dependency-name: tornado dependency-version: 6.5.5 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump pyasn1 in /data/scrape-share-food-program (#723) Bumps [pyasn1](https://github.com/pyasn1/pyasn1) from 0.6.2 to 0.6.3. - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.2...v0.6.3) --- updated-dependencies: - dependency-name: pyasn1 dependency-version: 0.6.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): bump pyjwt in /data/scrape-share-food-program (#722) Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.10.1 to 2.12.0. - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](jpadilla/pyjwt@2.10.1...2.12.0) --- updated-dependencies: - dependency-name: pyjwt dependency-version: 2.12.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Update env (#715) * mv found API keys to .env * all hardcoded ones are verfided and moved * final mv * mv verification pwd * mv verification pwd * add missing msg * moe yelling * added yelling in dev env for all keys and imports if missing * add: secerts workflow to test injections * add: secerts workflow to test injections * should work -- clean up after * another try to make it work -- clean up after * another try to make it work -- clean up after * try 4 to make it work -- clean up after * try 5 to make it work -- clean up after * try 6 to make it work -- clean up after * try 7 debug missing key ugg * try 7 debug missing key ugg * try 8 should work * working cleaup done * testing something -- need to add more secret keys * just need to add one more key to GH secrets and should work * zod env config * zod env config * Update config.ts * simplfy * Adds vite preflight check to ensure environment variables are set and fixes workflow references to GMaps API key secret --------- Co-authored-by: Gabriel Cardona <[email protected]> * re-add posthog provider (#741) --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: vontell <[email protected]> Co-authored-by: Claude Opus 4.6 <[email protected]> Co-authored-by: Aaron Vontell <[email protected]> Co-authored-by: Kevin Wijaya <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Anil Kumar Karapa <[email protected]> Co-authored-by: Ron Braha <[email protected]>

AnilKumar3494 added 5 commits February 20, 2026 22:38

mv found API keys to .env

80525f0

all hardcoded ones are verfided and moved

9aac547

final mv

b6e95d7

mv verification pwd

c7d9b10

mv verification pwd

c5c530e

AnilKumar3494 requested review from gcardonag and marcbachan February 27, 2026 04:25

AnilKumar3494 added 3 commits March 1, 2026 19:30

add missing msg

cd52af8

moe yelling

74b8a0b

added yelling in dev env for all keys and imports if missing

8ad514c

AnilKumar3494 and others added 15 commits March 6, 2026 20:33

add: secerts workflow to test injections

2ca51bf

Merge branch 'develop' into update-env

bf8ec0b

add: secerts workflow to test injections

506b34c

should work -- clean up after

ebc392f

another try to make it work -- clean up after

69ef167

another try to make it work -- clean up after

3c5652d

try 4 to make it work -- clean up after

ca3c34b

try 5 to make it work -- clean up after

fb7d2fb

try 6 to make it work -- clean up after

9010d32

try 7 debug missing key ugg

dc7fee3

try 7 debug missing key ugg

2fb5fec

try 8 should work

1897422

working cleaup done

a447e9f

testing something -- need to add more secret keys

a4d16e2

just need to add one more key to GH secrets and should work

5c451eb

AnilKumar3494 commented Mar 7, 2026

View reviewed changes

Comment thread docker-compose.yml

RNR1 reviewed Mar 11, 2026

View reviewed changes

Comment thread src/components/Providers/Providers.tsx Outdated

RNR1 reviewed Mar 11, 2026

View reviewed changes

Comment thread src/hooks/queries/useWalkingDurationQuery.ts Outdated

AnilKumar3494 and others added 4 commits March 13, 2026 21:27

zod env config

96ab60f

zod env config

fd9fb46

Update config.ts

1fd809f

simplfy

cc89900

AnilKumar3494 marked this pull request as draft March 23, 2026 20:59

AnilKumar3494 self-assigned this Mar 23, 2026

AnilKumar3494 force-pushed the update-env branch from b127198 to cc89900 Compare March 24, 2026 01:53

AnilKumar3494 marked this pull request as ready for review March 24, 2026 22:21

Adds vite preflight check to ensure environment variables are set and…

d5f20fb

… fixes workflow references to GMaps API key secret

gcardonag approved these changes Mar 25, 2026

View reviewed changes

gcardonag merged commit 7f0779d into develop Mar 25, 2026
4 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update env#715

Update env#715
gcardonag merged 28 commits into
developfrom
update-env

AnilKumar3494 commented Feb 25, 2026

Uh oh!

AnilKumar3494 commented Feb 25, 2026 •

edited

Loading

Uh oh!

gcardonag commented Mar 4, 2026 •

edited by AnilKumar3494

Loading

Uh oh!

AnilKumar3494 commented Mar 7, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

gcardonag left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

AnilKumar3494 commented Feb 25, 2026

Change Summary

Change Reason

Uh oh!

AnilKumar3494 commented Feb 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

gcardonag commented Mar 4, 2026 • edited by AnilKumar3494 Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

AnilKumar3494 commented Mar 7, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

gcardonag left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

AnilKumar3494 commented Feb 25, 2026 •

edited

Loading

gcardonag commented Mar 4, 2026 •

edited by AnilKumar3494

Loading