Function createDeveloperApp

apps/web/actions/developers/create-app.ts:14–71

(data: {
	name: string;
	environment: "development" | "production";
})

import { hashKey } from "@/lib/developer-key-hash";

export async function createDeveloperApp(data: {
	name: string;
	environment: "development" | "production";
}) {
	const user = await getCurrentUser();
	if (!user) throw new Error("Unauthorized");

	if (!data.name.trim()) throw new Error("App name is required");

	const appId = nanoId();
	const publicKeyRaw = `cpk_${nanoIdLong()}`;
	const secretKeyRaw = `csk_${nanoIdLong()}`;
	const publicKeyHash = await hashKey(publicKeyRaw);
	const secretKeyHash = await hashKey(secretKeyRaw);

	const encryptedPublicKey = await encrypt(publicKeyRaw);
	const encryptedSecretKey = await encrypt(secretKeyRaw);

	await db().transaction(async (tx) => {
		await tx.insert(developerApps).values({
			id: appId,
			ownerId: user.id,
			name: data.name.trim(),
			environment: data.environment,
		});

		await tx.insert(developerApiKeys).values([
			{
				id: nanoId(),
				appId,
				keyType: "public",
				keyPrefix: publicKeyRaw.slice(0, 12),
				keyHash: publicKeyHash,
				encryptedKey: encryptedPublicKey,
			},
			{
				id: nanoId(),
				appId,
				keyType: "secret",
				keyPrefix: secretKeyRaw.slice(0, 12),
				keyHash: secretKeyHash,
				encryptedKey: encryptedSecretKey,
			},
		]);

		await tx.insert(developerCreditAccounts).values({
			id: nanoId(),
			appId,
			ownerId: user.id,
		});
	});

	return {
		appId,
		publicKey: publicKeyRaw,
		secretKey: secretKeyRaw,
	};
}