feat: add api_token to livestream jwt claim

this allows us to drop the dependency on postgres

livestream/configs.go

@@ -2,6 +2,7 @@ package main
 
 import (
 	"fmt"
+	"strings"
 
 	"github.com/fsnotify/fsnotify"
 	"github.com/spf13/viper"
@@ -23,4 +24,9 @@ func loadConfigs() {
 		fmt.Println("Config file changed:", e.Name)
 	})
 	viper.WatchConfig()
+
+	viper.SetEnvPrefix("livestream") // will be uppercased automatically
+	replacer := strings.NewReplacer(".", "_")
+	viper.SetEnvKeyReplacer(replacer)
+	viper.BindEnv("jwt.secret") // read from LIVESTREAM_JWT_SECRET
 }

livestream/jwt.go

@@ -31,7 +31,7 @@ func decodeAuthToken(authHeader string) (jwt.MapClaims, error) {
 			return nil, fmt.Errorf("unexpected signing method: %v", token.Header["alg"])
 		}
 		// Here you should specify the secret used to sign your JWTs.
-		return []byte(viper.GetString("jwt.token")), nil
+		return []byte(viper.GetString("jwt.secret")), nil
 	})
 
 	if err != nil {

livestream/main.go

@@ -3,6 +3,7 @@ package main
 import (
 	"encoding/json"
 	"errors"
+	"fmt"
 	"log"
 	"net/http"
 	"strconv"
@@ -104,12 +105,7 @@ func main() {
 		if err != nil {
 			return err
 		}
-		teamIdInt := int(claims["team_id"].(float64))
-
-		token, err := tokenFromTeamId(teamIdInt)
-		if err != nil {
-			return err
-		}
+		token := fmt.Sprint(claims["api_token"])
 
 		var hash *expirable.LRU[string, string]
 		var ok bool
@@ -155,26 +151,14 @@ func main() {
 				return err
 			}
 			teamId = strconv.Itoa(int(claims["team_id"].(float64)))
+			token = fmt.Sprint(claims["api_token"])
 
 			log.Printf("~~~~ team found %s", teamId)
 			if teamId == "" {
 				return errors.New("teamId is required unless geo=true")
 			}
 		}
 
-		if teamId != "" {
-			teamIdInt64, err := strconv.ParseInt(teamId, 10, 0)
-			if err != nil {
-				return err
-			}
-
-			teamIdInt := int(teamIdInt64)
-			token, err = tokenFromTeamId(teamIdInt)
-			if err != nil {
-				return err
-			}
-		}
-
 		eventTypes := []string{}
 		if eventType != "" {
 			eventTypes = strings.Split(eventType, ",")

posthog/api/team.py

@@ -199,7 +199,7 @@ def get_groups_on_events_querying_enabled(self, team: Team) -> bool:
 
     def get_live_events_token(self, team: Team) -> Optional[str]:
         return encode_jwt(
-            {"team_id": team.id},
+            {"team_id": team.id, "api_token": team.api_token},
             timedelta(days=7),
             PosthogJwtAudience.LIVESTREAM,
         )