From e3857e7f98053f0740d4fbd31dcf1eb162a702ab Mon Sep 17 00:00:00 2001
From: Peter Njeim <peterthegreatpeterthegreat@hotmail.com>
Date: Thu, 4 Jul 2024 01:15:39 -0300
Subject: [PATCH] Update publish_new_release.yaml

---
 .github/workflows/publish_new_release.yaml | 29 +++++++++++-----------
 1 file changed, 14 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/publish_new_release.yaml b/.github/workflows/publish_new_release.yaml
index de00be7..3c0513e 100644
--- a/.github/workflows/publish_new_release.yaml
+++ b/.github/workflows/publish_new_release.yaml
@@ -29,26 +29,25 @@ jobs:
             - name: Update token
               if: env.updated == 'true'
               run: |
-                  jwt_header=$(echo -n '{"alg":"HS256","typ":"JWT"}' | base64 | sed s/\+/-/g | sed 's/\//_/g' | sed -E s/=+$//)
-                  payload=$(echo -n '{"role":"client","version":"'"${{ steps.get-latest-release.outputs.LATEST_VERSION }}"'"}' | base64 | sed s/\+/-/g |sed 's/\//_/g' | sed -E s/=+$//)
-                  secret="${{ secrets.PG_SECRET }}"
-                  hexsecret=$(echo -n "$secret" | xxd -p | paste -sd "")
-                  hmac_signature=$(echo -n "${jwt_header}.${payload}" | openssl dgst -sha256 -mac HMAC -macopt hexkey:$hexsecret -binary | base64 | sed s/\+/-/g | sed 's/\//_/g' | sed -E s/=+$//)
-                  jwt="${jwt_header}.${payload}.${hmac_signature}"
+                  #jwt_header=$(echo -n '{"alg":"HS256","typ":"JWT"}' | base64 | sed s/\+/-/g | sed 's/\//_/g' | sed -E s/=+$//)
+                  #payload=$(echo -n '{"role":"client","version":"'"${{ steps.get-latest-release.outputs.LATEST_VERSION }}"'"}' | base64 | sed s/\+/-/g |sed 's/\//_/g' | sed -E s/=+$//)
+                  #secret="${{ secrets.PG_SECRET }}"
+                  #hexsecret=$(echo -n "$secret" | xxd -p | paste -sd "")
+                  #hmac_signature=$(echo -n "${jwt_header}.${payload}" | openssl dgst -sha256 -mac HMAC -macopt hexkey:$hexsecret -binary | base64 | sed s/\+/-/g | sed 's/\//_/g' | sed -E s/=+$//)
+                  #jwt="${jwt_header}.${payload}.${hmac_signature}"
 
-                  git -C $HOME clone --single-branch --no-tags --depth=1 https://${{ secrets.LIBRESCORE_USERNAME }}:${{ secrets.LIBRESCORE_TOKEN }}@github.com/LibreScore/${{ secrets.LIBRESCORE_REPO_A }}
-                  cd $HOME/${{ secrets.LIBRESCORE_REPO_A }}
-                  sed -ri 's/"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.+"/echo \\ \\ \\ \\ \\ \\ \\"'"$jwt"'\\"\\;/e' lib/utils/db_api.dart
+                  #git -C $HOME clone --single-branch --no-tags --depth=1 https://${{ secrets.LIBRESCORE_USERNAME }}:${{ secrets.LIBRESCORE_TOKEN }}@github.com/LibreScore/${{ secrets.LIBRESCORE_REPO_A }}
+                  #cd $HOME/${{ secrets.LIBRESCORE_REPO_A }}
+                  #sed -ri 's/"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.+"/echo \\ \\ \\ \\ \\ \\ \\"'"$jwt"'\\"\\;/e' lib/utils/db_api.dart
 
-                  git config user.name github-actions
-                  git config user.email github-actions@github.com
-                  git add -A
-                  git commit -m "chore: update token"
-                  git push --atomic origin master
+                  #git config user.name github-actions
+                  #git config user.email github-actions@github.com
+                  #git add -A
+                  #git commit -m "chore: update token"
+                  #git push --atomic origin master
 
                   echo "${{ secrets.SSH_KEY }}" | base64 --decode > $HOME/id_rsa
                   chmod 600 $HOME/id_rsa
-                  echo "prior to ssh"
                   ssh -i $HOME/id_rsa -o StrictHostKeyChecking=accept-new ${{ secrets.SSH_USERNAME }}@${{ secrets.SSH_DOMAIN }} -p ${{ secrets.SSH_PORT }} 'sudo -u postgres psql librescore -c "create or replace function auth.check_token() returns void language plpgsql as \$\$ begin if current_setting('"'request.jwt.claims', true)::json->>'version' not in ('server', '${{ steps.get-latest-release.outputs.CURRENT_VERSION }}', '${{ steps.get-latest-release.outputs.LATEST_VERSION }}') then raise insufficient_privilege using hint = 'Outdated version'"'; end if; end \$\$;"'                  
             - name: Upload assets
               if: env.updated == 'true'