From d42840744317dcb21941d89b4a523f6e4c8719b6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Eray=20Ayd=C4=B1n?= <eray.aydin@fingerprint.com>
Date: Thu, 24 Sep 2026 22:49:37 +0300
Subject: [PATCH] chore: update schema URL and harden sync script

Update the OpenAPI schema URL.

`curl` ran without `-f`, so an HTTP error was written to the output file and
the script still exited 0. This change fix it.

Use an `env bash` shebang and `set -euo pipefail`. Resolve paths relative to
the repository root, so the script no longer writes into whatever directory it
is invoked from. Collect the curl flags into `CURL_OPTS`, gated on `TRACE` and
`ACTIONS_STEP_DEBUG` so runs can be made verbose, and harden them: fail on
HTTP errors, retry transient failures, refuse redirects that leave https, and
bound connect and transfer time so a stalled download cannot hang CI or a
local run. Log the download.

Mark `sync.sh` and `generate.sh` executable. `contributing.md` documents
running both as `./<script>.sh`, which failed with a permission error.

Related-Task: INTER-2472
---
 generate.sh |  0
 sync.sh     | 21 +++++++++++++++++++--
 2 files changed, 19 insertions(+), 2 deletions(-)
 mode change 100644 => 100755 generate.sh
 mode change 100644 => 100755 sync.sh

diff --git a/generate.sh b/generate.sh
old mode 100644
new mode 100755
diff --git a/sync.sh b/sync.sh
old mode 100644
new mode 100755
index 159ecf64..8c5c7596
--- a/sync.sh
+++ b/sync.sh
@@ -1,3 +1,20 @@
-#!/bin/bash
+#!/usr/bin/env bash
+set -euo pipefail
 
-curl -o ./res/fingerprint-server-api.yaml https://fingerprintjs.github.io/fingerprint-pro-server-api-openapi/schemas/fingerprint-server-api-compact.yaml
+# Resolve paths relative to the repository root, so the script can be run from
+# any working directory.
+cd "$(dirname "${BASH_SOURCE[0]}")"
+
+schemaUrl="${1:-https://fingerprintjs.github.io/openapi/schemas/fingerprint-server-api-compact.yaml}"
+
+CURL_OPTS=(-fSL --retry 3 --proto-redir '=https' --connect-timeout 10 --max-time 300)
+if [[ "${TRACE:-}" != "true" && "${ACTIONS_STEP_DEBUG:-}" != "true" ]]; then
+  CURL_OPTS+=(-s)
+fi
+
+mkdir -p ./res
+
+echo "Downloading $schemaUrl"
+curl "${CURL_OPTS[@]}" -o ./res/fingerprint-server-api.yaml "$schemaUrl"
+
+echo "OpenAPI schema download complete."