@adobe/helix-config 4.5.0 → 4.5.2

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [4.5.2](https://github.com/adobe/helix-config/compare/v4.5.1...v4.5.2) (2024-09-13)
+
+
+### Bug Fixes
+
+* remove tst support again ([#185](https://github.com/adobe/helix-config/issues/185)) ([6043644](https://github.com/adobe/helix-config/commit/6043644c43490e71b7b5ba2d97e2bf55f0ef519d))
+
+## [4.5.1](https://github.com/adobe/helix-config/compare/v4.5.0...v4.5.1) (2024-09-10)
+
+
+### Bug Fixes
+
+* also respect org-tokens (regression) ([#184](https://github.com/adobe/helix-config/issues/184)) ([2ae41fa](https://github.com/adobe/helix-config/commit/2ae41fa518a32a5fc674bbc85796e21843fb3c3c))
+
 # [4.5.0](https://github.com/adobe/helix-config/compare/v4.4.0...v4.5.0) (2024-09-05)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adobe/helix-config",
-  "version": "4.5.0",
+  "version": "4.5.2",
   "description": "Helix Config",
   "main": "src/index.js",
   "types": "src/index.d.ts",
@@ -35,7 +35,7 @@
     "reporter-options": "configFile=.mocha-multi.json"
   },
   "devDependencies": {
-    "@adobe/eslint-config-helix": "2.0.6",
+    "@adobe/eslint-config-helix": "2.0.7",
     "@semantic-release/changelog": "6.0.3",
     "@semantic-release/git": "10.0.1",
     "@semantic-release/npm": "12.0.1",
@@ -43,7 +43,7 @@
     "eslint": "8.57.0",
     "husky": "9.1.5",
     "junit-report-builder": "5.0.0",
-    "lint-staged": "15.2.9",
+    "lint-staged": "15.2.10",
     "mocha": "10.7.3",
     "mocha-multi-reporters": "1.5.1",
     "mocha-suppress-logs": "0.5.1",
@@ -56,7 +56,7 @@
   },
   "dependencies": {
     "@adobe/fetch": "4.1.8",
-    "@adobe/helix-shared-config": "10.6.7",
+    "@adobe/helix-shared-config": "10.6.8",
     "@adobe/helix-shared-utils": "3.0.2"
   }
 }

package/src/config-view.js

@@ -109,8 +109,9 @@ async function getGlobalTokenHash(ctx, rso) {
 /**
  * Returns the normalized access configuration for the give partition.
  */
-export async function getAccessConfig(ctx, config, partition, rso) {
-  const { access, tokens = {} } = config;
+export async function getAccessConfig(ctx, config, orgConfig, partition, rso) {
+  const { access } = config;
+  const tokens = { ...orgConfig?.tokens || {}, ...config.tokens };
   const pAccess = access[partition] ?? {};
   const apiKeyId = toArray(pAccess.apiKeyId ?? access.site?.apiKeyId);
   const allow = toArray(pAccess.allow ?? access.site?.allow);
@@ -302,12 +303,6 @@ export async function loadOrgConfig(ctx, org) {
   return res.body ? res.json() : null;
 }
 
-export async function loadTransientSiteToken(ctx, org, site) {
-  const key = `orgs/${org}/sites/${site}/transient-site-tokens.json`;
-  const res = await ctx.loader.getObject(HELIX_CONFIG_BUS, key);
-  return res.body ? res.json() : null;
-}
-
 /**
  * Computes the access.admin.role arrays for the org users.
  * @param adminConfig
@@ -438,20 +433,13 @@ export async function getConfigResponse(ctx, opts) {
     // normalize access config
     const { admin = {} } = config.access;
     config.access = {
-      preview: await getAccessConfig(ctx, config, 'preview', rso),
-      live: await getAccessConfig(ctx, config, 'live', rso),
+      preview: await getAccessConfig(ctx, config, orgConfig, 'preview', rso),
+      live: await getAccessConfig(ctx, config, orgConfig, 'live', rso),
       // access.require.repository ?
     };
     if (opts.scope === SCOPE_ADMIN || opts.scope === SCOPE_RAW) {
       // eslint-disable-next-line max-len
       config.access.admin = computeSiteAdminRoles(admin, orgConfig, config.groups);
-    } else {
-      // for pipeline and delivery, also load the site tokens
-      const tst = await loadTransientSiteToken(ctx, rso.org, rso.site);
-      if (tst) {
-        config.access.preview.transientSiteToken = tst.tokens.preview;
-        config.access.live.transientSiteToken = tst.tokens.live;
-      }
     }
   }
 
@@ -478,8 +466,6 @@ export async function getConfigResponse(ctx, opts) {
         'x-hlx-auth-clientdn-live': canonicalArrayString(config.access, 'live', 'clientCertDN'),
         'x-hlx-auth-hash-preview': canonicalArrayString(config.access, 'preview', 'tokenHash'),
         'x-hlx-auth-hash-live': canonicalArrayString(config.access, 'live', 'tokenHash'),
-        'x-hlx-auth-tst-preview': config.access?.preview?.transientSiteToken?.value || '',
-        'x-hlx-auth-tst-live': config.access?.live?.transientSiteToken?.value || '',
       },
     });
   }