ENG-420 Obtain a password from the roam props of the plugin settings. (#245)

Create it (as a UUID, which is cryptographicallly safe) and store it otherwise.
Added an utility function to set Props.

Author: maparent

apps/roam/src/utils/getBlockProps.ts

@@ -24,11 +24,12 @@ export const normalizeProps = (props: json): json =>
           )
     : props;
 
+export const getRawBlockProps = (uid: string) =>
+  (window.roamAlphaAPI.pull("[:block/props]", [":block/uid", uid])?.[
+    ":block/props"
+  ] || {}) as Record<string, json>;
+
 const getBlockProps = (uid: string) =>
-  normalizeProps(
-    (window.roamAlphaAPI.pull("[:block/props]", [":block/uid", uid])?.[
-      ":block/props"
-    ] || {}) as Record<string, json>,
-  ) as Record<string, json>;
+  normalizeProps(getRawBlockProps(uid)) as Record<string, json>;
 
 export default getBlockProps;

apps/roam/src/utils/setBlockProps.ts

@@ -0,0 +1,49 @@
+import { type json, getRawBlockProps } from "./getBlockProps";
+import getPageUidByPageTitle from "roamjs-components/queries/getPageUidByPageTitle";
+
+export const deNormalizeProps = (props: json): json =>
+  typeof props === "object"
+    ? props === null
+      ? null
+      : Array.isArray(props)
+        ? props.map(deNormalizeProps)
+        : Object.fromEntries(
+            Object.entries(props).map(([k, v]) => [
+              `:${k}`,
+              typeof v === "object" && v !== null && !Array.isArray(v)
+                ? deNormalizeProps(v)
+                : Array.isArray(v)
+                  ? v.map(deNormalizeProps)
+                  : v,
+            ]),
+          )
+    : props;
+
+const setBlockProps = (
+  uid: string,
+  newProps: Record<string, json>,
+  denormalize: boolean = false,
+) => {
+  const baseProps = getRawBlockProps(uid);
+  if (typeof baseProps === "object" && !Array.isArray(baseProps)) {
+    const props = {
+      ...(baseProps || {}),
+      ...(denormalize
+        ? (deNormalizeProps(newProps) as Record<string, json>)
+        : newProps),
+    } as Record<string, json>;
+    window.roamAlphaAPI.data.block.update({ block: { uid, props } });
+    return props;
+  }
+  return baseProps;
+};
+
+export const testSetBlockProps = (
+  title: string,
+  newProps: Record<string, json>,
+) => {
+  const uid = getPageUidByPageTitle(title);
+  return uid ? setBlockProps(uid, newProps) : null;
+};
+
+export default setBlockProps;

apps/roam/src/utils/supabaseContext.ts

@@ -1,15 +1,23 @@
 import { getNodeEnv } from "roamjs-components/util/env";
 import getCurrentUserEmail from "roamjs-components/queries/getCurrentUserEmail";
 import getCurrentUserDisplayName from "roamjs-components/queries/getCurrentUserDisplayName";
+import getPageUidByPageTitle from "roamjs-components/queries/getPageUidByPageTitle";
 import getRoamUrl from "roamjs-components/dom/getRoamUrl";
+
 import { Database } from "@repo/database/types.gen";
+import { DISCOURSE_CONFIG_PAGE_TITLE } from "~/utils/renderNodeConfigPage";
+import getBlockProps from "~/utils/getBlockProps";
+import setBlockProps from "~/utils/setBlockProps";
+
+declare const crypto: { randomUUID: () => string };
 
 type Platform = Database["public"]["Enums"]["Platform"];
 
 export type SupabaseContext = {
   platform: Platform;
   spaceId: number;
   userId: number;
+  spacePassword: string;
 };
 
 let CONTEXT_CACHE: SupabaseContext | null = null;
@@ -20,6 +28,22 @@ const base_url =
     ? "http://localhost:3000/api/supabase"
     : "https://discoursegraphs.com/api/supabase";
 
+const settingsConfigPageUid = getPageUidByPageTitle(
+  DISCOURSE_CONFIG_PAGE_TITLE,
+);
+
+const getOrCreateSpacePassword = () => {
+  const props = getBlockProps(settingsConfigPageUid);
+  const existing: string | unknown = props["space-user-password"];
+  if (existing && typeof existing === "string") return existing;
+  // use a uuid as password, at least cryptographically safe
+  const password = crypto.randomUUID();
+  setBlockProps(settingsConfigPageUid, {
+    "space-user-password": password,
+  });
+  return password;
+};
+
 // Note: Some of this will be more typesafe if rewritten with direct supabase access eventually.
 // We're going through nextjs until we have settled security.
 
@@ -100,12 +124,13 @@ export const getSupabaseContext = async (): Promise<SupabaseContext | null> => {
       const accountLocalId = window.roamAlphaAPI.user.uid();
       const personEmail = getCurrentUserEmail();
       const personName = getCurrentUserDisplayName();
+      const spacePassword = getOrCreateSpacePassword();
       const userId = await fetchOrCreatePlatformAccount({
         accountLocalId,
         personName,
         personEmail,
       });
-      CONTEXT_CACHE = { platform: "Roam", spaceId, userId };
+      CONTEXT_CACHE = { platform: "Roam", spaceId, userId, spacePassword };
     } catch (error) {
       console.error(error);
       return null;