Merge pull request #210 from StatelessStudio/v3.3.4

[3.3.4] Mar-15-2021

Author: DrewImm

CHANGELOG.md

@@ -1,5 +1,10 @@
 # PointyApi Changelog
 
+## [3.3.4] Mar-15-2021
+
+### Fixes
+- Use SSL for postgres production connections
+
 ## [3.3.3]
 
 ### Fixes

package-lock.json

@@ -1,6 +1,6 @@
 {
 	"name": "pointyapi",
-	"version": "3.3.3",
+	"version": "3.3.4",
 	"author": "stateless-studio",
 	"license": "MIT",
 	"scripts": {

package.json

@@ -17,13 +17,15 @@ export class PointyPostgres extends BaseDb {
 	public connect(options?: string | Object): Promise<Connection> {
 		return new Promise(async (accept, reject) => {
 			let pgOptions: any;
+			let useSSL = false;
 
 			if (process.env.DATABASE_URL) {
 				// Live
 				pgOptions = PostgressConnectionStringParser.parse(
 					process.env.DATABASE_URL
 				);
 				pgOptions.type = 'postgres';
+				useSSL = true;
 
 				this.logger('Using production database');
 				this.logger(
@@ -52,8 +54,7 @@ export class PointyPostgres extends BaseDb {
 				this.shouldSync = true;
 			}
 
-			// Create connection
-			const conn = await createConnection(<ConnectionOptions>{
+			options = {
 				name: this.connectionName,
 				type: process.env.TYPEORM_DRIVER_TYPE || pgOptions.type,
 				driver: process.env.TYPEORM_DRIVER_TYPE || pgOptions.type,
@@ -67,7 +68,16 @@ export class PointyPostgres extends BaseDb {
 				uuidExtension: pgOptions.uuidExtension
 					? pgOptions.uuidExtension
 					: 'pgcrypto'
-			}).catch((error) => {
+			};
+
+			if (useSSL) {
+				options['ssl'] = {
+					rejectUnauthorized: false
+				};
+			}
+
+			// Create connection
+			const conn = await createConnection(<ConnectionOptions>options).catch((error) => {
 				reject(error);
 				return false;
 			});