query vault failed

[TheCarpetMerchant]

Bug report

• I confirm this is a bug with Supabase, not with my own application.
• I confirm I have searched the Docs, GitHub Discussions, and Discord.

Describe the bug

After following the stripe integration docs, I get to the step where I need to run
import foreign schema stripe from server stripe_server into stripe;

This fails with Error: Failed to run sql query: ERROR: HV000: query vault failed "<uuid>": SpiTupleTable positioned before the start or after the end DETAIL: Wrappers

I have tried multiple solutions outlined in other, closed issues, including :

• Verifying the secret name (tried stripe, stripe_wrapper_api_key_id)
• Updated my instance to the latest version

I have noticed the "key_id" field of the secret is set to NULL. This field is said to be optionnal by the docs, and I cannot find out how to properly edit it (running UPDATE vault.secrets SET key_id = id leads to a permission error)

[TheCarpetMerchant]

I deleted everything and restarted. This is what actually works :

create extension if not exists wrappers with schema extensions;

create foreign data wrapper stripe_wrapper
  handler stripe_fdw_handler
  validator stripe_fdw_validator;

select vault.create_secret(
  '<token>',
  'stripe',
  'Stripe API key for Wrappers'
);

Use the result of the query below :

create server stripe_server
  foreign data wrapper stripe_wrapper
  options (
    api_key_id '<query result>',
    api_key_name 'stripe'
  );

create schema if not exists stripe;
import foreign schema stripe from server stripe_server into stripe;

Please make the docs clearer.

[burmecia]

hey @TheCarpetMerchant , thanks for reporting this issue. You only need to specify one option when creating the foreign server, either api_key_id or api_key_name. You can specify both but only api_key_id will be used. If you only specify api_key_name, its value should be same as the 2nd input parameter when calling vault.create_secret:

select vault.create_secret(
  '<token>',
  'stripe',   -- <-- this is the API key name
  'Stripe API key for Wrappers'  -- API key description
);

We will improve the doc to make this more clear, thanks again!