chore: update worker-deploy, hide sensitive env vars during setup

ubq-testing · Oct 3, 2024 · ea6e4bc · ea6e4bc
1 parent 0b56b2c
commit ea6e4bc
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/.github/workflows/worker-deploy.yml b/.github/workflows/worker-deploy.yml
@@ -39,8 +39,10 @@ jobs:
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           secrets: |
             TELEGRAM_BOT_ENV
+            REPO_ADMIN_ACCESS_TOKEN
         env:
           TELEGRAM_BOT_ENV: ${{ secrets.TELEGRAM_BOT_ENV }}
+          REPO_ADMIN_ACCESS_TOKEN: ${{ secrets.REPO_ADMIN_ACCESS_TOKEN }}
 
       - name: Write Deployment URL to Summary
         run: |

diff --git a/src/bot/mtproto-api/bot/scripts/sms-auth/setup-env.ts b/src/bot/mtproto-api/bot/scripts/sms-auth/setup-env.ts
@@ -144,7 +144,15 @@ class SetUpHandler {
         }
 
         console.log(step.title);
-        const answer = await input.password(`  ${question.message}\n>  `);
+
+        const passwords = ["TELEGRAM_BOT_WEBHOOK_SECRET", "REPO_ADMIN_ACCESS_TOKEN", "TELEGRAM_API_HASH", "TELEGRAM_BOT_TOKEN", "TELEGRAM_APP_ID"];
+        let answer;
+
+        if (passwords.includes(question.name)) {
+          answer = await input.password(`  ${question.message}\n>  `);
+        } else {
+          answer = await input.text(`  ${question.message}\n>  `);
+        }
 
         await this.handleFirstTwo(question, answer);