feat: check access for secret values on runtime configuration when dev

packages/nuxt/src/app/nuxt.ts

@@ -315,12 +315,7 @@ export function createNuxtApp (options: CreateOptions) {
  Object.assign(nuxtApp.payload, nuxtApp.ssrContext!.payload)
  }
  nuxtApp.ssrContext!.payload = nuxtApp.payload
-
- // Expose client runtime-config to the payload
- nuxtApp.ssrContext!.config = {
- public: options.ssrContext!.runtimeConfig.public,
- app: options.ssrContext!.runtimeConfig.app
- }
+ nuxtApp.ssrContext!.config = options.ssrContext!.runtimeConfig
  }
 
  // Listen to chunk load errors

packages/nuxt/src/core/runtime/nitro/renderer.ts

@@ -170,10 +170,17 @@ const getSPARenderer = lazyCachedFunction(async () => {
  state: {},
  once: new Set<string>()
  }
- ssrContext.config = {
+
+ // client side config
+ const csc = ssrContext.config = {
  public: config.public,
  app: config.app
  }
+
+ if (import.meta.dev) {
+ configureErrorGetter(config, csc)
+ }
+
  return Promise.resolve(result)
  }
 
@@ -183,6 +190,22 @@ const getSPARenderer = lazyCachedFunction(async () => {
  }
 })
 
+/**
+ * Configure error getter on runtime secret property access that doesn't exist in SPA
+ */
+const configureErrorGetter = (serverSideConfig: Record<string, unknown>, clientSideConfig: Record<string, unknown>) => {
+ for (const key in serverSideConfig) {
+ if (key in clientSideConfig) { continue }
+
+ Object.defineProperty(clientSideConfig, key, {
+ get () {
+ throw new Error(`Runtime config key ${key} is not available on the client side. See useRuntimeConfig for more information`)
+ },
+ enumerable: true
+ })
+ }
+}
+
 const payloadCache = import.meta.prerender ? useStorage('internal:nuxt:prerender:payload') : null
 const islandCache = import.meta.prerender ? useStorage('internal:nuxt:prerender:island') : null
 const islandPropCache = import.meta.prerender ? useStorage('internal:nuxt:prerender:island-props') : null