Remove APPEAL_ENCRYPTION_KEY and legacy token validation (#94)

* Remove APPEAL_ENCRYPTION_KEY and legacy token validation

Co-Authored-By: [email protected] <[email protected]>

* [autofix.ci] apply automated fixes

---------

Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Co-authored-by: [email protected] <[email protected]>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>

Author: 3 people

lib/env.ts

@@ -38,7 +38,6 @@ const envSchema = z
   .object({
     OPENAI_API_KEY: z.string(),
     FIELD_ENCRYPTION_KEY: z.string(),
-    APPEAL_ENCRYPTION_KEY: z.string().optional(),
     SECRET_KEY: z.string(),
     CLERK_SECRET_KEY: z.string(),
     NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY: z.string(),

services/appeals.ts

@@ -13,14 +13,6 @@ export function generateAppealToken(userId: string) {
   return `${userId}-${signature}`;
 }
 
-export function generateLegacyAppealToken(userId: string) {
-  if (!env.APPEAL_ENCRYPTION_KEY) {
-    throw new Error("APPEAL_ENCRYPTION_KEY is not set");
-  }
-  const signature = crypto.createHmac("sha256", env.APPEAL_ENCRYPTION_KEY).update(userId).digest("hex");
-  return `${userId}-${signature}`;
-}
-
 export function validateAppealToken(token: string): [isValid: false, userId: null] | [isValid: true, userId: string] {
   const [userId, _] = token.split("-");
   if (!userId) {
@@ -31,11 +23,6 @@ export function validateAppealToken(token: string): [isValid: false, userId: nul
     return [true, userId];
   }
 
-  // TODO(s3ththompson): Remove once all old appeals have been closed
-  if (env.APPEAL_ENCRYPTION_KEY && token === generateLegacyAppealToken(userId)) {
-    return [true, userId];
-  }
-
   return [false, null];
 }