@docupace/pipeline 1.0.32 → 1.0.33-alpha-2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@docupace/pipeline",
-  "version": "1.0.32",
+  "version": "1.0.33-alpha-2",
   "description": "",
   "main": "index.js",
   "type": "module",
@@ -17,7 +17,7 @@
   "dependencies": {
     "@changesets/cli": "^2.27.10",
     "@docupace/core-client": "^0.1.59",
-    "auth0-deploy-cli": "^7.24.3",
+    "auth0-deploy-cli": "^8.8.0",
     "axios": "^1.7.9",
     "commander": "^12.1.0",
     "dotenv": "^16.4.7",

package/src/auth0/alias.js

@@ -1,75 +1,72 @@
 import axios from 'axios';
 
-import {
-  createAlias
-} from '../next/alias.js';
+import { createAlias } from '../next/alias.js';
 
-import {getAuth0AuthToken} from './configure.js';
+import { getAuth0AuthToken } from './configure.js';
 
-import {
-  getVaultSecrets,
-} from './vault.js';
+import { getVaultSecrets } from './vault.js';
 
-import {
-  getVaultSecretsConfigs,
-} from '../next/config.js';
+import { getVaultSecretsConfigs } from '../next/config.js';
 
-import {
-  cloneEnvRepository,
-  readDeployConfig,
-} from '../next/deploy.js';
+import { cloneEnvRepository, readDeployConfig } from '../next/deploy.js';
 
-export async function getCCAlias ({application, auth0Domain, auth0AuthToken}){
+export async function getCCAlias({ application, auth0Domain, auth0AuthToken }) {
   console.log(`Forming alias name for application ${application}...`);
 
   try {
-    const auth0Response = await axios.get(`https://${auth0Domain}/api/v2/clients`, {
-      headers: {authorization: `Bearer ${auth0AuthToken}`},
-    });
-
-    const appAuth0ClientIdData = auth0Response.data.find(client => client.name === `${application}`);
+    const auth0Response = await axios.get(
+      `https://${auth0Domain}/api/v2/clients`,
+      {
+        headers: { authorization: `Bearer ${auth0AuthToken}` },
+      },
+    );
+
+    const appAuth0ClientIdData = auth0Response.data.find(
+      (client) => client.name === `${application}`,
+    );
     const appAuth0ClientId = appAuth0ClientIdData.client_id;
 
     console.log(`Client Credentials Alias: ${appAuth0ClientId}@clients`);
     return `${appAuth0ClientId}@clients`;
   } catch (err) {
-    console.error(`Failed to form alias name for application: ${application}: ${err.message}`);
+    console.error(
+      `Failed to form alias name for application: ${application}: ${err.message}`,
+    );
   }
 }
 
 export async function configureAlias(site, env, username, password, realm) {
-
   console.log(`Creating alias for site: ${site} in env: ${env}`);
-
-  const commonSecretsPath = getVaultSecretsConfigs(site).commonSecretsPath;
-  console.log(`commonSecretsPath => ${commonSecretsPath}`)
-  const commonSecrets = await getVaultSecrets(commonSecretsPath);
-
   // Site Common Secrets
-  const siteCommonSecretsPath = getVaultSecretsConfigs(site).siteCommonSecretsPath;
-  console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`)
+  const siteCommonSecretsPath =
+    getVaultSecretsConfigs(site).siteCommonSecretsPath;
+  console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
   const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
 
-  const auth0Domain = `docupace-${env}-${site}.us.auth0.com`
+  const auth0Domain = `docupace-${env}-${site}.us.auth0.com`;
   const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
   const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
-  const auth0Token = await getAuth0AuthToken(auth0Domain, auth0ClientId, auth0ClientSecret);
+  const auth0Token = await getAuth0AuthToken(
+    auth0Domain,
+    auth0ClientId,
+    auth0ClientSecret,
+  );
 
   await cloneEnvRepository(env);
 
-  const { deployConfig: deployGraphQLServerConfig} = await readDeployConfig('graphql-server', env, site, 'values');
+  const { deployConfig: deployGraphQLServerConfig } = await readDeployConfig(
+    'graphql-server',
+    env,
+    site,
+    'values',
+  );
   const coreUrl = deployGraphQLServerConfig.graphqlServer.coreUrl;
 
   const clientCredentialsAlias = await getCCAlias({
     application: 'docupace-graphql-client-credentials',
     auth0Domain: auth0Domain,
-    auth0AuthToken: auth0Token
+    auth0AuthToken: auth0Token,
   });
 
-  await createAlias(
-    coreUrl,
-    username,
-    password,
-    realm,
-    clientCredentialsAlias);
+  await createAlias(coreUrl, username, password, realm, clientCredentialsAlias);
 }

package/src/auth0/cli.js

@@ -1,34 +1,51 @@
 #!/usr/bin/env node
 
 import { Command } from 'commander';
-import {
-  configureFromSite
-} from './configure.js';
-import {
-  getVaultSecrets
-} from './vault.js'
+import { configureFromSite } from './configure.js';
+import { getVaultSecrets } from './vault.js';
 
 import dotenv from 'dotenv';
-import {
-  configureAlias
-} from "./alias.js";
+import { configureAlias } from './alias.js';
+import { exportConf } from './export.js';
+import { getAuth0Metadata } from './metadata.js';
 
 dotenv.config({ path: ['.env.pipeline.local', 'config/.env.pipeline.local'] });
 
 const program = new Command();
 
 program
-    .command('configureFromSite <fromSite> <toSite> <fromEnv> <toEnv> <deployUI> <deployGraphQLServer> <useNewDomain> <configureMFA>')
-    .description('Configure the Auth0 tenants in env for the given site')
-    .action(async (fromSite, toSite, fromEnv,toEnv, deployUI, deployGraphQLServer, useNewDomain, configureMFA) => {
-        await configureFromSite(fromSite, toSite, fromEnv, toEnv, deployUI, deployGraphQLServer, useNewDomain, configureMFA);
-    });
+  .command(
+    'configureFromSite <fromSite> <toSite> <fromEnv> <toEnv> <deployUI> <deployGraphQLServer> <useNewDomain>',
+  )
+  .description('Configure the Auth0 tenants in env for the given site')
+  .action(
+    async (
+      fromSite,
+      toSite,
+      fromEnv,
+      toEnv,
+      deployUI,
+      deployGraphQLServer,
+      useNewDomain,
+    ) => {
+      await configureFromSite(
+        fromSite,
+        toSite,
+        fromEnv,
+        toEnv,
+        deployUI,
+        deployGraphQLServer,
+        useNewDomain,
+      );
+    },
+  );
 
 program
   .command('getVaultSecrets <vaultPath>')
   .description('Get Secrets for Vault PATH')
   .action(async (vaultPath) => {
-    await getVaultSecrets(vaultPath);
+    const data = await getVaultSecrets(vaultPath);
+    console.log(JSON.stringify(data, 'null', 2));
   });
 
 program
@@ -38,4 +55,18 @@ program
     await configureAlias(site, env, username, password, realm);
   });
 
+program
+  .command('exportConf <site> <env>')
+  .description('Export Auth0 configuration for the given site')
+  .action(async (site, env) => {
+    await exportConf(site, env);
+  });
+
+program
+  .command('getAuth0Metadata <site> <env>')
+  .description('Get Auth0 metadata for the given site')
+  .action(async (site, env) => {
+    await getAuth0Metadata(site, env);
+  });
+
 program.parse(process.argv);

package/src/auth0/configure.js

@@ -2,27 +2,15 @@ import fs from 'fs';
 import path from 'path';
 import axios from 'axios';
 import crypto from 'crypto';
-import { deploy } from 'auth0-deploy-cli';
-import fl from 'fs/promises';
 
 import {
   cloneEnvRepository,
-  cloneRepository,
   readDeployConfig,
-  pushDeployConfig
+  pushDeployConfig,
 } from '../next/deploy.js';
 
-import {
-  getVaultSecrets,
-  updateVaultSecrets
-} from './vault.js';
-
-import {
-  getVaultSecretsConfigs,
-  environmentConfig
-} from '../next/config.js';
-import { connect } from 'http2';
-import { promise } from 'zod';
+import { getVaultSecrets, updateVaultSecrets } from './vault.js';
+import { getVaultSecretsConfigs, environmentConfig } from '../next/config.js';
 
 async function ensureDirectoryExists(dirPath) {
   try {
@@ -33,359 +21,76 @@ async function ensureDirectoryExists(dirPath) {
   }
 }
 
-async function copyDirectory(source, destination) {
-  try {
-    await fl.mkdir(destination, { recursive: true });
-    const items = await fl.readdir(source, { withFileTypes: true });
-
-    for (const item of items) {
-      const sourcePath = path.join(source, item.name);
-      const destinationPath = path.join(destination, item.name);
-
-      if (item.isDirectory()) {
-        await copyDirectory(sourcePath, destinationPath);
-      } else {
-        await fl.copyFile(sourcePath, destinationPath);
-      }
-    }
-  } catch (err) {
-    console.error(`Error copying directory: ${err.message}`);
-    throw err;
-  }
-}
-
-async function addApplicationToApi ({application, auth0Domain, auth0AuthToken, coreApiIdentifier}){
-  console.log("Adding application to API authorized applications...");
-
+export async function getAuth0AuthToken(auth0Domain, clientId, clientSecret) {
   try {
-    const auth0Response = await axios.get(`https://${auth0Domain}/api/v2/clients`, {
-      headers: {authorization: `Bearer ${auth0AuthToken}`},
-    });
-
-    const appAuth0ClientIdData = auth0Response.data.find(client => client.name === `${application}`);
-    const appAuth0ClientId = appAuth0ClientIdData.client_id;
-
-    await axios.post(
-          `https://${auth0Domain}/api/v2/client-grants`,
+    const response = await axios.post(
+      `https://${auth0Domain}/oauth/token`,
       {
-        client_id: appAuth0ClientId,
-        audience: `${coreApiIdentifier}`,
-        scope: [],
+        client_id: clientId,
+        client_secret: clientSecret,
+        audience: `https://${auth0Domain}/api/v2/`,
+        grant_type: 'client_credentials',
       },
       {
         headers: {
-          Authorization: `Bearer ${auth0AuthToken}`,
-          "Content-Type": "application/json",
+          'Content-Type': 'application/json',
         },
-      }
-    );
-    console.log(`Application (${appAuth0ClientId}) authorized for API: ${coreApiIdentifier}`);
-  } catch (err) {
-    console.error(`Failed to add application: ${application}: ${err.message}`);
-  }
-
-}
-
-async function initializeAuth0Configuration({
-                                              initConfiguration,
-                                              auth0Domain,
-                                              auth0AuthToken,
-                                              coreApiIdentifier,
-                                            }) {
-  if (initConfiguration === "true") {
-    try {
-      // Create a new resource server in Auth0
-      console.log("Creating resource server in Auth0...");
-
-      const resourceServerResponse = await axios.post(
-        `https://${auth0Domain}/api/v2/resource-servers`,
-        {
-          name: "docupace-core",
-          identifier: `${coreApiIdentifier}`,
-          token_lifetime: 86400,
-          allow_offline_access: false,
-          signing_alg: "RS256",
-          skip_consent_for_verifiable_first_party_clients: true,
-          scopes: [],
-        },
-        {
-          headers: {
-            Authorization: `Bearer ${auth0AuthToken}`,
-            "Content-Type": "application/json",
-          },
-        }
-      );
-
-      const apiId = resourceServerResponse.data.id;
-
-      // Update tenant settings with the default audience
-      console.log("Updating tenant settings...");
-      await axios.patch(
-        `https://${auth0Domain}/api/v2/tenants/settings`,
-        {
-          default_audience: `${coreApiIdentifier}`,
-        },
-        {
-          headers: {
-            Authorization: `Bearer ${auth0AuthToken}`,
-            "Content-Type": "application/json",
-          },
-        }
-      );
-      console.log("Tenant settings updated successfully.");
-    } catch (error) {
-      console.error("Error during Auth0 configuration:", error.response?.data || error.message);
-    }
-  }
-}
-
-async function importAuth0Templates(directoryPath, auth0Domain, auth0ClientID, auth0ClientSecret) {
-  try {
-    const config = {
-      input_file: directoryPath,
-      config: {
-        AUTH0_DOMAIN: auth0Domain,
-        AUTH0_CLIENT_ID: auth0ClientID,
-        AUTH0_CLIENT_SECRET: auth0ClientSecret,
       },
-      debug: true,
-    };
-
-    console.log('Starting Auth0 template import...');
-    await deploy(config);
-    console.log('Auth0 template import completed successfully!');
-  } catch (error) {
-    console.error('Error during Auth0 template import:', error.message);
-    process.exit(1); // Exit with an error code
-  }
-}
-
-async function updateJsonFile(filePath, updates) {
-  const content = await fs.promises.readFile(filePath, 'utf8');
-  const jsonContent = JSON.parse(content);
-  const updatedContent = JSON.stringify({...jsonContent, ...updates}, null, 2);
-  await fs.promises.writeFile(filePath, updatedContent);
-}
-
-async function replaceInFile(filePath, replacements) {
-  let content = await fs.promises.readFile(filePath, 'utf8');
-
-  for (const [search, replace] of replacements) {
-    const escapedSearch = search.replace(/[-\/\\^$*+?.()|[\]{}]/g, '\\$&'); // Escape special chars
-    content = content.replace(new RegExp(escapedSearch, 'g'), replace);
-  }
-  await fs.promises.writeFile(filePath, content, 'utf8');
-}
-
-async function templateAuth0(siteUrl, coreApiContext, env, filePaths, deployUI, deployGraphQLServer, commonSecrets, configureMFA) {
-  try {
-    let uiAllowedCallbacksUrls,
-      uiAllowedLogoutUrls;
-    let graphqlAllowedCallbacksUrls,
-      graphqlAllowedLogoutUrls;
-    let connectAllowedCallbacksUrls,
-      connectlAllowedLogoutUrls;
-
-    let connectClientMetadata,
-        connectCallbacks,
-        connectAddons;
-    // Configure URLs based on environment
-    if (env === 'prd') {
-      uiAllowedCallbacksUrls = [`${siteUrl}/api/auth/callback`];
-      uiAllowedLogoutUrls = [`${siteUrl}`];
-
-      graphqlAllowedCallbacksUrls = [`${siteUrl}/api/graphql/callback`];
-      graphqlAllowedLogoutUrls = [`${siteUrl}/api/graphql/`];
-
-      connectAllowedCallbacksUrls = [`${siteUrl}/connect/samlCallback?client_name=auth0`];
-      connectlAllowedLogoutUrls = [ `${siteUrl}/connect`];
-    } else {
-      uiAllowedCallbacksUrls = [
-        `${siteUrl}/api/auth/callback`,
-        `http://localhost:3000/api/auth/callback`,
-      ];
-      uiAllowedLogoutUrls = [
-        `${siteUrl}`,
-        `http://localhost:3000`,
-      ];
-      graphqlAllowedCallbacksUrls = [
-        `${siteUrl}/api/graphql/callback`,
-        `http://localhost:4000/api/graphql/callback`,
-      ];
-      graphqlAllowedLogoutUrls = [
-        `http://localhost:4000/api/graphql/`,
-        `${siteUrl}/api/graphql/`,
-      ];
-      connectAllowedCallbacksUrls = [
-        `${siteUrl}/connect/samlCallback?client_name=auth0`,
-        `http://localhost:9000/connect/samlCallback?client_name=auth0`,
-      ];
-      connectlAllowedLogoutUrls = [
-        `${siteUrl}/connect`
-      ];
-
-      const siteUrlNoPrefix=siteUrl.replace(/^https?:\/\//, '');
-      connectClientMetadata ={
-        "docupaceContext" : "core",
-        "docupaceHost" : `${siteUrlNoPrefix}`,
-        "docupace_context" : "core",
-        "docupace_host" : `${siteUrlNoPrefix}  `
-      };
-
-      connectCallbacks = [
-        `${siteUrl}/connect/samlCallback?client_name=auth0`
-      ];
-
-      connectAddons = {
-        "samlp": {
-          "audience": `${siteUrl}/connect`,
-          "recipient": `${siteUrl}/connect/samlCallback?client_name=auth0`,
-          "destination": `${siteUrl}/connect/samlCallback?client_name=auth0`,
-          "nameIdentifierFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified",
-          "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
-          "nameIdentifierProbes": [
-            "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/docupace-username"
-          ],
-          "mappings": {
-            "proposalHandle": "ProposalHandle"
-          }
-        }
-      };
-
-    }
-
-
-    const configureUI = deployUI === 'true';
-    if (configureUI) {
-      console.log('ui_allowed_callbacks_urls ->', uiAllowedCallbacksUrls);
-      console.log('ui_allowed_logout_urls ->', uiAllowedLogoutUrls);
-
-      await updateJsonFile(filePaths.uiJson, {
-        callbacks: uiAllowedCallbacksUrls,
-        allowed_logout_urls: uiAllowedLogoutUrls,
-      });
-
-
-      //TODO: move to separate function for connect
-      console.log('connect_allowed_callbacks_urls ->', connectAllowedCallbacksUrls);
-      console.log('connect_allowed_logout_urls ->', connectlAllowedLogoutUrls);
-
-      // update allowed callback url
-      await updateJsonFile(filePaths.connectJson, {
-        callbacks: connectAllowedCallbacksUrls,
-        allowed_logout_urls: connectlAllowedLogoutUrls,
-        client_metadata: connectClientMetadata,
-        addons: connectAddons
-      });
-
-
-
-      console.log('Updated URLs for main UI...');
-    } else {
-      await fs.promises.unlink(filePaths.uiJson);
-      await updateJsonFile(filePaths.databaseJson, {
-        enabled_clients: (content) => content.enabled_clients.filter((client) => client !== 'docupace-ui-main'),
-      });
-      console.log("Removed 'docupace-ui-main' from enabled_clients in database.json");
-    }
-
-    const configureGraphqlServer = deployGraphQLServer === 'true';
-    if (configureGraphqlServer) {
-      console.log('graphql_allowed_callbacks_urls ->', graphqlAllowedCallbacksUrls);
-      console.log('graphql_allowed_logout_urls ->', graphqlAllowedLogoutUrls);
-
-      await updateJsonFile(filePaths.graphqlJson, {
-        callbacks: graphqlAllowedCallbacksUrls,
-        allowed_logout_urls: graphqlAllowedLogoutUrls,
-      });
-      console.log('Updated URLs for GraphQL server...');
-    } else {
-      await fs.promises.unlink(filePaths.graphqlJson);
-      await updateJsonFile(filePaths.databaseJson, {
-        enabled_clients: (content) => content.enabled_clients.filter((client) => client !== 'docupace-graphql'),
-      });
-      console.log("Removed 'docupace-graphql' from enabled_clients in database.json");
-    }
-
-    // TWILIO configuration
-    await replaceInFile(filePaths.twilioJson, [
-      ['twilioauthtokenplaceholder', commonSecrets.TWILIO_AUTH_TOKEN],
-      ['twiliosidplaceholder', commonSecrets.TWILIO_SID],
-      ['twiliofromplaceholder', commonSecrets.TWILIO_FROM_NUMBER],
-    ]);
-
-    console.log('TWILIO configuration updated...');
-
-    const tmpSiteUrl = siteUrl.replace(/^https?:\/\//, '');
-    // Database configuration
-    await replaceInFile(filePaths.databaseLoginJs, [
-      ['${docupaceHost}', tmpSiteUrl],
-      ['${docupaceContext}', coreApiContext],
-    ]);
-
-    console.log('MFA Template configuration started...');
-
-    try {
-      const sourceDir = configureMFA === 'DISABLED' ? 'auth0-site-setup/templateNoMFA/' : 'auth0-site-setup/templateMFA/';
-      const destinationDir = 'auth0-site-setup/template/';
-
-      console.log(`AUTH0 MFA is ${configureMFA === 'DISABLED' ? 'disabled' : 'enabled'}`);
-      await copyDirectory(sourceDir, destinationDir);
-
-      console.log('MFA configuration completed.');
-    } catch (err) {
-      console.error('Error configuring MFA:', err);
-      throw err;
-    }
-
-    console.log('Template configuration completed.');
-  } catch (err) {
-    // console.error('Error configuring Auth0 templates:', err);
-    throw err;
-  }
-}
-
-export async function getAuth0AuthToken(auth0Domain, clientId, clientSecret) {
-  try {
-    const response = await axios.post(`https://${auth0Domain}/oauth/token`, {
-      client_id: clientId,
-      client_secret: clientSecret,
-      audience: `https://${auth0Domain}/api/v2/`,
-      grant_type: 'client_credentials',
-    }, {
-      headers: {
-        'Content-Type': 'application/json',
-      },
-    });
+    );
 
     const authToken = response.data.access_token;
     // console.log("Auth0 Auth Token:", authToken);
     return authToken;
   } catch (error) {
-    console.error("Error fetching Auth0 token:", error.response ? error.response.data : error.message);
+    console.error(
+      'Error fetching Auth0 token:',
+      error.response ? error.response.data : error.message,
+    );
   }
 }
 
-async function configureUI(siteHost, coreURL, docupaceHost, site, env, useNewDomain, auth0Domain, auth0ClientId, auth0ClientSecret, auth0Token, vaultSiteSecretsPath, imageTag, repoPath) {
-  console.log(`Configuring UI for site: ${site} Host: ${siteHost} in env: ${env}`);
+async function configureUI(
+  siteHost,
+  coreURL,
+  docupaceHost,
+  site,
+  env,
+  auth0Domain,
+  auth0ClientId,
+  auth0ClientSecret,
+  auth0Token,
+  vaultSiteSecretsPath,
+  imageTag,
+  repoPath,
+) {
+  console.log(
+    `Configuring UI for site: ${site} Host: ${siteHost} in env: ${env}`,
+  );
   siteHost = siteHost.replace('https://', '');
   coreURL = coreURL.replace('https://', '');
 
-
   try {
-    const auth0Response = await axios.get(`https://${auth0Domain}/api/v2/clients`, {
-      headers: {authorization: `Bearer ${auth0Token}`},
-    });
+    const auth0Response = await axios.get(
+      `https://${auth0Domain}/api/v2/clients`,
+      {
+        headers: { authorization: `Bearer ${auth0Token}` },
+      },
+    );
 
-    const uiClient = auth0Response.data.find(client => client.name === "docupace-ui-main");
+    const uiClient = auth0Response.data.find(
+      (client) => client.name === 'docupace-ui-main',
+    );
     const uiAuth0ClientId = uiClient.client_id;
     const uiAuth0ClientSecret = uiClient.client_secret;
 
     // Generate Auth0 Secret
-    const uiAuth0Secret = crypto.randomBytes(48).toString('base64').replace(/[^a-zA-Z0-9]/g, '');
+    const uiAuth0Secret = crypto
+      .randomBytes(48)
+      .toString('base64')
+      .replace(/[^a-zA-Z0-9]/g, '');
 
     // Prepare data payload
-    console.log("Preparing Vault UI data payload...");
+    console.log('Preparing Vault UI data payload...');
     const uiSecretData = JSON.stringify({
       data: {
         AUTH0_CLIENT_ID: uiAuth0ClientId,
@@ -415,6 +120,9 @@ uiMain:
   env:
     AUTH0_CLIENT_SECRET: vault:secret/data/${site}/ui/config#AUTH0_CLIENT_SECRET
     AUTH0_SECRET: vault:secret/data/${site}/ui/config#AUTH0_SECRET
+    AWS_ACCESS_KEY_ID: vault:secret/data/${site}/aws/config#AWS_ACCESS_KEY_ID
+    AWS_BUCKET_NAME: vault:secret/data/${site}/aws/config#AWS_BUCKET_NAME
+    AWS_SECRET_ACCESS_KEY: vault:secret/data/${site}/aws/config#AWS_SECRET_ACCESS_KEY
 image:
   repository: registry.paperout.com/docupace-ui-main-dev-docker-local/docupace-ui-main
   tag: ${imageTag}
@@ -438,7 +146,7 @@ ingress:
         - ${siteHost}
       secretName: dp-next-ui-cert
 externalConnectIngress:
-  enabled: ${useNewDomain}
+  enabled: true
   className: nginx
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt
@@ -467,57 +175,91 @@ externalConnectIngress:
         - ${siteHost}
       secretName: dp-next-ui-cert
 externalConnectService:
-  enabled: ${useNewDomain}
+  enabled: true
   name: external-connect
   domain: ${docupaceHost}
 `.trim();
 
     // Write configuration files
-    console.log("Writing configuration files...");
+    console.log('Writing configuration files...');
     await ensureDirectoryExists(path.resolve(`${repoPath}/dp/${site}`));
 
-    await fs.writeFile(`${repoPath}/dp/${site}/ui.app.yaml`, uiAppYaml, (err) => {
-      if (err) {
-        console.error("Failed to write the file:", err);
-      } else {
-        console.log("File written successfully.");
-      }
-    });
+    await fs.writeFile(
+      `${repoPath}/dp/${site}/ui.app.yaml`,
+      uiAppYaml,
+      (err) => {
+        if (err) {
+          console.error('Failed to write the file:', err);
+        } else {
+          console.log('File written successfully.');
+        }
+      },
+    );
 
-    await fs.writeFile(`${repoPath}/dp/${site}/ui.values.yaml`, uiValuesYaml, (err) => {
-      if (err) {
-        console.error("Failed to write the file:", err);
-      } else {
-        console.log("File written successfully.");
-      }
-    });
-    console.log("Done!");
+    await fs.writeFile(
+      `${repoPath}/dp/${site}/ui.values.yaml`,
+      uiValuesYaml,
+      (err) => {
+        if (err) {
+          console.error('Failed to write the file:', err);
+        } else {
+          console.log('File written successfully.');
+        }
+      },
+    );
+    console.log('Done!');
   } catch (error) {
-    console.error("Error configuring UI:", error);
+    console.error('Error configuring UI:', error);
   }
 }
 
-async function configureGraphQLServer(siteHost, coreURL, docupaceHost, site, env, auth0Domain, auth0ClientId, auth0ClientSecret, auth0Token, vaultSiteSecretsPath, imageTag, standardConfigRemoteBranch, repoPath, commonSecrets) {
+async function configureGraphQLServer(
+  siteHost,
+  coreURL,
+  docupaceHost,
+  site,
+  env,
+  auth0Domain,
+  auth0ClientId,
+  auth0ClientSecret,
+  auth0Token,
+  vaultSiteSecretsPath,
+  imageTag,
+  standardConfigRemoteBranch,
+  repoPath,
+  commonSecrets,
+) {
   siteHost = siteHost.replace('https://', '');
   coreURL = coreURL.replace('https://', '');
-  console.log(`Configuring GraphQL Server for site: ${site} Host: ${siteHost} in env: ${env}`);
+  console.log(
+    `Configuring GraphQL Server for site: ${site} Host: ${siteHost} in env: ${env}`,
+  );
 
   try {
-    const auth0Response = await axios.get(`https://${auth0Domain}/api/v2/clients`, {
-      headers: {authorization: `Bearer ${auth0Token}`},
-    });
+    const auth0Response = await axios.get(
+      `https://${auth0Domain}/api/v2/clients`,
+      {
+        headers: { authorization: `Bearer ${auth0Token}` },
+      },
+    );
 
-    const graphQLServerClient = auth0Response.data.find(client => client.name === "docupace-graphql");
-    const graphQLServerClientCredentials = auth0Response.data.find(client => client.name === "docupace-graphql-client-credentials");
+    const graphQLServerClient = auth0Response.data.find(
+      (client) => client.name === 'docupace-graphql',
+    );
+    const graphQLServerClientCredentials = auth0Response.data.find(
+      (client) => client.name === 'docupace-graphql-client-credentials',
+    );
 
     const graphQLServerAuth0ClientId = graphQLServerClient.client_id;
     const graphQLServerAuth0ClientSecret = graphQLServerClient.client_secret;
 
-    const graphQLServerCCAuth0ClientId = graphQLServerClientCredentials.client_id;
-    const graphQLServerCCAuth0ClientSecret = graphQLServerClientCredentials.client_secret;
+    const graphQLServerCCAuth0ClientId =
+      graphQLServerClientCredentials.client_id;
+    const graphQLServerCCAuth0ClientSecret =
+      graphQLServerClientCredentials.client_secret;
 
     // Prepare data payload
-    console.log("Preparing Vault GraphQL Server data payload...");
+    console.log('Preparing Vault GraphQL Server data payload...');
     const graphQLServerSecretData = JSON.stringify({
       data: {
         AUTH0_CLIENT_ID: graphQLServerAuth0ClientId,
@@ -580,105 +322,128 @@ ingress:
 `.trim();
 
     // Write configuration files
-    console.log("Writing ArgoCD GraphQL Server configuration files...");
+    console.log('Writing ArgoCD GraphQL Server configuration files...');
     await ensureDirectoryExists(path.resolve(`${repoPath}/dp/${site}`));
 
-    await fs.writeFile(`${repoPath}/dp/${site}/graphql-server.app.yaml`, graphQLServerAppYaml, (err) => {
-      if (err) {
-        console.error("Failed to write the file:", err);
-      } else {
-        console.log("File written successfully.");
-      }
-    });
+    await fs.writeFile(
+      `${repoPath}/dp/${site}/graphql-server.app.yaml`,
+      graphQLServerAppYaml,
+      (err) => {
+        if (err) {
+          console.error('Failed to write the file:', err);
+        } else {
+          console.log('File written successfully.');
+        }
+      },
+    );
 
-    await fs.writeFile(`${repoPath}/dp/${site}/graphql-server.values.yaml`, graphQLServerValuesYaml, (err) => {
-      if (err) {
-        console.error("Failed to write the file:", err);
-      } else {
-        console.log("File written successfully.");
-      }
-    });
-    console.log("Done!");
+    await fs.writeFile(
+      `${repoPath}/dp/${site}/graphql-server.values.yaml`,
+      graphQLServerValuesYaml,
+      (err) => {
+        if (err) {
+          console.error('Failed to write the file:', err);
+        } else {
+          console.log('File written successfully.');
+        }
+      },
+    );
+    console.log('Done!');
   } catch (error) {
-    console.error("Error configuring GraphQL Server:", error);
+    console.error('Error configuring GraphQL Server:', error);
   }
 }
 
-
-export async function configureFromSite(fromSite, toSite, fromEnv,toEnv, deployUI, deployGraphQLServer, useNewDomain, configureMFA) {
-  console.log(`Configuring Auth0 tenants and ArgoCD apps for site: ${toSite} in env: ${toEnv} from site: ${fromSite}`);
+export async function configureFromSite(
+  fromSite,
+  toSite,
+  fromEnv,
+  toEnv,
+  deployUI,
+  deployGraphQLServer,
+  useNewDomain,
+) {
+  console.log(
+    `Configuring Auth0 tenants and ArgoCD apps for site: ${toSite} in env: ${toEnv} from site: ${fromSite}`,
+  );
   // Common Secrets
   const commonSecretsPath = getVaultSecretsConfigs(toSite).commonSecretsPath;
-  console.log(`commonSecretsPath => ${commonSecretsPath}`)
+  console.log(`commonSecretsPath => ${commonSecretsPath}`);
   const commonSecrets = await getVaultSecrets(commonSecretsPath);
 
   // Site Common Secrets
-  const siteCommonSecretsPath = getVaultSecretsConfigs(toSite).siteCommonSecretsPath;
-  console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`)
+  const siteCommonSecretsPath =
+    getVaultSecretsConfigs(toSite).siteCommonSecretsPath;
+  console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
   const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
 
-  const auth0Domain = `docupace-${toEnv}-${toSite}.us.auth0.com`
+  const auth0Domain = `docupace-${toEnv}-${toSite}.us.auth0.com`;
   const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
   const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
-  const auth0Token = await getAuth0AuthToken(auth0Domain, auth0ClientId, auth0ClientSecret);
+  const auth0Token = await getAuth0AuthToken(
+    auth0Domain,
+    auth0ClientId,
+    auth0ClientSecret,
+  );
 
   // UI app
   const uiSecretsPath = getVaultSecretsConfigs(toSite).uiSecretsPath;
-  console.log(`uiSecretsPath => ${uiSecretsPath}`)
+  console.log(`uiSecretsPath => ${uiSecretsPath}`);
 
   // GraphQL-Server app
-  const graphqlSecretsPath = getVaultSecretsConfigs(toSite).graphqlServerSecretsPath;
+  const graphqlSecretsPath =
+    getVaultSecretsConfigs(toSite).graphqlServerSecretsPath;
   console.log(`graphqlSecretsPath => ${graphqlSecretsPath}`);
 
-  let repoPathFromEnv ="";
-  let repoPathToEnv = "";
+  let repoPathFromEnv = '';
+  let repoPathToEnv = '';
   // Clone repositories
-  if ( fromEnv == toEnv ) {
-     repoPathFromEnv = await cloneEnvRepository(fromEnv);
-     repoPathToEnv = repoPathFromEnv;
-  }else {
-     repoPathFromEnv = await cloneEnvRepository(fromEnv);
-     repoPathToEnv = await cloneEnvRepository(toEnv);
+  if (fromEnv === toEnv) {
+    repoPathFromEnv = await cloneEnvRepository(fromEnv);
+    repoPathToEnv = repoPathFromEnv;
+  } else {
+    repoPathFromEnv = await cloneEnvRepository(fromEnv);
+    repoPathToEnv = await cloneEnvRepository(toEnv);
   }
 
   //TODO: clone fromEnv and toEnv. replace above with this
 
-  const auth0RepoPath = await cloneRepository('auth0-site-setup');
+  // const auth0RepoPath = await cloneRepository('auth0-site-setup');
 
   // Read deploy configs
-  const { deployConfig: deployUIConfig } = await readDeployConfig('ui', fromEnv, fromSite, 'values');
+  const { deployConfig: deployUIConfig } = await readDeployConfig(
+    'ui',
+    fromEnv,
+    fromSite,
+    'values',
+  );
   const uiImageTag = deployUIConfig.image.tag;
 
-  const { deployConfig: deployGraphQLServerConfig } = await readDeployConfig('graphql-server', fromEnv, fromSite, 'values');
+  const { deployConfig: deployGraphQLServerConfig } = await readDeployConfig(
+    'graphql-server',
+    fromEnv,
+    fromSite,
+    'values',
+  );
   const graphqlImageTag = deployGraphQLServerConfig.image.tag;
-  const graphqlStandardConfigRemoteBranch = deployGraphQLServerConfig.graphqlServer.standardConfigRemoteBranch;
-
-  // File paths
-  const filePaths = {
-    databaseLoginJs: './auth0-site-setup/template/database-connections/docupace/login.js',
-    loginHtml: './auth0-site-setup/template/pages/login.html',
-    graphqlJson: './auth0-site-setup/template/clients/docupace-graphql.json',
-    uiJson: './auth0-site-setup/template/clients/docupace-ui-main.json',
-    connectJson: './auth0-site-setup/template/clients/docupace-connect.json',
-    databaseJson: './auth0-site-setup/template/database-connections/docupace/database.json',
-    twilioJson: './auth0-site-setup/template/guardian/providers/sms-twilio.json',
-  };
-
-  console.log(`Copying Latest UI Image Tag: ${deployUIConfig.image.tag} from site: ${fromSite} to site: ${toSite}`);
-  console.log(`Copying Latest GraphQL Server Image Tag: ${deployGraphQLServerConfig.image.tag} from site: ${fromSite} to site: ${toSite}`);
+  const graphqlStandardConfigRemoteBranch =
+    deployGraphQLServerConfig.graphqlServer.standardConfigRemoteBranch;
+
+  console.log(
+    `Copying Latest UI Image Tag: ${deployUIConfig.image.tag} from site: ${fromSite} to site: ${toSite}`,
+  );
+  console.log(
+    `Copying Latest GraphQL Server Image Tag: ${deployGraphQLServerConfig.image.tag} from site: ${fromSite} to site: ${toSite}`,
+  );
 
   const envConfig = environmentConfig[toEnv];
 
-  let CORE_URL,
-    SITE_HOST,
-    CORE_API_CONTEXT,
-    CONNECT_URL,
-    DOCUPACE_HOST;
+  let CORE_URL, SITE_HOST, CORE_API_CONTEXT, CONNECT_URL, DOCUPACE_HOST;
   if (useNewDomain) {
     const newUrl = envConfig.newUrl(toSite);
     CORE_URL = `${newUrl}/core`;
     SITE_HOST = newUrl;
-    CORE_API_CONTEXT = "core";
+    CORE_API_CONTEXT = 'core';
     CONNECT_URL = `${newUrl}/connect`;
     DOCUPACE_HOST = envConfig.docupaceHost();
   } else {
@@ -689,27 +454,41 @@ export async function configureFromSite(fromSite, toSite, fromEnv,toEnv, deployU
     CONNECT_URL = `${oldUrl}_ui`;
   }
 
-  await templateAuth0(SITE_HOST, CORE_API_CONTEXT, toEnv, filePaths, deployUI, deployGraphQLServer, commonSecrets, configureMFA);
-  await importAuth0Templates('./auth0-site-setup/template', auth0Domain, auth0ClientId, auth0ClientSecret);
-
-  if (deployUI === 'true') {
-    await configureUI(SITE_HOST, CORE_URL, DOCUPACE_HOST, toSite, toEnv, useNewDomain, auth0Domain, auth0ClientId, auth0ClientSecret, auth0Token, uiSecretsPath, uiImageTag, repoPathToEnv);
+  if (deployUI === true || deployUI === 'true') {
+    await configureUI(
+      SITE_HOST,
+      CORE_URL,
+      DOCUPACE_HOST,
+      toSite,
+      toEnv,
+      auth0Domain,
+      auth0ClientId,
+      auth0ClientSecret,
+      auth0Token,
+      uiSecretsPath,
+      uiImageTag,
+      repoPathToEnv,
+    );
   }
 
-  await configureGraphQLServer(SITE_HOST, CORE_URL, DOCUPACE_HOST, toSite, toEnv, auth0Domain, auth0ClientId, auth0ClientSecret, auth0Token, graphqlSecretsPath, graphqlImageTag, graphqlStandardConfigRemoteBranch, repoPathToEnv, commonSecrets);
-  await pushDeployConfig(repoPathToEnv, `Config update for ${toSite} from ${fromSite} with UI: ${uiImageTag} and GraphQL: ${graphqlImageTag}`);
-
-  await initializeAuth0Configuration({
-    initConfiguration: "true",
-    auth0Domain: auth0Domain,
-    auth0AuthToken: auth0Token,
-    coreApiIdentifier: commonSecrets.CORE_API_IDENTIFIER,
-  });
-
-  await addApplicationToApi({
-    application: 'docupace-graphql-client-credentials',
-    auth0Domain: auth0Domain,
-    auth0AuthToken: auth0Token,
-    coreApiIdentifier: commonSecrets.CORE_API_IDENTIFIER
-  })
+  await configureGraphQLServer(
+    SITE_HOST,
+    CORE_URL,
+    DOCUPACE_HOST,
+    toSite,
+    toEnv,
+    auth0Domain,
+    auth0ClientId,
+    auth0ClientSecret,
+    auth0Token,
+    graphqlSecretsPath,
+    graphqlImageTag,
+    graphqlStandardConfigRemoteBranch,
+    repoPathToEnv,
+    commonSecrets,
+  );
+  await pushDeployConfig(
+    repoPathToEnv,
+    `Config update for ${toSite} from ${fromSite} with UI: ${uiImageTag} and GraphQL: ${graphqlImageTag}`,
+  );
 }

package/src/auth0/export.js

@@ -0,0 +1,43 @@
+import { getVaultSecrets } from './vault.js';
+import { getVaultSecretsConfigs } from '../next/config.js';
+import { dump } from 'auth0-deploy-cli';
+
+export async function exportConf(site, env) {
+  try {
+    console.log(
+      `Exporting Auth0 configuration for site: ${site} and env: ${env}`,
+    );
+
+    const siteCommonSecretsPath =
+      getVaultSecretsConfigs(site).siteCommonSecretsPath;
+    console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
+    const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
+
+    const auth0Domain = `docupace-${env}-${site}.us.auth0.com`;
+    const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
+    const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
+
+    const config = {
+      config: {
+        AUTH0_DOMAIN: auth0Domain,
+        AUTH0_CLIENT_ID: auth0ClientId,
+        AUTH0_CLIENT_SECRET: auth0ClientSecret,
+      },
+      format: 'directory',
+      output_folder: `./auth0-${site}-export`,
+      export_ids: false,
+      env: false,
+      debug: true,
+    };
+
+    console.log(`Starting Auth0 ${site} configuration export...`);
+    await dump(config);
+    console.log(`Auth0 ${site} configuration export completed successfully!`);
+  } catch (error) {
+    console.error(
+      `Error during Auth0 ${site} configuration export:`,
+      error.message,
+    );
+    process.exit(1);
+  }
+}

package/src/auth0/metadata.js

@@ -0,0 +1,132 @@
+import fs from 'fs-extra';
+import axios from 'axios';
+import path from 'path';
+import { cloneRepository } from '../next/deploy.js';
+import { getAuth0AuthToken } from './configure.js';
+import { getVaultSecrets } from './vault.js';
+import { getVaultSecretsConfigs } from '../next/config.js';
+import { pushDeployConfig } from '../next/deploy.js';
+
+export async function getAuth0Metadata(site, env) {
+  try {
+    const connectDeployRepoPath = await cloneRepository('connect-deploy');
+
+    if (env === 'qa') {
+      console.log(
+        `The environment is: (${env}), but connect-deploy has preprod instead`,
+      );
+      process.chdir(`${connectDeployRepoPath}/envs/preprod/${site}`);
+    } else {
+      process.chdir(`${connectDeployRepoPath}/envs/${env}/${site}`);
+    }
+
+    const configPath = path.join('conf', 'application.conf');
+    const appConf = await fs.readFile(configPath, 'utf-8');
+    const connectContext = appConf.match(
+      /application\.context\s*=\s*"(.*?)"/,
+    )?.[1];
+
+    if (!connectContext) {
+      console.error('connectContext not found in application.conf. Exiting...');
+      process.exit(1);
+    }
+
+    const siteHost = appConf.match(
+      /docupace\.baseUrlClient\s*=\s*"?https?:\/\/([^/]+)"?/,
+    )?.[1];
+
+    if (!siteHost) {
+      console.error('siteHost not found in application.conf. Exiting...');
+      process.exit(1);
+    }
+
+    const connectEndpoint = `https://${siteHost}${connectContext}`;
+    console.log('CONNECT_ENDPOINT:', connectEndpoint);
+
+    console.log('Requesting token from Auth0...');
+    const siteCommonSecretsPath =
+      getVaultSecretsConfigs(site).siteCommonSecretsPath;
+    console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
+    const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
+    const auth0Domain = `docupace-${env}-${site}.us.auth0.com`;
+    const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
+    const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
+    const auth0Token = await getAuth0AuthToken(
+      auth0Domain,
+      auth0ClientId,
+      auth0ClientSecret,
+    );
+
+    const auth0Response = await axios.get(
+      `https://${auth0Domain}/api/v2/clients`,
+      {
+        headers: { authorization: `Bearer ${auth0Token}` },
+      },
+    );
+
+    const connectClient = auth0Response.data.find(
+      (client) => client.name === 'docupace-connect',
+    );
+
+    if (!connectClient) {
+      console.error('Client "docupace-connect" not found.');
+      process.exit(1);
+    }
+
+    const clientId = connectClient.client_id;
+    console.log('Found client_id:', clientId);
+
+    const metadataRes = await axios.get(
+      `https://${auth0Domain}/samlp/metadata/${clientId}`,
+      {
+        responseType: 'text',
+      },
+    );
+
+    const metadata = metadataRes.data;
+
+    if (metadata.length < 2000) {
+      console.error(
+        'Downloaded metadata looks incorrect (too small). Exiting...',
+      );
+      process.exit(1);
+    }
+    await fs.ensureDir('conf/saml');
+    await fs.writeFile('conf/saml/auth0.xml', metadata);
+    console.log('SAML metadata written to conf/saml/auth0.xml');
+
+    let newConfig = appConf;
+
+    if (/useSAML\s*=/.test(appConf)) {
+      newConfig = newConfig.replace(/useSAML\s*=.*/, 'useSAML=true');
+    } else {
+      newConfig += '\nuseSAML=true';
+    }
+
+    const replacements = {
+      'saml.clients.auth0.idpMetadataPath': '${samlEnvPath}"/auth0.xml"',
+      'saml.clients.auth0.spEntityId': `"${connectEndpoint}"`,
+      'saml.clients.auth0.redirectFormInput': '"RelayState"',
+      'saml.clients.auth0.idpLoginUrl': `"https://${auth0Domain}/v2/logout?client_id=${clientId}&returnTo=${connectEndpoint}"`,
+    };
+
+    for (const [key, value] of Object.entries(replacements)) {
+      const pattern = new RegExp(`${key}\\s*=.*`, 'g');
+      if (pattern.test(newConfig)) {
+        newConfig = newConfig.replace(pattern, `${key}=${value}`);
+      } else {
+        newConfig += `\n${key}=${value}`;
+      }
+    }
+
+    await fs.writeFile(configPath, newConfig);
+    console.log('The application.conf has been updated.');
+    await pushDeployConfig(
+      connectDeployRepoPath,
+      `Auth0 SAML metadata update for site: (${site}) in env: (${env})`,
+    );
+  } catch (error) {
+    console.error('Error:', error.message);
+    process.exit(1);
+  }
+}

package/src/auth0/vault.js

@@ -44,7 +44,7 @@ export async function getVaultSecrets(vaultPath) {
   } catch (error) {
     if (error.response) {
       console.error(
-        `Error: Failed to connect to Vault server at ${vaultAddr}. Response: ${error.response.status} ${error.response.statusText}`
+        `Error: Failed to connect to Vault server at ${vaultAddr}. Response: ${error.response.status} ${error.response.statusText}`,
       );
     } else {
       console.error(`Error: ${error.message}`);
@@ -88,7 +88,7 @@ export async function updateVaultSecrets(vaultPath, secretData) {
           'X-Vault-Token': vaultToken,
           'Content-Type': 'application/json',
         },
-      }
+      },
     );
 
     // Return the response from Vault
@@ -97,7 +97,7 @@ export async function updateVaultSecrets(vaultPath, secretData) {
   } catch (error) {
     if (error.response) {
       console.error(
-        `Error: Failed to update secret at ${vaultPath}. Response: ${error.response.status} ${error.response.statusText}`
+        `Error: Failed to update secret at ${vaultPath}. Response: ${error.response.status} ${error.response.statusText}`,
       );
     } else {
       console.error(`Error: ${error.message}`);

package/terraform/init.sh

@@ -33,16 +33,28 @@ echo "$atlassian_workspace_runner_ssh_key" | base64 -d > ~/.ssh/id_ed25519
 chmod 600 ~/.ssh/id_ed25519
 ssh-keyscan bitbucket.org > ~/.ssh/known_hosts
 
-
+info () {
+  echo "PROJECT => $PROJECT"
+  echo "CURRENT_ENVIRONMENT => $CURRENT_ENVIRONMENT"
+  echo "SITE_NAME => $SITE_NAME"
+}
 
 if [[ "$PROJECT" == "s3" ]]; then
-terraform init \
-   -input=false \
-   -reconfigure \
-   -backend=true \
-   -backend-config=./env/${CURRENT_ENVIRONMENT}/us-west-2/backend.tfvars \
-   -backend-config="key=us-west-2/${PROJECT}/${SITE_NAME}/${CURRENT_ENVIRONMENT}/terraform.tfstate" 
-
+  info
+  terraform init \
+     -input=false \
+     -reconfigure \
+     -backend=true \
+     -backend-config=./env/${CURRENT_ENVIRONMENT}/us-west-2/backend.tfvars \
+     -backend-config="key=us-west-2/${PROJECT}/${SITE_NAME}/${CURRENT_ENVIRONMENT}/terraform.tfstate"
+elif [[ "$PROJECT" == "idp" ]]; then
+  info
+  terraform init \
+     -input=false \
+     -reconfigure \
+     -backend=true \
+     -backend-config=./env/${CURRENT_ENVIRONMENT}/us-west-2/backend.tfvars \
+     -backend-config="key=us-west-2/${PROJECT}/${SITE_NAME}/${CURRENT_ENVIRONMENT}/terraform.tfstate"
 else
   terraform init -backend-config=./env/${CURRENT_ENVIRONMENT}/us-west-2/backend.tfvars --reconfigure
-fi
+fi

package/terraform/plan.sh

@@ -44,11 +44,18 @@ elif [[ "$PROJECT" == "s3" ]];then
           -var="site=${SITE_NAME}" \
           -var="env=${CURRENT_ENVIRONMENT}" \
           -out .tfplan
+elif [[ "$PROJECT" == "idp" ]];then
+  terraform plan -var-file="./env/${CURRENT_ENVIRONMENT}/us-west-2/terraform.tfvars" \
+          -var="site=${SITE_NAME}" \
+          -var="env=${CURRENT_ENVIRONMENT}" \
+          -var="docupace_domain=${DOCUPACE_DOMAIN}" \
+          -var="docupace_next_domain=${DOCUPACE_NEXT_DOMAIN}" \
+          -var="old_page_design=${USE_OLD_PAGE_DESIGN}" \
+          -var="use_new_domain=${USE_NEW_DOMAIN}" \
+          -var="configure_autologin=${CONFIGURE_AUTOLOGIN}" \
+          -var="configure_ui_main=${CONFIGURE_UI_MAIN}" \
+          -var="enable_mfa=${ENABLE_MFA}" \
+          -out .tfplan
 else
   terraform plan -var-file="./env/${CURRENT_ENVIRONMENT}/us-west-2/terraform.tfvars" -out .tfplan
 fi
-
-
-
-
-