jit-db-gatekeeper/default.nix at main · supabase/jit-db-gatekeeper · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
{ pkgs ? import <nixpkgs> {} }:

pkgs.buildGoModule {
  pname = "jit-db-gatekeeper";
  version = "1.0.4";

  src = ./.;

  vendorHash = null;

  nativeBuildInputs = with pkgs; [
    pkg-config
  ];

  buildInputs = with pkgs; [
    pam
  ];

  env.CGO_ENABLED = "1";

  # Build as shared library for PAM
  buildPhase = ''
    runHook preBuild
    go build -buildmode=c-shared -o pam_jit_pg.so
    runHook postBuild
  '';

  checkPhase = ''
      runHook preCheck
      go test -v ./...
      runHook postCheck
  '';

  installPhase = ''
    runHook preInstall
    mkdir -p $out/lib/security
    cp pam_jit_pg.so $out/lib/security/
    runHook postInstall
  '';

  meta = with pkgs.lib; {
    description = "PAM module for JWT authentication with PostgreSQL backend";
    homepage = "https://github.com/supabase/jit-db-gatekeeper";
    license = licenses.mit;
    maintainers = [ ];
    platforms = platforms.unix;
  };
}