feat(Authenticator): make db grabbing lazy in attempt to reduce cold start time

Author: rhld16

.github/workflows/cloudrun.yml

@@ -27,20 +27,20 @@ jobs:
     - name: Setup Cloud SDK
       uses: google-github-actions/setup-gcloud@v2
       with:
-        project_id: drivebackup-276620
+        project_id: ${{ secrets.GCP_PROJECT_ID }}
 
     - name: Authorize Docker push
       run: gcloud auth configure-docker
 
     - name: Build and Push Container
       run: |-
-        docker build -t gcr.io/drivebackup-276620/authenticator:${{ github.sha }} .
-        docker push gcr.io/drivebackup-276620/authenticator:${{ github.sha }}
+        docker build -t gcr.io/${{ secrets.GCP_PROJECT_ID }}/authenticator:${{ github.sha }} .
+        docker push gcr.io/${{ secrets.GCP_PROJECT_ID }}/authenticator:${{ github.sha }}
 
     - name: Deploy to Cloud Run
       id: deploy
       uses: google-github-actions/deploy-cloudrun@v2
       with:
         service: authenticator
-        image: gcr.io/drivebackup-276620/authenticator:${{ github.sha }}
+        image: gcr.io/${{ secrets.GCP_PROJECT_ID }}/authenticator:${{ github.sha }}
         region: us-central1

Authenticator/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:22-slim
+FROM node:24-slim
 
 WORKDIR /usr/src/app
 

Authenticator/app.js

@@ -1,49 +1,36 @@
-const { cert, initializeApp } = require('firebase-admin/app');
-const { getFirestore } = require('firebase-admin/firestore');
-initializeApp({ credential: cert(JSON.parse(process.env.GOOGLE_CREDENTIALS)) });
-
-const db = getFirestore();
-exports.db = db;
-
 const express = require('express');
-const compression = require('compression');
-
-const pinRouter = require('./routes/pin');
-const providerRouter = require('./routes/provider');
-const callbackRouter = require('./routes/callback');
-const tokenRouter = require('./routes/token');
-
 let app = express();
 
-app.use(compression());
 app.use(express.json());
 app.use(express.urlencoded({ extended: false }));
 app.use(express.static(__dirname + '/public'));
 
-const authMiddleware = (req, res, next) => {
-  if (req.body.client_secret === process.env.AUTHENTICATOR_CLIENT_SECRET) {
-    return next();
-  }
-
-  res.send({ success: false, msg: 'request_unauthenticated' });
+let _db;
+function getDb() {
+  if (_db) return _db;
+  const { cert, initializeApp } = require('firebase-admin/app');
+  const { getFirestore } = require('firebase-admin/firestore');
+  initializeApp({ credential: cert(JSON.parse(process.env.GOOGLE_CREDENTIALS)) });
+  _db = getFirestore();
+  return _db;
 }
+exports.getDb = getDb;
 
-app.use('/pin', authMiddleware, pinRouter);
-app.use('/provider', providerRouter);
-app.use('/callback', callbackRouter);
-app.use('/token', authMiddleware, tokenRouter);
-
-const pages = {
-  "/": "index.html",
-  "/privacy-policy": "privacy-policy.html",
-  "/about": "about.html"
+const authMiddleware = (req, res, next) => {
+  if (req.body.client_secret === process.env.AUTHENTICATOR_CLIENT_SECRET) return next();
+  res.send({ success: false, msg: 'request_unauthenticated' });
 };
 
-app.get(Object.keys(pages), (req, res) => {
-  res.sendFile(`${__dirname}/views/${pages[req.path]}`);
-});
+app.use('/pin',      authMiddleware, (req, res, next) => require('./routes/pin')(req, res, next));
+app.use('/provider',               (req, res, next) => require('./routes/provider')(req, res, next));
+app.use('/callback',               (req, res, next) => require('./routes/callback')(req, res, next));
+app.use('/token',   authMiddleware, (req, res, next) => require('./routes/token')(req, res, next));
+
+const pages = { "/": "index.html", "/privacy-policy": "privacy-policy.html", "/about": "about.html" };
+app.get(Object.keys(pages), (req, res) => res.sendFile(`${__dirname}/views/${pages[req.path]}`));
 
 app.get('/:user_code', async function (req, res) {
+  const db = getDb();
   let docRef = await db.collection('pins').doc(req.params.user_code.toUpperCase()).get();
 
   if (!docRef.exists) {
@@ -53,13 +40,13 @@ app.get('/:user_code', async function (req, res) {
   }
 })
 
-app.listen(process.env.PORT, () => {
-  console.log("App listening");
-})
-
-setInterval(async () => {
-  let pinsRef = db.collection("pins");
-  let allInvalidRefs = await pinsRef.where("timestamp", "<", Date.now() - 300000).get();
+app.listen(process.env.PORT, () => console.log("App listening"));
 
-  if (!allInvalidRefs.empty) allInvalidRefs.forEach(doc => doc.ref.delete());
-}, 150000);
+setTimeout(() => {
+  setInterval(async () => {
+    if (!_db) return; // skip if firebase hasn't been touched yet
+    const allInvalidRefs = await _db.collection("pins")
+      .where("timestamp", "<", Date.now() - 300000).get();
+    if (!allInvalidRefs.empty) allInvalidRefs.forEach(doc => doc.ref.delete());
+  }, 150000);
+}, 20000);

Authenticator/dev.js

@@ -1,9 +1,7 @@
 const express = require('express');
-const compression = require('compression');
 
 const app = express();
 
-app.use(compression());
 app.use(express.json());
 app.use(express.urlencoded({ extended: false }));
 app.use(express.static(__dirname + '/public'));