@decaf-ts/integrations 0.5.0 → 0.6.0

package/lib/types/keycloak/types.d.cts

@@ -90,6 +90,58 @@ export interface KeycloakUserConfigOverrides {
 export interface KeycloakIdentityProviderConfigOverrides {
     payload?: Partial<Record<string, unknown>>;
 }
+export type KeycloakBrokerProtocol = "oidc" | "saml";
+export type KeycloakBrokerClientAuthMethod = "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | "none";
+export interface KeycloakBrokerIdentityProviderConfig {
+    alias: string;
+    displayName: string;
+    protocol: KeycloakBrokerProtocol;
+    upstreamIssuer?: string;
+    discoveryUrl?: string;
+    clientId?: string;
+    clientSecret?: string;
+    clientAuthMethod?: KeycloakBrokerClientAuthMethod;
+    clientAssertionSigningAlg?: string;
+    clientAssertionAudience?: string;
+    defaultScopes?: string;
+    firstBrokerLoginFlowAlias?: string;
+    postBrokerLoginFlowAlias?: string;
+    trustEmail?: boolean;
+    storeToken?: boolean;
+    linkOnly?: boolean;
+    hideOnLogin?: boolean;
+    authenticateByDefault?: boolean;
+    enabled?: boolean;
+    config?: Record<string, string>;
+    saml?: {
+        entityId: string;
+        singleSignOnServiceUrl: string;
+        singleLogoutServiceUrl?: string;
+        signingCertificate?: string;
+        nameIdPolicyFormat?: string;
+        principalAttribute?: string;
+        signatureAlgorithm?: string;
+        postBindingResponse?: boolean;
+        postBindingAuthnRequest?: boolean;
+        wantAuthnRequestsSigned?: boolean;
+    };
+}
+/**
+ * Separate setup contract for realms that are configured around an upstream
+ * broker. It intentionally does not widen or alter the legacy setup type.
+ */
+export interface KeycloakBrokerSetupConfig {
+    id: string;
+    host: string;
+    protocol: "http" | "https";
+    rootApiUser?: KeycloakUser;
+    adminApiUser?: KeycloakUser;
+    realmApiUser?: KeycloakUser;
+    client: KeycloakClientConfig;
+    broker: KeycloakBrokerIdentityProviderConfig;
+    realmConfig?: KeycloakRealmConfig;
+    useCompositeRoles?: boolean;
+}
 export interface KeycloakSetupConfig {
     id: string;
     host: string;

package/lib/types/keycloak/types.d.mts

@@ -90,6 +90,58 @@ export interface KeycloakUserConfigOverrides {
 export interface KeycloakIdentityProviderConfigOverrides {
     payload?: Partial<Record<string, unknown>>;
 }
+export type KeycloakBrokerProtocol = "oidc" | "saml";
+export type KeycloakBrokerClientAuthMethod = "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | "none";
+export interface KeycloakBrokerIdentityProviderConfig {
+    alias: string;
+    displayName: string;
+    protocol: KeycloakBrokerProtocol;
+    upstreamIssuer?: string;
+    discoveryUrl?: string;
+    clientId?: string;
+    clientSecret?: string;
+    clientAuthMethod?: KeycloakBrokerClientAuthMethod;
+    clientAssertionSigningAlg?: string;
+    clientAssertionAudience?: string;
+    defaultScopes?: string;
+    firstBrokerLoginFlowAlias?: string;
+    postBrokerLoginFlowAlias?: string;
+    trustEmail?: boolean;
+    storeToken?: boolean;
+    linkOnly?: boolean;
+    hideOnLogin?: boolean;
+    authenticateByDefault?: boolean;
+    enabled?: boolean;
+    config?: Record<string, string>;
+    saml?: {
+        entityId: string;
+        singleSignOnServiceUrl: string;
+        singleLogoutServiceUrl?: string;
+        signingCertificate?: string;
+        nameIdPolicyFormat?: string;
+        principalAttribute?: string;
+        signatureAlgorithm?: string;
+        postBindingResponse?: boolean;
+        postBindingAuthnRequest?: boolean;
+        wantAuthnRequestsSigned?: boolean;
+    };
+}
+/**
+ * Separate setup contract for realms that are configured around an upstream
+ * broker. It intentionally does not widen or alter the legacy setup type.
+ */
+export interface KeycloakBrokerSetupConfig {
+    id: string;
+    host: string;
+    protocol: "http" | "https";
+    rootApiUser?: KeycloakUser;
+    adminApiUser?: KeycloakUser;
+    realmApiUser?: KeycloakUser;
+    client: KeycloakClientConfig;
+    broker: KeycloakBrokerIdentityProviderConfig;
+    realmConfig?: KeycloakRealmConfig;
+    useCompositeRoles?: boolean;
+}
 export interface KeycloakSetupConfig {
     id: string;
     host: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decaf-ts/integrations",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/index.d.mts",
@@ -313,6 +313,9 @@
     "reset": "rm -rf * && git checkout . && git pull && npm run do-install",
     "build": "build-scripts --dev",
     "build:prod": "build-scripts --prod",
+    "boot:plugins:kibana": "npm run build && node ./bin/boot-plugin.mjs kibana 8.14.3",
+    "boot:plugins:superset": "npm run build && node ./bin/boot-plugin.mjs superset 6.1.0",
+    "boot:plugins": "npm run boot:plugins:kibana && npm run boot:plugins:superset",
     "test": "npm run build && NODE_OPTIONS=\"--experimental-vm-modules\" jest --watchman=false --runInBand --coverage --detectOpenHandles",
     "test:unit": "NODE_OPTIONS=\"--experimental-vm-modules\" jest --watchman=false --testPathPatterns=\"/tests/unit\" --passWithNoTests --detectOpenHandles",
     "test:integration": "NODE_OPTIONS=\"--experimental-vm-modules\" jest --watchman=false --testPathPatterns=\"/tests/(integration)\" --passWithNoTests --detectOpenHandles",

package/plugins/superset/Dockerfile

@@ -8,10 +8,10 @@
 #   - org_dashboard_embed_superset/  (generated by install())
 #   - superset_config.py             (curated runtime config)
 #
-FROM node:18-slim AS builder
+FROM node:22-slim AS builder
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    git python3 python3-pip curl bash \
+    git python3 python3-pip curl bash zstd \
     && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /build
@@ -38,10 +38,10 @@ RUN cd /build/superset/superset-embedded-sdk && npm ci && npm run build
 RUN cd /build/superset/superset-frontend && npm ci && npm run build
 
 # ─── Runtime stage ──────────────────────────────────────────────────────
-FROM node:18-slim AS runtime
+FROM node:22-slim AS runtime
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    python3 python3-pip python3-venv curl bash \
+    python3 python3-pip python3-venv curl bash zstd \
     && rm -rf /var/lib/apt/lists/*
 
 RUN python3 -m venv /app/venv
@@ -55,7 +55,8 @@ RUN pip install --no-cache-dir \
     psycopg2-binary \
     celery \
     redis \
-    gunicorn
+    gunicorn \
+    rich
 
 # Copy built frontend assets from builder
 COPY --from=builder /build/superset/superset-frontend/ /app/superset-frontend/
@@ -71,9 +72,8 @@ ENV FLASK_APP=superset
 
 EXPOSE 8088
 
-# Initialize Superset
-RUN superset db upgrade && \
-    superset fab create-admin --username admin --firstname Admin --lastname User --email admin@example.com --password admin || true && \
-    superset init
+COPY entrypoint.sh /app/entrypoint.sh
+RUN chmod +x /app/entrypoint.sh
 
+ENTRYPOINT ["/app/entrypoint.sh"]
 CMD ["gunicorn", "-b", "0.0.0.0:8088", "-w", "4", "--timeout", "120", "superset.app:create_app()"]