feat(api-service): resolve auth from bridge resolver

apps/api/src/app/environments-v1/novu-bridge-client.ts

@@ -1,4 +1,10 @@
 import { Inject } from '@nestjs/common';
+import {
+  GetDecryptedSecretKey,
+  GetDecryptedSecretKeyCommand,
+  InMemoryLRUCacheService,
+  InMemoryLRUCacheStore,
+} from '@novu/application-generic';
 import { PostActionEnum, type Workflow } from '@novu/framework/internal';
 import { Client, NovuHandler, NovuRequestHandler } from '@novu/framework/nest';
 import { EnvironmentTypeEnum } from '@novu/shared';
@@ -18,7 +24,9 @@ export const frameworkName = 'novu-nest';
 export class NovuBridgeClient {
   constructor(
     @Inject(NovuHandler) private novuHandler: NovuHandler,
-    private constructFrameworkWorkflow: ConstructFrameworkWorkflow
+    private constructFrameworkWorkflow: ConstructFrameworkWorkflow,
+    private getDecryptedSecretKey: GetDecryptedSecretKey,
+    private inMemoryLRUCacheService: InMemoryLRUCacheService
   ) {}
 
   public async handleRequest(req: Request, res: Response) {
@@ -46,10 +54,26 @@ export class NovuBridgeClient {
       workflows.push(programmaticallyConstructedWorkflow);
     }
 
+    const environmentId = req.params.environmentId;
+    const secretKey = (await this.inMemoryLRUCacheService.get(
+      InMemoryLRUCacheStore.VALIDATOR,
+      `bridge-secret-key:${environmentId}`,
+      () =>
+        this.getDecryptedSecretKey.execute(
+          GetDecryptedSecretKeyCommand.create({
+            environmentId,
+          })
+        ),
+      {
+        environmentId,
+        cacheVariant: 'bridge-secret-key',
+      }
+    )) as string;
+
     const novuRequestHandler = new NovuRequestHandler({
       frameworkName,
       workflows,
-      client: new Client({ secretKey: 'INTERNAL_KEY', strictAuthentication: false, verbose: false }),
+      client: new Client({ secretKey, strictAuthentication: true, verbose: false }),
       handler: this.novuHandler.handler,
     });