@adinsure-ops/ops-cli 5.2.1 → 5.3.0

package/lib/lib/yarnrc.d.ts

@@ -0,0 +1,22 @@
+export default class YarnRc {
+    private readonly filePath;
+    private config;
+    constructor(createIfNotExists?: boolean);
+    /**
+     * Load config file
+     * @returns {void}
+     */
+    load(): void;
+    /**
+     * Add registry to config file
+     * @param key Config key
+     * @param value Config value
+     * @returns {void}
+     */
+    set(key: string, value: string): void;
+    /**
+     * Set token for Registry
+     * @returns {void}
+     */
+    save(): void;
+}

package/lib/lib/yarnrc.js

@@ -0,0 +1,40 @@
+import fs from "fs";
+import os from "os";
+import path from "path";
+import yaml from "yaml";
+export default class YarnRc {
+    constructor(createIfNotExists = true) {
+        this.config = {};
+        this.filePath = path.resolve(os.homedir(), `.yarnrc.yml`);
+        if (!fs.existsSync(this.filePath) && createIfNotExists) {
+            fs.writeFileSync(this.filePath, JSON.stringify({}));
+        }
+        if (fs.existsSync(this.filePath) &&
+            fs.lstatSync(this.filePath).isFile()) {
+            this.load();
+        }
+    }
+    /**
+     * Load config file
+     * @returns {void}
+     */
+    load() {
+        this.config = yaml.parse(fs.readFileSync(this.filePath, "utf8"));
+    }
+    /**
+     * Add registry to config file
+     * @param key Config key
+     * @param value Config value
+     * @returns {void}
+     */
+    set(key, value) {
+        this.config[key] = value;
+    }
+    /**
+     * Set token for Registry
+     * @returns {void}
+     */
+    save() {
+        fs.writeFileSync(this.filePath, yaml.stringify(this.config));
+    }
+}

package/lib/security/context.d.ts

@@ -7,11 +7,16 @@ import { ParsedUrlQuery } from 'querystring';
 export default class SecurityContext {
     private readonly clientId;
     private readonly devopsResourceId;
+    private readonly managementCoreWindowsNet;
     private readonly tenant;
+    private readonly tenantId;
+    private readonly registry;
     private readonly authorityUrl;
     private readonly redirectUri;
     private readonly resource;
     private readonly _accessTokenPath;
+    private readonly _accessTokenRuPath;
+    private readonly _accessConfigPath;
     private readonly _pca;
     private readonly _cryptoProvider;
     private _verifier;
@@ -26,6 +31,16 @@ export default class SecurityContext {
      * @returns {string} Returns access token path
      */
     getTokenPath(): string;
+    /**
+     * Get the accessTokenRuPath, as it is a private variable
+     * @returns {string} Returns access token Ru path
+     */
+    getTokenRuPath(): string;
+    /**
+     * Get the accessConfigPath, as it is a private variable
+     * @returns {string} Returns config.json path
+     */
+    getConfigPath(): string;
     /**
      * Contacts authority server, fetches and saves the authentication token to be used in subsequent requests.
      *
@@ -58,6 +73,13 @@ export default class SecurityContext {
      * @returns Promise that resolves bearer authentication token
      */
     getToken(): Promise<string>;
+    /**
+     * Fetches the locally stored token for GitlabRu
+     * @returns authentication token for gitlabru.adacta-fintech.ru
+     */
+    getTokenRu(): string;
+    getAADToken(): Promise<string>;
+    getACRToken(): Promise<string>;
     /**
      * Contacts authority server, fetches and saves the authentication token to be used in subsequent requests.
      *

package/lib/security/context.js

@@ -2,7 +2,10 @@ import { __awaiter } from "tslib";
 import { AuthError, ConfidentialClientApplication, CryptoProvider, InteractionRequiredAuthError, PublicClientApplication, } from '@azure/msal-node';
 import { reject } from 'lodash-es';
 import path from 'path';
+import fs from 'fs';
+import querystring from 'querystring';
 import LocalCachePlugin from './cache.js';
+import axios from 'axios';
 /**
  * Security context that keeps track of current authentication token.
  * It's not recommended you instantiate this class on your own but rather inherit your commands from [[CommandBase]].
@@ -15,13 +18,18 @@ export default class SecurityContext {
     constructor(configDir) {
         this.clientId = 'bed40d09-53d7-4af8-bf63-3288658b65fb';
         this.devopsResourceId = '499b84ac-1321-427f-aa17-267ca6975798';
+        this.managementCoreWindowsNet = 'https://management.core.windows.net//';
         this.tenant = 'adfintech.onmicrosoft.com';
+        this.tenantId = 'cdeb9156-219a-49e3-b414-f63acd298e9c';
+        this.registry = 'adinsure.azurecr.io';
         this.authorityUrl = `https://login.microsoftonline.com/${this.tenant}/`;
         this.redirectUri = 'http://localhost:3044';
         this.resource = 'https://ops.adinsure.com';
         this._verifier = null;
         this._challenge = null;
         this._accessTokenPath = path.resolve(configDir, 'accessToken.json');
+        this._accessTokenRuPath = path.resolve(configDir, 'accessTokenRu.json');
+        this._accessConfigPath = path.resolve(configDir, 'config.json');
         this._cryptoProvider = new CryptoProvider();
         this._pca = new PublicClientApplication({
             auth: {
@@ -40,6 +48,20 @@ export default class SecurityContext {
     getTokenPath() {
         return this._accessTokenPath;
     }
+    /**
+     * Get the accessTokenRuPath, as it is a private variable
+     * @returns {string} Returns access token Ru path
+     */
+    getTokenRuPath() {
+        return this._accessTokenRuPath;
+    }
+    /**
+     * Get the accessConfigPath, as it is a private variable
+     * @returns {string} Returns config.json path
+     */
+    getConfigPath() {
+        return this._accessConfigPath;
+    }
     /**
      * Contacts authority server, fetches and saves the authentication token to be used in subsequent requests.
      *
@@ -202,6 +224,97 @@ export default class SecurityContext {
             }));
         });
     }
+    /**
+     * Fetches the locally stored token for GitlabRu
+     * @returns authentication token for gitlabru.adacta-fintech.ru
+     */
+    getTokenRu() {
+        try {
+            const fileContent = fs.readFileSync(this._accessTokenRuPath, 'utf8').trim();
+            if (!fileContent) {
+                throw new Error('Token file is empty.');
+            }
+            const tokenData = JSON.parse(fileContent);
+            if (!tokenData.accessTokenRu) {
+                throw new Error('GitLabRu token not found in file.');
+            }
+            return tokenData.accessTokenRu;
+            //eslint-disable-next-line @typescript-eslint/no-explicit-any
+        }
+        catch (err) {
+            throw new Error(`Failed to retrieve GitLabRu token: ${err.message}`);
+        }
+    }
+    getAADToken() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const msalTokenCache = this._pca.getTokenCache();
+            const cachedAccounts = yield msalTokenCache.getAllAccounts();
+            return new Promise((resolve, reject) => {
+                if (cachedAccounts.length > 0) {
+                    this._pca
+                        .acquireTokenSilent({
+                        account: cachedAccounts[0],
+                        scopes: [
+                            this.managementCoreWindowsNet + '.default',
+                            'offline_access',
+                        ],
+                    })
+                        .then((response) => {
+                        if (response) {
+                            resolve(response.accessToken);
+                        }
+                        else {
+                            reject(new Error('Error getting token, please call `ops login`.'));
+                        }
+                    })
+                        .catch((error) => {
+                        reject(new Error(error));
+                    });
+                }
+                else {
+                    reject();
+                }
+            });
+        });
+    }
+    getACRToken() {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                // First, retrieve the AAD token using your existing method.
+                const aadAccessToken = yield this.getAADToken();
+                // Build the form data as per the ACR token exchange API:
+                // grant_type=access_token
+                // service=<registry>
+                // tenant=<tenantId>
+                // access_token=<aadAccessToken>
+                const postData = querystring.stringify({
+                    grant_type: 'access_token',
+                    service: this.registry, // e.g., "adinsure.azurecr.io"
+                    tenant: this.tenantId, // e.g., "cdeb9156-219a-49e3-b414-f63acd298e9c"
+                    access_token: aadAccessToken,
+                });
+                // Define the URL for token exchange:
+                const url = `https://${this.registry}/oauth2/exchange`;
+                // Make the POST request with the appropriate headers.
+                const response = yield axios.post(url, postData, {
+                    headers: {
+                        'Content-Type': 'application/x-www-form-urlencoded',
+                    },
+                });
+                // The ACR token should be in the "access_token" field of the response.
+                if (response.data && response.data.refresh_token) {
+                    return response.data.refresh_token;
+                }
+                else {
+                    throw new Error('ACR token not found in the response.');
+                }
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            }
+            catch (error) {
+                throw new Error('Failed to retrieve ACR token: ' + error.message);
+            }
+        });
+    }
     /**
      * Contacts authority server, fetches and saves the authentication token to be used in subsequent requests.
      *