chore: 改用 secrets 取代 secrets_store_secrets

Author: c-c-epr

.env.example

@@ -0,0 +1,2 @@
+LINE_CHANNEL_SECRET=
+LINE_CHANNEL_ACCESS_TOKEN=

README.md

@@ -23,9 +23,10 @@ An “out-of-the-box” LINE Official Account webhook template for Cloudflare Wo
 2. Customize the code
    1. Message routing/handling: `src/eventRouter.ts`
    2. Config: `wrangler.toml`
-      1. `name`
-      2. `secrets_store_secrets`
-         1. `store_id` (both entries) -> replace with your account `store_id`
+      1. `name` 2. `secrets`
+         1. `LINE_CHANNEL_SECRET`
+         2. `LINE_CHANNEL_ACCESS_TOKEN`
+            -> set these using `wrangler secret put` or the Cloudflare dashboard
 3. Deploy
    1. Cloudflare
    2. `Workers & Pages`
@@ -35,10 +36,10 @@ An “out-of-the-box” LINE Official Account webhook template for Cloudflare Wo
 
 ## ⚙️ Configuration
 
-|     Type      |           Name            |                Description                 | Purpose  |
-| :-----------: | :-----------------------: | :----------------------------------------: | :------: |
-| Secrets Store |    LINE_CHANNEL_SECRET    |    LINE Official Account channel secret    | Validate |
-| Secrets Store | LINE_CHANNEL_ACCESS_TOKEN | LINE Official Account channel access token | Validate |
+|  Type   |           Name            |                Description                 | Purpose  |
+| :-----: | :-----------------------: | :----------------------------------------: | :------: |
+| Secrets |    LINE_CHANNEL_SECRET    |    LINE Official Account channel secret    | Validate |
+| Secrets | LINE_CHANNEL_ACCESS_TOKEN | LINE Official Account channel access token | Validate |
 
 <!-- Links -->
 <!-- Cloudflare -->

README.zh-TW.md

@@ -25,9 +25,10 @@ Language: [English](README.md) | [繁體中文](README.zh-TW.md)
 2. 修改程式
    1. 訊息處理路由`src/eventRouter.ts`
    2. 配置檔案`wrangler.toml`
-      1. `name`
-      2. `secrets_store_secrets`
-         1. `store_id`(兩個都要) -> 修改為帳號的`store_id`
+      1. `name` 2. `secrets`
+         1. `LINE_CHANNEL_SECRET`
+         2. `LINE_CHANNEL_ACCESS_TOKEN`
+            -> 可使用 `wrangler secret put` 或在 Cloudflare 控制台中設定
 3. 部署
    1. Cloudflare
    2. `Workers 和 Pages`
@@ -37,10 +38,10 @@ Language: [English](README.md) | [繁體中文](README.zh-TW.md)
 
 ## ⚙️配置
 
-|     類型      |           名稱            |                 配置                 | 用途 |
-| :-----------: | :-----------------------: | :----------------------------------: | :--: |
-| Secrets Store |    LINE_CHANNEL_SECRET    |    Line 官方帳號的 channel secret    | 驗證 |
-| Secrets Store | LINE_CHANNEL_ACCESS_TOKEN | Line 官方帳號的 channel access token | 驗證 |
+|  類型   |           名稱            |                 配置                 | 用途 |
+| :-----: | :-----------------------: | :----------------------------------: | :--: |
+| Secrets |    LINE_CHANNEL_SECRET    |    Line 官方帳號的 channel secret    | 驗證 |
+| Secrets | LINE_CHANNEL_ACCESS_TOKEN | Line 官方帳號的 channel access token | 驗證 |
 
 <!-- 網址們 -->
 <!-- Cloduflare -->

package.json

@@ -12,9 +12,9 @@
     "format": "prettier . --write",
     "format:check": "prettier . --check",
     "typecheck": "tsc --noEmit",
-    "start": "wrangler dev",
-    "dev": "wrangler dev",
-    "deploy": "wrangler deploy",
+    "start": "wrangler dev --env--file .env",
+    "dev": "wrangler dev --env--file .env",
+    "deploy": "wrangler deploy --secrets-file .env",
     "prestart": "npm run types:sync",
     "predev": "npm run types:sync",
     "predeploy": "npm run types:sync"

src/router.ts

@@ -8,7 +8,7 @@ export async function router(request: Request, env: Env, ctx: ExecutionContext)
     return new Response("Method Not Allowed", { status: 405 });
   }
   // 取得環境變數
-  const [channelSecret, channelAccessToken] = await Promise.all([env.LINE_CHANNEL_SECRET.get(), env.LINE_CHANNEL_ACCESS_TOKEN.get()]);
+  const [channelSecret, channelAccessToken] = await Promise.all([env.LINE_CHANNEL_SECRET, env.LINE_CHANNEL_ACCESS_TOKEN]);
   if (!channelSecret || !channelAccessToken) {
     return new Response("Server misconfigured", { status: 500 });
   }

test/router.extra.test.ts

@@ -11,16 +11,16 @@ vi.mock("../src/eventRouter", () => ({
 
 import { router } from "../src/router";
 
-const mockEnv = {
-  LINE_CHANNEL_SECRET: { get: vi.fn() },
-  LINE_CHANNEL_ACCESS_TOKEN: { get: vi.fn() },
+const mockEnv: any = {
+  LINE_CHANNEL_SECRET: "secret",
+  LINE_CHANNEL_ACCESS_TOKEN: "accessToken",
 };
 
 describe("router extra branches", () => {
   beforeEach(() => {
     vi.clearAllMocks();
-    mockEnv.LINE_CHANNEL_SECRET.get.mockResolvedValue("secret");
-    mockEnv.LINE_CHANNEL_ACCESS_TOKEN.get.mockResolvedValue("accessToken");
+    mockEnv.LINE_CHANNEL_SECRET = "secret";
+    mockEnv.LINE_CHANNEL_ACCESS_TOKEN = "accessToken";
   });
 
   it("returns 400 when body is not valid JSON", async () => {

test/router.test.ts

@@ -2,16 +2,16 @@ import { beforeEach, describe, expect, it, vi } from "vitest";
 import { router } from "../src/router";
 import { hmacSHA256Base64 } from "../src/utils/hmacSHA256Base64";
 
-const mockEnv = {
-  LINE_CHANNEL_SECRET: { get: vi.fn() },
-  LINE_CHANNEL_ACCESS_TOKEN: { get: vi.fn() },
+const mockEnv: any = {
+  LINE_CHANNEL_SECRET: "secret",
+  LINE_CHANNEL_ACCESS_TOKEN: "accessToken",
 };
 
 describe("router", () => {
   beforeEach(() => {
     vi.clearAllMocks();
-    mockEnv.LINE_CHANNEL_SECRET.get.mockResolvedValue("secret");
-    mockEnv.LINE_CHANNEL_ACCESS_TOKEN.get.mockResolvedValue("accessToken");
+    mockEnv.LINE_CHANNEL_SECRET = "secret";
+    mockEnv.LINE_CHANNEL_ACCESS_TOKEN = "accessToken";
   });
 
   it("returns 405 for non-POST methods", async () => {
@@ -43,7 +43,7 @@ describe("router", () => {
   });
 
   it("returns 500 if server is misconfigured", async () => {
-    mockEnv.LINE_CHANNEL_SECRET.get.mockResolvedValue(null);
+    mockEnv.LINE_CHANNEL_SECRET = null;
     const request = new Request("https://example.com", { method: "POST" });
     const response = await router(request, mockEnv as any, {} as any);
 

worker-configuration.d.ts

@@ -1,10 +1,10 @@
 /* eslint-disable */
-// Generated by Wrangler by running `wrangler types` (hash: a1d078614f11bca5b7cd9a5c71cfb1b4)
+// Generated by Wrangler by running `wrangler types` (hash: 9fa3ad024bc190dbb1e4e22e0e58b6ea)
 // Runtime types generated with workerd@1.20260520.1 2026-01-28 
 interface __BaseEnv_Env {
-	LINE_CHANNEL_SECRET: SecretsStoreSecret;
-	LINE_CHANNEL_ACCESS_TOKEN: SecretsStoreSecret;
 	CF_VERSION_METADATA: WorkerVersionMetadata;
+	LINE_CHANNEL_SECRET: string;
+	LINE_CHANNEL_ACCESS_TOKEN: string;
 }
 declare namespace Cloudflare {
 	interface GlobalProps {

wrangler.jsonc

@@ -3,18 +3,7 @@
   "name": "line-workers-template",
   "main": "src/_index.ts",
   "compatibility_date": "2026-01-28",
-  "secrets_store_secrets": [
-    {
-      "binding": "LINE_CHANNEL_SECRET",
-      "store_id": "9c70a29302f948cb9ff3ddbd8d2afb49",
-      "secret_name": "LINE_CHANNEL_SECRET",
-    },
-    {
-      "binding": "LINE_CHANNEL_ACCESS_TOKEN",
-      "store_id": "9c70a29302f948cb9ff3ddbd8d2afb49",
-      "secret_name": "LINE_CHANNEL_ACCESS_TOKEN",
-    },
-  ],
+  "secrets": { "required": ["LINE_CHANNEL_SECRET", "LINE_CHANNEL_ACCESS_TOKEN"] },
   "placement": {
     "mode": "smart",
   },