fix(oci): require a single downloaded PEM key block

Author: Bill Leoutsakos

apps/sim/lib/credentials/oci-api-key-service-account.server.test.ts

@@ -129,6 +129,8 @@ describe('OCI API-key credential setup', () => {
       'extra\nOCI_API_KEY',
       'OCI_API_KEY\nOCI_API_KEY',
       '\u0000OCI_API_KEY',
+      privateKey,
+      `extra\n-----END PRIVATE KEY-----`,
     ]) {
       await expect(
         verifyAndEncryptOciApiKeyCredential(fields({ privateKey: `${privateKey}${suffix}` }))

apps/sim/lib/credentials/oci-api-key-service-account.server.ts

@@ -98,7 +98,7 @@ function normalizePrivateKey(value: unknown): string {
     ? normalized.slice(0, -'\nOCI_API_KEY'.length).trimEnd()
     : normalized
   if (
-    !/^-----BEGIN (PRIVATE KEY|RSA PRIVATE KEY|ENCRYPTED PRIVATE KEY)-----\n[\s\S]+\n-----END \1-----$/.test(
+    !/^-----BEGIN (PRIVATE KEY|RSA PRIVATE KEY|ENCRYPTED PRIVATE KEY)-----\n(?:(?!-----BEGIN |-----END )[\s\S])+\n-----END \1-----$/.test(
       pem
     )
   ) {