From 687ba3292eb7c7ec145b439fd08fe44ff49994a2 Mon Sep 17 00:00:00 2001
From: Jonas Heller <168646044+jheller1212@users.noreply.github.com>
Date: Mon, 6 Jul 2026 19:53:28 +0200
Subject: [PATCH] Edge functions: prefer SB_SERVICE_KEY over legacy service
 role key

---
 supabase/functions/delete-account/index.ts  | 2 +-
 supabase/functions/manage-api-keys/index.ts | 2 +-
 supabase/functions/workshop-config/index.ts | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/supabase/functions/delete-account/index.ts b/supabase/functions/delete-account/index.ts
index a32a697..19f1abb 100644
--- a/supabase/functions/delete-account/index.ts
+++ b/supabase/functions/delete-account/index.ts
@@ -33,7 +33,7 @@ Deno.serve(async (req) => {
     }
 
     const supabaseUrl = Deno.env.get('SUPABASE_URL')!;
-    const serviceRoleKey = Deno.env.get('SUPABASE_SERVICE_ROLE_KEY')!;
+    const serviceRoleKey = (Deno.env.get('SB_SERVICE_KEY') ?? Deno.env.get('SUPABASE_SERVICE_ROLE_KEY'))!;
     const admin = createClient(supabaseUrl, serviceRoleKey, {
       auth: { autoRefreshToken: false, persistSession: false },
     });
diff --git a/supabase/functions/manage-api-keys/index.ts b/supabase/functions/manage-api-keys/index.ts
index e7009c1..90635e4 100644
--- a/supabase/functions/manage-api-keys/index.ts
+++ b/supabase/functions/manage-api-keys/index.ts
@@ -68,7 +68,7 @@ Deno.serve(async (req) => {
     }
 
     const supabaseUrl = Deno.env.get('SUPABASE_URL')!;
-    const serviceRoleKey = Deno.env.get('SUPABASE_SERVICE_ROLE_KEY')!;
+    const serviceRoleKey = (Deno.env.get('SB_SERVICE_KEY') ?? Deno.env.get('SUPABASE_SERVICE_ROLE_KEY'))!;
     const encryptionSecret = Deno.env.get('API_KEYS_ENCRYPTION_SECRET');
 
     if (!encryptionSecret) {
diff --git a/supabase/functions/workshop-config/index.ts b/supabase/functions/workshop-config/index.ts
index d9355f9..e12461d 100644
--- a/supabase/functions/workshop-config/index.ts
+++ b/supabase/functions/workshop-config/index.ts
@@ -82,7 +82,7 @@ Deno.serve(async (req) => {
 
   try {
     const supabaseUrl = Deno.env.get('SUPABASE_URL')!;
-    const serviceRoleKey = Deno.env.get('SUPABASE_SERVICE_ROLE_KEY')!;
+    const serviceRoleKey = (Deno.env.get('SB_SERVICE_KEY') ?? Deno.env.get('SUPABASE_SERVICE_ROLE_KEY'))!;
     const encryptionSecret = Deno.env.get('API_KEYS_ENCRYPTION_SECRET');
 
     if (!encryptionSecret) {