eedd127ea7
Some checks failed
ci / 정본·보안·린트·타입·테스트 (push) Failing after 1m13s
ci / 워크스페이스 빌드 검증 (push) Has been skipped
ci / 모바일 린트·타입·Jest (push) Failing after 1m4s
ci / Supabase Edge Functions + Cloudflare Worker (push) Successful in 37s
ci / .NET API 서버 테스트 (push) Successful in 27s
deploy-site / deploy (push) Failing after 20s
Stripe is not used. Keeping its checkout, portal and webhook paths meant a
second payment provider, a second return-URL format and dead UI.
- Delete the stripe-checkout, stripe-portal and stripe-webhook functions and
their config; billing-catalog serves Payple prices only, and the web parser
rejects a catalog that still mixes in Stripe prices.
- Web: drop the Stripe checkout/portal buttons, provider toggle and return
notices; billing shows Payple only. Past rows with provider='stripe' are
still displayed ("Stripe (종료)") with a support contact instead of a portal.
- Desktop: delete the Stripe checkout modal, payment IPC channels, preload
namespace and their types; "Remove ads with Pro" opens the web billing page
via license.openBilling. Support/refund copy names Payple.
- billingUrl() loses the Stripe-only success/canceled result option; the
Deno contract is regenerated.
- Migrations and the DB's accepted provider values are untouched (history).
- Docs and the backlog record the removal (MON-04, EXT-STRIPE-01, GAP-BILL-03).
Verified: typecheck (desktop/web/admin/api-client/mobile), contract:check,
deno check all functions, deno test 80/80, desktop 1478/1480 on the Electron
runtime (2 known environment failures), web and admin builds, release
metadata and mobile boundary self-tests, eslint on changed files.
169 lines
3.6 KiB
TOML
169 lines
3.6 KiB
TOML
# Supabase 프로젝트 설정 (로컬 개발 + CLI 기준)
|
|
# 공식 문서: https://supabase.com/docs/guides/cli/config
|
|
|
|
project_id = "d3ro-voice"
|
|
|
|
[api]
|
|
enabled = true
|
|
port = 55321
|
|
schemas = ["public", "storage"]
|
|
extra_search_path = ["public", "extensions"]
|
|
max_rows = 1000
|
|
|
|
[db]
|
|
port = 55322
|
|
shadow_port = 55320
|
|
major_version = 17
|
|
|
|
[db.pooler]
|
|
enabled = false
|
|
|
|
[db.seed]
|
|
enabled = true
|
|
sql_paths = ["./seed.sql"]
|
|
|
|
[realtime]
|
|
enabled = true
|
|
|
|
[studio]
|
|
enabled = true
|
|
port = 55323
|
|
|
|
[inbucket]
|
|
enabled = true
|
|
port = 55324
|
|
|
|
[storage]
|
|
enabled = true
|
|
file_size_limit = "50MiB"
|
|
|
|
[auth]
|
|
enabled = true
|
|
site_url = "http://localhost:5173"
|
|
additional_redirect_urls = [
|
|
"http://localhost:5173",
|
|
"http://localhost:3000",
|
|
"http://localhost:3001",
|
|
"https://d3ro.chanpaca.net",
|
|
"https://d3ro.chanpaca.net/app/**",
|
|
"http://localhost:3000/app/**",
|
|
"d3ro-voice://auth-callback"
|
|
]
|
|
jwt_expiry = 3600
|
|
enable_signup = true
|
|
enable_anonymous_sign_ins = false
|
|
enable_manual_linking = false
|
|
|
|
[auth.email]
|
|
enable_signup = true
|
|
double_confirm_changes = true
|
|
enable_confirmations = false
|
|
|
|
[auth.external.google]
|
|
enabled = true
|
|
client_id = "env(GOOGLE_OAUTH_CLIENT_ID)"
|
|
secret = "env(GOOGLE_OAUTH_SECRET)"
|
|
redirect_uri = ""
|
|
|
|
[auth.external.github]
|
|
enabled = true
|
|
client_id = "env(GITHUB_OAUTH_CLIENT_ID)"
|
|
secret = "env(GITHUB_OAUTH_SECRET)"
|
|
redirect_uri = ""
|
|
|
|
[auth.external.apple]
|
|
enabled = true
|
|
client_id = "env(APPLE_OAUTH_CLIENT_ID)"
|
|
secret = "env(APPLE_OAUTH_SECRET)"
|
|
redirect_uri = ""
|
|
|
|
[edge_runtime]
|
|
enabled = true
|
|
policy = "per_worker"
|
|
inspector_port = 55383
|
|
|
|
[functions.stt-proxy]
|
|
# requireUser()에서 직접 인증 처리
|
|
verify_jwt = false
|
|
|
|
[functions.llm-proxy]
|
|
# 2026 sb_publishable_ 키와 Gateway JWT 검증 비호환 — requireUser()에서 직접 인증
|
|
verify_jwt = false
|
|
|
|
[functions.content-report]
|
|
# requireUser() verifies the caller before the service-only reporting RPC.
|
|
verify_jwt = false
|
|
|
|
[functions.generate-meeting-document]
|
|
# requireUser() authenticates the caller before the service-role atomic RPCs.
|
|
verify_jwt = false
|
|
|
|
[functions.realtime-token]
|
|
# 2026 sb_publishable_ 키와 Gateway JWT 검증 비호환 — requireUser()에서 직접 인증
|
|
verify_jwt = false
|
|
|
|
[functions.billing-catalog]
|
|
# requireUser supports modern publishable keys and validates the access token.
|
|
verify_jwt = false
|
|
|
|
[functions.payple-checkout]
|
|
verify_jwt = false
|
|
|
|
[functions.payple-webhook]
|
|
verify_jwt = false
|
|
|
|
[functions.payple-manage]
|
|
verify_jwt = false
|
|
|
|
[functions.payple-renew]
|
|
verify_jwt = false
|
|
|
|
[functions.team-invite]
|
|
verify_jwt = true
|
|
|
|
[functions.team-accept]
|
|
verify_jwt = true
|
|
|
|
[functions.send-push]
|
|
# Mixed user-JWT and service-key endpoint. The handler verifies either the
|
|
# current user session or an exact server secret; platform JWT verification
|
|
# would reject modern sb_secret_ service calls before code can authorize them.
|
|
verify_jwt = false
|
|
|
|
[functions.embed-chunks]
|
|
verify_jwt = true
|
|
|
|
[functions.search-knowledge]
|
|
verify_jwt = true
|
|
|
|
[functions.admin-users]
|
|
verify_jwt = true
|
|
|
|
[functions.admin-subscriptions]
|
|
verify_jwt = true
|
|
|
|
[functions.admin-payments]
|
|
verify_jwt = true
|
|
|
|
[functions.admin-audit-log]
|
|
verify_jwt = true
|
|
|
|
[functions.account-delete]
|
|
# requireUser() verifies the current access token and the function additionally
|
|
# requires a recently issued session before destructive deletion.
|
|
verify_jwt = false
|
|
|
|
[functions.iap-verify]
|
|
# Store verification occurs only after requireUser() validates the caller.
|
|
verify_jwt = false
|
|
|
|
[functions.admob-ssv]
|
|
# AdMob calls this endpoint without a Supabase JWT; ECDSA SSV validation is mandatory.
|
|
verify_jwt = false
|
|
|
|
[functions.google-play-rtdn]
|
|
# Pub/Sub calls this endpoint with a Google-issued OIDC token validated in the function.
|
|
verify_jwt = false
|
|
|
|
[analytics]
|
|
enabled = false
|