Authorization requires compile time settings about verk_web HOT 5 OPEN

Ahh, actually this won't work, as stated in Plug docs init might be called during compilation.

from verk_web.

It probably could be something simple like this:

defmodule VerkBasicAuth do
  @behaviour Plug

  def init(_opts) do
    if Application.get_env(:verk_web, :authorization) do
      BasicAuth.init(use_config: {:verk_web, :authorization})
    else
      :no_auth
    end
  end

  def call(conn, :no_auth), do: conn
  def call(%{request_path: "/verk" <> _} = conn, opts), do: BasicAuth.call(conn, opts)
  def call(conn, _), do: conn
end

from verk_web.

I have submitted a PR in Verk to address this kind of issue by leveraging Confex. Happy to submit a PR here to do the same.

from verk_web.

@tlvenn, I don't think this issue is related to environment variables versus application configuration. I may be completely wrong here but the issue here is that the plug is added at compile time.

from verk_web.

Good catch @edgurgel. With Phoenix 1.3, you can leverage load_from_system_env to solve this problem:

@doc """
  Dynamically loads configuration from the system environment
  on startup.

  It receives the endpoint configuration from the config files
  and must return the updated configuration.
  """
  def load_from_system_env(config) do
    config = Confex.process_env(config)

    unless config[:secret_key_base] do
      raise "Set SECRET_KEY environment variable!"
    end

    {:ok, config}
  end

https://github.com/Nebo15/pkcs7_verify.api/blob/master/lib/pkcs7_verify_api/web/endpoint.ex#L30

from verk_web.