Skip to content

Conversation

@damonrand
Copy link

Summary

  • New developer portal homepage with service catalog
  • Interactive API documentation using Scalar for PostgREST schemas
  • Kong routing updates for home app and Studio
  • Security improvements (removed anon key, added basic auth to docs)
  • Kong 3.10 upgrade planning documentation

Changes

Home Application

  • Deployed to supabase-home-mgf (Deno/Hono)
  • Service catalog with 5 categories (Infrastructure, Supabase APIs, Simtricity APIs, Internal Apps, Websites)
  • Scalar integration for MyEnergy, Flows, and Flux schema documentation
  • Source: https://github.com/simtricity/simt-supabase-home

Kong Configuration

  • OpenAPI spec routes: /openapi/rest/{myenergy,flows,flux} (unauthenticated, for Scalar)
  • Kong status: /kong-info, /kong-version (basic auth)
  • Home routes: / (public), /api/docs/* (basic auth)
  • Studio routes: /studio, /project/*, /api/* (basic auth, fixed conflicts)

Security

  • Removed anon key from docs pages
  • API docs protected with basic auth (DASHBOARD credentials)
  • All secrets via Fly environment variables
  • Private IPv6 allocated for Flycast networking

Deployment Status

✅ Home app deployed and healthy
✅ Kong deployed with new routing
✅ Studio access verified
✅ API docs working with schema-specific authentication

Test URLs

Secrets Required

When deploying to new environments, set:

fly secrets set \
  SUPABASE_SERVICE_KEY="..." \
  FLOWS_ROLE_JWT="..." \
  FLUX_JWT="..." \
  --app supabase-home-<org>

New Features:
- Developer portal homepage with service catalog (Deno/Hono, deployed to supabase-home-mgf)
- Interactive API documentation using Scalar for PostgREST schemas (MyEnergy, Flows, Flux)
- Schema-specific OpenAPI endpoints with proper JWT role authentication
- Kong status endpoints (/kong-info, /kong-version) with basic auth
- Kong Gateway 3.10 LTS upgrade planning documentation

Kong Routing Changes:
- Add /openapi/rest/* routes for unauthenticated schema spec access (with Accept-Profile headers)
- Add home app routes: / (public catalog), /api/docs/* (basic auth protected)
- Fix Studio routing: /api/*, /project/*, /monaco-editor/*, /studio (all basic auth)
- Route priority fixed: specific routes before catch-alls

Security:
- Removed anon key disclosure from docs pages
- API documentation protected with basic auth (partner developers only)
- All credentials via Fly secrets (none in git)
- Home app deployment: fly/home/ with secrets template

Source code: https://github.com/simtricity/simt-supabase-home
@damonrand damonrand requested a review from chatch October 18, 2025 21:14
@damonrand damonrand added the enhancement New feature or request label Oct 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants