rescomputer / res-ios

Res is real computer speech, talk with an AI that listens and can hold a conversation with you.
https://res.computer
38 stars 1 forks source link

Use jwt instead of VAPI key #47

Closed mikejonas closed 3 months ago

mikejonas commented 3 months ago

** Before I merge this in, I'll merge in the other PR with sentry to catch errors, just to be sure it's running smoothy for everyone.

To protect the VAPI key from being exposed, we instead have an endpoint that signs a JWT with the VAPI private key. This is a security measure recommended by VAPI.

We can optimize this a bit, but for now I'm issuing a new token each time there's a call. The request only takes 50 - 100ms.

This PR also adds in the swift Supabase SDK