Rename admin oauth vars

Author: benkoppe

apps/dashboard/convex/dev.ts

@@ -17,9 +17,7 @@ declare const process: { env: Record<string, string | undefined> };
 const SESSION_DURATION_MS = 30 * 24 * 60 * 60 * 1000;
 
 /**
- * Throws if the current Convex deployment explicitly identifies itself as prod.
- * Convex does not automatically expose the local `.env.local` deployment marker
- * to function runtime env, so an unset value must still be allowed for dev.
+ * Dev helpers refuse to run against production deployments.
  */
 function assertDev(): void {
   const deployment = process.env.CONVEX_DEPLOYMENT;

apps/dashboard/convex/gmailOAuth.ts

@@ -113,7 +113,7 @@ export const start = httpAction(async (ctx, request) => {
 
     const redirectUri = getRedirectUri(request);
     const params = new URLSearchParams({
-      client_id: getRequiredEnv("GOOGLE_OAUTH_CLIENT_ID"),
+      client_id: getRequiredEnv("ADMIN_GOOGLE_OAUTH_CLIENT_ID"),
       redirect_uri: redirectUri,
       response_type: "code",
       scope: GMAIL_SCOPES.join(" "),
@@ -260,7 +260,7 @@ export const storeConnection = internalMutation({
 });
 
 function getRedirectUri(request: Request) {
-  const configured = process.env.GOOGLE_OAUTH_REDIRECT_URI;
+  const configured = process.env.ADMIN_GOOGLE_OAUTH_REDIRECT_URI;
   if (configured) return configured;
 
   const url = new URL(request.url);
@@ -270,8 +270,8 @@ function getRedirectUri(request: Request) {
 async function exchangeCodeForTokens(code: string, redirectUri: string) {
   const params = new URLSearchParams({
     code,
-    client_id: getRequiredEnv("GOOGLE_OAUTH_CLIENT_ID"),
-    client_secret: getRequiredEnv("GOOGLE_OAUTH_CLIENT_SECRET"),
+    client_id: getRequiredEnv("ADMIN_GOOGLE_OAUTH_CLIENT_ID"),
+    client_secret: getRequiredEnv("ADMIN_GOOGLE_OAUTH_CLIENT_SECRET"),
     redirect_uri: redirectUri,
     grant_type: "authorization_code",
   });

apps/dashboard/convex/ingestion.ts

@@ -479,11 +479,13 @@ async function refreshAccessToken(ctx: ActionCtx) {
   }
 
   const refreshToken = connection.refreshToken;
-  const clientId = process.env.GOOGLE_OAUTH_CLIENT_ID;
-  const clientSecret = process.env.GOOGLE_OAUTH_CLIENT_SECRET;
+  const clientId = process.env.ADMIN_GOOGLE_OAUTH_CLIENT_ID;
+  const clientSecret = process.env.ADMIN_GOOGLE_OAUTH_CLIENT_SECRET;
 
   if (!refreshToken || !clientId || !clientSecret) {
-    throw new Error("Gmail OAuth client env vars are not configured.");
+    throw new Error(
+      "Admin ingestion Google OAuth client env vars are not configured.",
+    );
   }
 
   const params = new URLSearchParams({

apps/dashboard/convex/listservAdmin.ts

@@ -1053,11 +1053,13 @@ async function getGmailConnection(ctx: ActionCtx) {
 }
 
 async function refreshGmailAccessToken(ctx: ActionCtx, refreshToken: string) {
-  const clientId = process.env.GOOGLE_OAUTH_CLIENT_ID;
-  const clientSecret = process.env.GOOGLE_OAUTH_CLIENT_SECRET;
+  const clientId = process.env.ADMIN_GOOGLE_OAUTH_CLIENT_ID;
+  const clientSecret = process.env.ADMIN_GOOGLE_OAUTH_CLIENT_SECRET;
 
   if (!refreshToken || !clientId || !clientSecret) {
-    throw new Error("Gmail OAuth client env vars are not configured.");
+    throw new Error(
+      "Admin ingestion Google OAuth client env vars are not configured.",
+    );
   }
 
   const params = new URLSearchParams({