API: JWT_SECRET not working properly.

[rajdip-b]

Describe the bug

We have migrated to using zod for validating our env schema (refer #200). Recently, I have encountered an error where we can't log in due to JWT_SECRET not being fetched properly. Rest assured, I have double-checked on the paths and environmental variables to ensure that everything else is working.

Note that, if I try console.log(process.env.JWT_SECRET) anywhere else in the code, it outputs the expected value without fault. The error seems to be occurring in the JwtModule initialization in auth.module.ts.

Also note, if I use process.env.JWT_SECRET ?? 'some-value' in the JwtModule registration code, it seems to work fine.

To Reproduce
Steps to reproduce the behavior:

1. Run the API.
2. Use the /api/auth/send-otp endpoint to send an OTP to your email.
3. Copy the OTP and use /api/auth/validate-otp to validate your code.
4. Encounter the 500 Internal Server Error error in your response.

Expected behavior

• Authentication should have flowed smoothly.
• The user object should be reutrned as a response.
• The JWT bearer token should be sent as a cookie.

Screenshots

• Response error:
  

• Console log
  

Additional context

You can find the files in here:

• zod validation files
• JWT code

[jamesfrye420]

Can it be possibily because the JWTModule is trying to access env vars before they are read in the config module?

That would indicate that the JwtModule is being initialized before the config module is ready.

Could you verify this?

[rajdip-b]

The JWT code I linked belongs from the auth module. And in the top level app module, config module is initialised at the very beginning. So I'm doubtful if that might be the cause (I checked it the first thing).

[rajdip-b]

@jamesfrye420 could you link the PR? The solution you showed would work for now.

[jamesfrye420]

Sure, I just wanna check something before I push the pr. Will keep you updated

[shubham9069]

@rajdip-b Is this solved ? if it is still open so i can work on this

[rajdip-b]

Not really, but this isnt a priority at the moment.