hermann/expria-backend
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix(deepgram): use correct /v1/projects/{project_id}/keys endpoint

Browse source 
- Replace non-existent /v1/auth/grant with /v1/projects/{project_id}/keys
- Add DEEPGRAM_PROJECT_ID env variable
- Update request body and response parsing
- Update tests

Typecheck: OK · Tests: 241/241 ✅

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Hermann_Kitio 2026-04-25 05:36:19 +03:00
parent 7cac057062
commit a62b4816a2
3 changed files with 57 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

65
src/lib/deepgram.ts
View file

@ -1,12 +1,16 @@
/**
* Client Deepgram — Sprint 4b.
* Client Deepgram — Sprint 4b (corrigé Sprint 4b.1).
*
* Génère un token éphémère que le frontend utilise pour ouvrir une connexion
* directe à Deepgram (transcription live). Le token a une durée de vie courte
* (par défaut 600 s) et n'expose pas la clé maître `DEEPGRAM_API_KEY`.
* Génère une clé API éphémère que le frontend utilise pour ouvrir une connexion
* directe à Deepgram (transcription live). La clé temporaire est créée comme
* sub-key d'un projet existant — la clé maître `DEEPGRAM_API_KEY` reste côté
* serveur et n'est jamais exposée au navigateur.
*
* Endpoint : POST https://api.deepgram.com/v1/auth/grant
* Doc : https://developers.deepgram.com/docs/create-temporary-api-key
* Endpoint : POST https://api.deepgram.com/v1/projects/{project_id}/keys
* Doc : https://developers.deepgram.com/reference/create-key
*
* Le scope `usage:write` permet d'ouvrir une session live (POST /listen ou
* WebSocket) sans donner accès aux endpoints de management du projet.
*/
const DEEPGRAM_API_KEY = process.env.DEEPGRAM_API_KEY ?? "";
@ -18,18 +22,35 @@ export interface DeepgramToken {
expires_in: number;
}
function getProjectId(): string {
const id = process.env.DEEPGRAM_PROJECT_ID ?? "";
if (!id) {
throw new Error("DEEPGRAM_PROJECT_ID is not set");
}
return id;
}
export async function createTemporaryToken(
ttlSeconds: number,
): Promise<DeepgramToken> {
const response = await fetch(`${DEEPGRAM_BASE_URL}/v1/auth/grant`, {
method: "POST",
headers: {
"Content-Type": "application/json",
Authorization: `Token ${DEEPGRAM_API_KEY}`,
const projectId = getProjectId();
const response = await fetch(
`${DEEPGRAM_BASE_URL}/v1/projects/${projectId}/keys`,
{
method: "POST",
headers: {
"Content-Type": "application/json",
Authorization: `Token ${DEEPGRAM_API_KEY}`,
},
body: JSON.stringify({
comment: "expria-temp",
scopes: ["usage:write"],
time_to_live_in_seconds: ttlSeconds,
}),
signal: AbortSignal.timeout(DEEPGRAM_TIMEOUT_MS),
},
body: JSON.stringify({ ttl_seconds: ttlSeconds }),
signal: AbortSignal.timeout(DEEPGRAM_TIMEOUT_MS),
});
);
if (!response.ok) {
throw new Error(
@ -37,17 +58,13 @@ export async function createTemporaryToken(
);
}
const data = (await response.json()) as {
access_token?: string;
expires_in?: number;
};
const data = (await response.json()) as { key?: string };
if (typeof data.access_token !== "string" || data.access_token.length === 0) {
throw new Error("Deepgram API: access_token manquant dans la réponse");
if (typeof data.key !== "string" || data.key.length === 0) {
throw new Error("Deepgram API: key manquant dans la réponse");
}
const expiresIn =
typeof data.expires_in === "number" ? data.expires_in : ttlSeconds;
return { token: data.access_token, expires_in: expiresIn };
// L'API ne renvoie pas la TTL — on retourne celle qui a été demandée,
// qui matche ce que l'API a appliqué (champ `time_to_live_in_seconds`).
return { token: data.key, expires_in: ttlSeconds };
}