@docupace/pipeline 1.0.12 → 1.0.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@docupace/pipeline",
-  "version": "1.0.12",
+  "version": "1.0.13",
   "description": "",
   "main": "index.js",
   "type": "module",
@@ -16,6 +16,7 @@
   "license": "ISC",
   "dependencies": {
     "@changesets/cli": "^2.27.10",
+    "@docupace/core-client": "^0.1.59",
     "auth0-deploy-cli": "^7.24.3",
     "axios": "^1.7.9",
     "commander": "^12.1.0",

package/src/auth0/alias.js

@@ -0,0 +1,75 @@
+import axios from 'axios';
+
+import {
+  createAlias
+} from '../next/alias.js';
+
+import {getAuth0AuthToken} from './configure.js';
+
+import {
+  getVaultSecrets,
+} from './vault.js';
+
+import {
+  getVaultSecretsConfigs,
+} from '../next/config.js';
+
+import {
+  cloneEnvRepository,
+  readDeployConfig,
+} from '../next/deploy.js';
+
+export async function getCCAlias ({application, auth0Domain, auth0AuthToken}){
+  console.log(`Forming alias name for application ${application}...`);
+
+  try {
+    const auth0Response = await axios.get(`https://${auth0Domain}/api/v2/clients`, {
+      headers: {authorization: `Bearer ${auth0AuthToken}`},
+    });
+
+    const appAuth0ClientIdData = auth0Response.data.find(client => client.name === `${application}`);
+    const appAuth0ClientId = appAuth0ClientIdData.client_id;
+
+    console.log(`Client Credentials Alias: ${appAuth0ClientId}@clients`);
+    return `${appAuth0ClientId}@clients`;
+  } catch (err) {
+    console.error(`Failed to form alias name for application: ${application}: ${err.message}`);
+  }
+}
+
+export async function configureAlias(site, env, username, password, realm) {
+
+  console.log(`Creating alias for site: ${site} in env: ${env}`);
+
+  const commonSecretsPath = getVaultSecretsConfigs(site).commonSecretsPath;
+  console.log(`commonSecretsPath => ${commonSecretsPath}`)
+  const commonSecrets = await getVaultSecrets(commonSecretsPath);
+
+  // Site Common Secrets
+  const siteCommonSecretsPath = getVaultSecretsConfigs(site).siteCommonSecretsPath;
+  console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`)
+  const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
+
+  const auth0Domain = `docupace-${env}-${site}.us.auth0.com`
+  const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
+  const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
+  const auth0Token = await getAuth0AuthToken(auth0Domain, auth0ClientId, auth0ClientSecret);
+
+  await cloneEnvRepository(env);
+
+  const { deployConfig: deployGraphQLServerConfig} = await readDeployConfig('graphql-server', env, site, 'values');
+  const coreUrl = deployGraphQLServerConfig.graphqlServer.coreUrl;
+
+  const clientCredentialsAlias = await getCCAlias({
+    application: 'docupace-graphql-client-credentials',
+    auth0Domain: auth0Domain,
+    auth0AuthToken: auth0Token
+  });
+
+  await createAlias(
+    coreUrl,
+    username,
+    password,
+    realm,
+    clientCredentialsAlias);
+}

package/src/auth0/cli.js

@@ -9,6 +9,9 @@ import {
 } from './vault.js'
 
 import dotenv from 'dotenv';
+import {
+  configureAlias
+} from "./alias.js";
 
 dotenv.config({ path: ['.env.pipeline.local', 'config/.env.pipeline.local'] });
 
@@ -28,4 +31,11 @@ program
     await getVaultSecrets(vaultPath);
   });
 
+program
+  .command('configureAlias <site> <env> <username> <password> <realm>')
+  .description('Configure Core Alias for the given site')
+  .action(async (site, env, username, password, realm) => {
+    await configureAlias(site, env, username, password, realm);
+  });
+
 program.parse(process.argv);

package/src/auth0/configure.js

@@ -1,7 +1,5 @@
 import fs from 'fs';
 import path from 'path';
-import yaml from 'js-yaml';
-import { $ } from 'zx';
 import axios from 'axios';
 import crypto from 'crypto';
 import { deploy } from 'auth0-deploy-cli';
@@ -255,7 +253,7 @@ async function templateAuth0(siteUrl, coreApiContext, env, filePaths, deployUI,
   }
 }
 
-async function getAuth0AuthToken(auth0Domain, clientId, clientSecret) {
+export async function getAuth0AuthToken(auth0Domain, clientId, clientSecret) {
   try {
     const response = await axios.post(`https://${auth0Domain}/oauth/token`, {
       client_id: clientId,

package/src/next/alias.js

@@ -0,0 +1,53 @@
+import { BasicAuth, DomainApi } from '@docupace/core-client';
+
+const userFilter = (userId) => {
+  return {
+    orSections: [
+      {
+        andSections: [
+          {
+            attrId: 9501,
+            '@type': 'string',
+            not: false,
+            orSections: [
+              { searchType: 'EXACT_MATCH', matchToValues: [userId] },
+            ],
+          },
+        ],
+      },
+    ],
+  };
+};
+
+/*
+Example:
+  await createAlias(
+    'https://www.dev.docupaceinc.com/financialdev',
+    'docupace',
+    'pw',
+    'Connect',
+    'qhnospjRjwUAeKFDhucHEabPsfihrGQQ@clients',
+  );
+ */
+export async function createAlias(coreUrl, username, password, realm, alias) {
+  const coreInfo = {
+    url: coreUrl,
+  };
+
+  let auth = new BasicAuth(username, password);
+
+  const domainApi = new DomainApi(coreInfo, auth);
+
+  const userResults = await domainApi.listRecords(50, {
+    filter: JSON.stringify(userFilter(username)),
+  });
+
+  const record = {
+    domainId: 302,
+    '5001': userResults.records[0].id,
+    '9102': realm,
+    '9504': alias,
+  };
+
+  await domainApi.create(record);
+}

package/src/next/deploy.js

@@ -43,6 +43,7 @@ export async function cloneEnvRepository(env) {
   const { repoPath, repoName } = getRepoLocalPath(env);
   const repoUrl = getRepUrl(repoName);
   console.log(`Cloning repository: ${repoName}`);
+  await cleanUpRepoPath(repoPath);
   await $`git clone --depth 1 ${repoUrl}`;
   console.log(`Repository cloned to: ${repoPath}`);
   return repoPath;