fix: strip sslmode from connection string before passing to pg (prevent double-parsing) (#2420)

github-actions[bot] · Marfuen · web-flow · commit 00e6f13c6f22 · 2026-04-02T10:31:49.000-04:00
Co-authored-by: Mariano Fuentes &lt;marfuen98@gmail.com&gt;
diff --git a/apps/api/prisma/client.ts b/apps/api/prisma/client.ts
@@ -47,7 +47,11 @@ function getSslConfig(url: string): PoolConfig['ssl'] {
 
 function createPrismaClient(): PrismaClient {
   const url = process.env.DATABASE_URL!;
-  const adapter = new PrismaPg({ connectionString: url, ssl: getSslConfig(url) });
+  const ssl = getSslConfig(url);
+  // Strip sslmode from connection string — pg parses it independently and
+  // can override our explicit ssl config. We handle SSL entirely via the ssl option.
+  const cleanUrl = url.replace(/[?&]sslmode=\w[\w-]*/g, '').replace(/\?&/, '?').replace(/\?$/, '');
+  const adapter = new PrismaPg({ connectionString: cleanUrl, ssl });
   return new PrismaClient({ adapter });
 }
 
diff --git a/apps/app/prisma/client.ts b/apps/app/prisma/client.ts
@@ -22,7 +22,9 @@ function getSslConfig(url: string): PoolConfig['ssl'] {
 
 function createPrismaClient(): PrismaClient {
   const url = process.env.DATABASE_URL!;
-  const adapter = new PrismaPg({ connectionString: url, ssl: getSslConfig(url) });
+  const ssl = getSslConfig(url);
+  const cleanUrl = url.replace(/[?&]sslmode=\w[\w-]*/g, '').replace(/\?&/, '?').replace(/\?$/, '');
+  const adapter = new PrismaPg({ connectionString: cleanUrl, ssl });
   return new PrismaClient({ adapter });
 }
 
diff --git a/apps/framework-editor/prisma/client.ts b/apps/framework-editor/prisma/client.ts
@@ -22,7 +22,9 @@ function getSslConfig(url: string): PoolConfig['ssl'] {
 
 function createPrismaClient(): PrismaClient {
   const url = process.env.DATABASE_URL!;
-  const adapter = new PrismaPg({ connectionString: url, ssl: getSslConfig(url) });
+  const ssl = getSslConfig(url);
+  const cleanUrl = url.replace(/[?&]sslmode=\w[\w-]*/g, '').replace(/\?&/, '?').replace(/\?$/, '');
+  const adapter = new PrismaPg({ connectionString: cleanUrl, ssl });
   return new PrismaClient({ adapter });
 }
 
diff --git a/apps/portal/prisma/client.ts b/apps/portal/prisma/client.ts
@@ -22,7 +22,9 @@ function getSslConfig(url: string): PoolConfig['ssl'] {
 
 function createPrismaClient(): PrismaClient {
   const url = process.env.DATABASE_URL!;
-  const adapter = new PrismaPg({ connectionString: url, ssl: getSslConfig(url) });
+  const ssl = getSslConfig(url);
+  const cleanUrl = url.replace(/[?&]sslmode=\w[\w-]*/g, '').replace(/\?&/, '?').replace(/\?$/, '');
+  const adapter = new PrismaPg({ connectionString: cleanUrl, ssl });
   return new PrismaClient({ adapter });
 }
 
diff --git a/packages/db/scripts/combine-schemas.js b/packages/db/scripts/combine-schemas.js
@@ -68,7 +68,9 @@ function getSslConfig(url: string) {
 
 function createPrismaClient(): PrismaClient {
   const url = process.env.DATABASE_URL!;
-  const adapter = new PrismaPg({ connectionString: url, ssl: getSslConfig(url) });
+  const ssl = getSslConfig(url);
+  const cleanUrl = url.replace(/[?&]sslmode=\\w[\\w-]*/g, '').replace(/\\?&/, '?').replace(/\\?$/, '');
+  const adapter = new PrismaPg({ connectionString: cleanUrl, ssl });
   return new PrismaClient({ adapter });
 }
 
diff --git a/packages/db/src/client.ts b/packages/db/src/client.ts
@@ -22,7 +22,9 @@ function getSslConfig(url: string): PoolConfig['ssl'] {
 
 function createPrismaClient(): PrismaClient {
   const url = process.env.DATABASE_URL!;
-  const adapter = new PrismaPg({ connectionString: url, ssl: getSslConfig(url) });
+  const ssl = getSslConfig(url);
+  const cleanUrl = url.replace(/[?&]sslmode=\w[\w-]*/g, '').replace(/\?&/, '?').replace(/\?$/, '');
+  const adapter = new PrismaPg({ connectionString: cleanUrl, ssl });
   return new PrismaClient({ adapter });
 }
 

Original file line number	Diff line number	Diff line change
`@@ -22,7 +22,9 @@ function getSslConfig(url: string): PoolConfig['ssl'] {`
`22`	`22`
`23`	`23`	`function createPrismaClient(): PrismaClient {`
`24`	`24`	`const url = process.env.DATABASE_URL!;`
`25`		`- const adapter = new PrismaPg({ connectionString: url, ssl: getSslConfig(url) });`
	`25`	`+ const ssl = getSslConfig(url);`
	`26`	`+ const cleanUrl = url.replace(/[?&]sslmode=\w[\w-]*/g, '').replace(/\?&/, '?').replace(/\?$/, '');`
	`27`	`+ const adapter = new PrismaPg({ connectionString: cleanUrl, ssl });`
`26`	`28`	`return new PrismaClient({ adapter });`
`27`	`29`	`}`
`28`	`30`
Original file line number	Diff line number	Diff line change
`@@ -68,7 +68,9 @@ function getSslConfig(url: string) {`
`68`	`68`
`69`	`69`	`function createPrismaClient(): PrismaClient {`
`70`	`70`	`const url = process.env.DATABASE_URL!;`
`71`		`- const adapter = new PrismaPg({ connectionString: url, ssl: getSslConfig(url) });`
	`71`	`+ const ssl = getSslConfig(url);`
	`72`	`+ const cleanUrl = url.replace(/[?&]sslmode=\\w[\\w-]*/g, '').replace(/\\?&/, '?').replace(/\\?$/, '');`
	`73`	`+ const adapter = new PrismaPg({ connectionString: cleanUrl, ssl });`
`72`	`74`	`return new PrismaClient({ adapter });`
`73`	`75`	`}`
`74`	`76`