@docupace/pipeline 1.0.4-4.8 → 1.0.4

package/src/next/publish.js

@@ -1,48 +1,46 @@
-import { $ } from 'zx';
-
-export async function publish(GIT_SHA) {
-  const BITBUCKET_REPO_SLUG = process.env.BITBUCKET_REPO_SLUG;
-  const BUILD_IMAGE_NAME = `${BITBUCKET_REPO_SLUG}:build-${process.env.BITBUCKET_BUILD_NUMBER}`;
-  const IMAGE_NAME = `${BITBUCKET_REPO_SLUG}:sha-${GIT_SHA}`;
-  const JF_REGISTRY_FULL_URL = `${process.env.JF_REGISTRY_URL}/${process.env.JF_REGISTRY_REPO_NAME}`;
-
-  console.log(`Publishing Docker image: ${IMAGE_NAME}`);
-
-  // Docker login
-  await $`echo ${process.env.JF_REGISTRY_PASSWORD_DEV} | docker login --username ${process.env.JF_REGISTRY_USER_DEV} --password-stdin ${process.env.JF_REGISTRY_URL}`;
-
-  // Check if the image already exists
-  try {
-    await $`docker manifest inspect ${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}`;
-    console.log(
-      `Tag sha-${GIT_SHA} already exists in the remote repository. Skipping push.`,
-    );
-  } catch {
-    await $`docker tag ${IMAGE_NAME} ${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}`;
-    await $`docker push ${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}`;
-  }
-
-  // Tag and push build image
-  await $`docker tag ${IMAGE_NAME} ${JF_REGISTRY_FULL_URL}/${BUILD_IMAGE_NAME}`;
-  await $`docker push ${JF_REGISTRY_FULL_URL}/${BUILD_IMAGE_NAME}`;
-
-  // Fetch Git tags pointing to the current HEAD
-  const gitTagsOutput = (await $`git tag --points-at HEAD`).stdout.trim();
-  const gitTags = gitTagsOutput.split('\n').filter((tag) => tag);
-
-  // Tag and push each Git tag as a Docker tag
-  if (gitTags.length > 0) {
-    console.log(`Found Git tags pointing to HEAD: ${gitTags.join(', ')}`);
-    for (const gitTag of gitTags) {
-      const dockerTag = `${JF_REGISTRY_FULL_URL}/${BITBUCKET_REPO_SLUG}:${gitTag}`;
-      console.log(`Tagging and pushing Docker image for Git tag: ${gitTag}`);
-      await $`docker tag ${IMAGE_NAME} ${dockerTag}`;
-      await $`docker push ${dockerTag}`;
-    }
-  } else {
-    console.log('No Git tags found pointing to the current HEAD.');
-  }
-
-  // Docker logout
-  await $`docker logout ${process.env.JF_REGISTRY_URL}`;
-}
+import { $ } from 'zx';
+
+export async function publish(GIT_SHA) {
+    const BITBUCKET_REPO_SLUG = process.env.BITBUCKET_REPO_SLUG;
+    const BUILD_IMAGE_NAME = `${BITBUCKET_REPO_SLUG}:build-${process.env.BITBUCKET_BUILD_NUMBER}`;
+    const IMAGE_NAME = `${BITBUCKET_REPO_SLUG}:sha-${GIT_SHA}`;
+    const JF_REGISTRY_FULL_URL = `${process.env.JF_REGISTRY_URL}/${process.env.JF_REGISTRY_REPO_NAME}`;
+
+    console.log(`Publishing Docker image: ${IMAGE_NAME}`);
+
+    // Docker login
+    await $`echo ${process.env.JF_REGISTRY_PASSWORD_DEV} | docker login --username ${process.env.JF_REGISTRY_USER_DEV} --password-stdin ${process.env.JF_REGISTRY_URL}`;
+
+    // Check if the image already exists
+    try {
+        await $`docker manifest inspect ${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}`;
+        console.log(`Tag sha-${GIT_SHA} already exists in the remote repository. Skipping push.`);
+    } catch {
+        await $`docker tag ${IMAGE_NAME} ${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}`;
+        await $`docker push ${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}`;
+    }
+
+    // Tag and push build image
+    await $`docker tag ${IMAGE_NAME} ${JF_REGISTRY_FULL_URL}/${BUILD_IMAGE_NAME}`;
+    await $`docker push ${JF_REGISTRY_FULL_URL}/${BUILD_IMAGE_NAME}`;
+
+    // Fetch Git tags pointing to the current HEAD
+    const gitTagsOutput = (await $`git tag --points-at HEAD`).stdout.trim();
+    const gitTags = gitTagsOutput.split('\n').filter((tag) => tag);
+
+    // Tag and push each Git tag as a Docker tag
+    if (gitTags.length > 0) {
+        console.log(`Found Git tags pointing to HEAD: ${gitTags.join(', ')}`);
+        for (const gitTag of gitTags) {
+            const dockerTag = `${JF_REGISTRY_FULL_URL}/${BITBUCKET_REPO_SLUG}:${gitTag}`;
+            console.log(`Tagging and pushing Docker image for Git tag: ${gitTag}`);
+            await $`docker tag ${IMAGE_NAME} ${dockerTag}`;
+            await $`docker push ${dockerTag}`;
+        }
+    } else {
+        console.log('No Git tags found pointing to the current HEAD.');
+    }
+
+    // Docker logout
+    await $`docker logout ${process.env.JF_REGISTRY_URL}`;
+}

package/src/next/pull.js

@@ -1,7 +1,7 @@
-import { $ } from 'zx';
-
-export async function pull(imageName) {
-  const JF_REGISTRY_FULL_URL = `${process.env.JF_REGISTRY_URL}/${process.env.JF_REGISTRY_REPO_NAME}`;
-  console.log(`Pulling Docker image: ${JF_REGISTRY_FULL_URL}/${imageName}`);
-  await $`docker pull ${JF_REGISTRY_FULL_URL}/${imageName}`;
-}
+import { $ } from 'zx';
+
+export async function pull(imageName) {
+    const JF_REGISTRY_FULL_URL = `${process.env.JF_REGISTRY_URL}/${process.env.JF_REGISTRY_REPO_NAME}`;
+    console.log(`Pulling Docker image: ${JF_REGISTRY_FULL_URL}/${imageName}`);
+    await $`docker pull ${JF_REGISTRY_FULL_URL}/${imageName}`;
+}

package/src/next/sonar.js

@@ -1,23 +1,23 @@
-import { $ } from 'zx';
-
-export async function sonar(GIT_SHA) {
-  const IMAGE_NAME = `${process.env.BITBUCKET_REPO_SLUG}:sha-${GIT_SHA}`;
-  const SONAR_CONTAINER_NAME = `${process.env.BITBUCKET_REPO_SLUG}-${GIT_SHA}`;
-
-  console.log(`Running Sonar analysis on Docker image: ${IMAGE_NAME}`);
-
-  // Remove existing container
-  const existingContainer = (
-    await $`docker ps -a --filter "name=${SONAR_CONTAINER_NAME}" --format "{{.Names}}"`
-  ).stdout.trim();
-  if (existingContainer) {
-    await $`docker rm -f ${SONAR_CONTAINER_NAME}`;
-  }
-
-  await $`docker run --rm \
-    -e BRANCH=${process.env.BITBUCKET_BRANCH} \
-    -e PR_ID=${process.env.BITBUCKET_PR_ID} \
-    -e PR_DESTINATION_BRANCH=${process.env.BITBUCKET_PR_DESTINATION_BRANCH} \
-    -e SONAR_TOKEN=${process.env.SONAR_TOKEN} \
-    --name ${SONAR_CONTAINER_NAME} ${IMAGE_NAME} pnpm sonar`;
-}
+import { $ } from 'zx';
+
+export async function sonar(GIT_SHA) {
+    const IMAGE_NAME = `${process.env.BITBUCKET_REPO_SLUG}:sha-${GIT_SHA}`;
+    const SONAR_CONTAINER_NAME = `${process.env.BITBUCKET_REPO_SLUG}-${GIT_SHA}`;
+
+    console.log(`Running Sonar analysis on Docker image: ${IMAGE_NAME}`);
+
+    // Remove existing container
+    const existingContainer = (
+        await $`docker ps -a --filter "name=${SONAR_CONTAINER_NAME}" --format "{{.Names}}"`
+    ).stdout.trim();
+    if (existingContainer) {
+        await $`docker rm -f ${SONAR_CONTAINER_NAME}`;
+    }
+
+    await $`docker run --rm \
+    -e BRANCH=${process.env.BITBUCKET_BRANCH} \
+    -e PR_ID=${process.env.BITBUCKET_PR_ID} \
+    -e PR_DESTINATION_BRANCH=${process.env.BITBUCKET_PR_DESTINATION_BRANCH} \
+    -e SONAR_TOKEN=${process.env.SONAR_TOKEN} \
+    --name ${SONAR_CONTAINER_NAME} ${IMAGE_NAME} pnpm sonar`;
+}

package/.prettierrc.cjs

@@ -1,12 +0,0 @@
-module.exports = {
-  parser: 'typescript',
-  trailingComma: 'all',
-  tabWidth: 2,
-  semi: true,
-  singleQuote: true,
-  printWidth: 80,
-  tabs: false,
-  jsxSingleQuote: false,
-  bracketSameLine: true,
-  arrowParens: 'always',
-};

package/bin/azuread_update_callbacks_for_app.sh

@@ -1,58 +0,0 @@
-#!/bin/bash
-set -e
-
-ENV=$1
-
-if [ -z "$ENV" ]; then
-    echo "Usage: $0 <environment>"
-    exit 1
-fi
-
-TENANT_ID="docupace.onmicrosoft.com"
-CLIENT_ID=$ARM_CLIENT_ID
-CLIENT_SECRET=$ARM_CLIENT_SECRET
-NEW_REDIRECT="https://docupace-$ENV-$SITE_NAME.us.auth0.com/login/callback"
-APP_ID="auth0-$ENV-docupace"
-APP_SCOPE="https://graph.microsoft.com/.default"
-GRAPH_API="https://graph.microsoft.com/v1.0"
-
-ACCESS_TOKEN=$(curl -s -X POST \
--H "Content-Type: application/x-www-form-urlencoded" \
--d "grant_type=client_credentials&client_id=$CLIENT_ID&client_secret=$CLIENT_SECRET&scope=$APP_SCOPE" \
-https://login.microsoftonline.com/$TENANT_ID/oauth2/v2.0/token | jq -r '.access_token')
-
-APP_DETAILS=$(curl -s -G "https://graph.microsoft.com/v1.0/applications" \
-    -H "Authorization: Bearer $ACCESS_TOKEN" \
-    -H "Content-Type: application/json" \
-    --data-urlencode "\$filter=appId eq '$CLIENT_ID'")
-
-APP_ID=$(echo "$APP_DETAILS" | jq -r '.value[0].id')
-echo "Application ID: $APP_ID"
-
-CURRENT_REDIRECTS=$(echo "$APP_DETAILS" | jq -r '.value[0].web.redirectUris // []')
-echo "Current redirect URIs: $CURRENT_REDIRECTS"
-
-if echo "$CURRENT_REDIRECTS" | jq -e --arg uri "$NEW_REDIRECT" 'index($uri)' > /dev/null; then
-    echo "Redirect URI '$NEW_REDIRECT' already exists. No update needed."
-else
-    UPDATED_REDIRECTS=$(echo "$CURRENT_REDIRECTS" | jq --arg uri "$NEW_REDIRECT" '. + [$uri]')
-    echo "Updated redirect URIs: $UPDATED_REDIRECTS"
-
-    UPDATE_REDIRECTS=$(curl -fs -X PATCH \
-        -H "Authorization: Bearer $ACCESS_TOKEN" \
-        -H "Content-Type: application/json" \
-        -d "{
-          \"web\": {
-            \"redirectUris\": $UPDATED_REDIRECTS
-          }
-        }" \
-        "https://graph.microsoft.com/v1.0/applications/$APP_ID")
-
-    if [ $? -eq 0 ]; then
-        echo "Successfully updated redirect URIs"
-        echo $UPDATE_REDIRECTS
-    else
-        echo "Failed to update redirect URIs"
-        echo $UPDATE_REDIRECTS
-    fi
-fi

package/eslint.config.js

@@ -1,26 +0,0 @@
-import globals from 'globals';
-import pluginJs from '@eslint/js';
-import prettierConfig from 'eslint-config-prettier';
-import prettierPlugin from 'eslint-plugin-prettier';
-
-/** @type {import('eslint').Linter.Config[]} */
-export default [
-  {
-    languageOptions: {
-      globals: {
-        ...globals.browser,
-        ...globals.node, // Add Node.js globals
-      },
-    },
-  },
-  pluginJs.configs.recommended,
-  {
-    plugins: {
-      prettier: prettierPlugin,
-    },
-    rules: {
-      ...prettierConfig.rules,
-      'prettier/prettier': 'error',
-    },
-  },
-];

package/src/auth0/alias.js

@@ -1,72 +0,0 @@
-import axios from 'axios';
-
-import { createAlias } from '../next/alias.js';
-
-import { getAuth0AuthToken } from './configure.js';
-
-import { getVaultSecrets } from './vault.js';
-
-import { getVaultSecretsConfigs } from '../next/config.js';
-
-import { cloneEnvRepository, readDeployConfig } from '../next/deploy.js';
-
-export async function getCCAlias({ application, auth0Domain, auth0AuthToken }) {
-  console.log(`Forming alias name for application ${application}...`);
-
-  try {
-    const auth0Response = await axios.get(
-      `https://${auth0Domain}/api/v2/clients`,
-      {
-        headers: { authorization: `Bearer ${auth0AuthToken}` },
-      },
-    );
-
-    const appAuth0ClientIdData = auth0Response.data.find(
-      (client) => client.name === `${application}`,
-    );
-    const appAuth0ClientId = appAuth0ClientIdData.client_id;
-
-    console.log(`Client Credentials Alias: ${appAuth0ClientId}@clients`);
-    return `${appAuth0ClientId}@clients`;
-  } catch (err) {
-    console.error(
-      `Failed to form alias name for application: ${application}: ${err.message}`,
-    );
-  }
-}
-
-export async function configureAlias(site, env, username, password, realm) {
-  console.log(`Creating alias for site: ${site} in env: ${env}`);
-  // Site Common Secrets
-  const siteCommonSecretsPath =
-    getVaultSecretsConfigs(site).siteCommonSecretsPath;
-  console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
-  const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
-
-  const auth0Domain = `docupace-${env}-${site}.us.auth0.com`;
-  const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
-  const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
-  const auth0Token = await getAuth0AuthToken(
-    auth0Domain,
-    auth0ClientId,
-    auth0ClientSecret,
-  );
-
-  await cloneEnvRepository(env);
-
-  const { deployConfig: deployGraphQLServerConfig } = await readDeployConfig(
-    'graphql-server',
-    env,
-    site,
-    'values',
-  );
-  const coreUrl = deployGraphQLServerConfig.graphqlServer.coreUrl;
-
-  const clientCredentialsAlias = await getCCAlias({
-    application: 'docupace-graphql-client-credentials',
-    auth0Domain: auth0Domain,
-    auth0AuthToken: auth0Token,
-  });
-
-  await createAlias(coreUrl, username, password, realm, clientCredentialsAlias);
-}

package/src/auth0/cli.js

@@ -1,76 +0,0 @@
-#!/usr/bin/env node
-
-import { Command } from 'commander';
-import { configureFromSite } from './configure.js';
-import { getVaultSecrets } from './vault.js';
-
-import dotenv from 'dotenv';
-import { configureAlias } from './alias.js';
-import { exportConf } from './export.js';
-import { getAuth0Metadata } from './metadata.js';
-
-dotenv.config({ path: ['.env.pipeline.local', 'config/.env.pipeline.local'] });
-
-const program = new Command();
-
-program
-  .command(
-    'configureFromSite <fromSite> <toSite> <fromEnv> <toEnv> <deployUI> <deployGraphQLServer> <useNewDomain> <useS3> <deployCCUI>',
-  )
-  .description('Configure the Auth0 tenants in env for the given site')
-  .action(
-    async (
-      fromSite,
-      toSite,
-      fromEnv,
-      toEnv,
-      deployUI,
-      deployGraphQLServer,
-      useNewDomain,
-      useS3,
-      deployCCUI,
-    ) => {
-      await configureFromSite(
-        fromSite,
-        toSite,
-        fromEnv,
-        toEnv,
-        deployUI,
-        deployGraphQLServer,
-        useNewDomain,
-        useS3 === 'true' || useS3 === true,
-        deployCCUI,
-      );
-    },
-  );
-
-program
-  .command('getVaultSecrets <vaultPath>')
-  .description('Get Secrets for Vault PATH')
-  .action(async (vaultPath) => {
-    const data = await getVaultSecrets(vaultPath);
-    console.log(JSON.stringify(data, 'null', 2));
-  });
-
-program
-  .command('configureAlias <site> <env> <username> <password> <realm>')
-  .description('Configure Core Alias for the given site')
-  .action(async (site, env, username, password, realm) => {
-    await configureAlias(site, env, username, password, realm);
-  });
-
-program
-  .command('exportConf <site> <env>')
-  .description('Export Auth0 configuration for the given site')
-  .action(async (site, env) => {
-    await exportConf(site, env);
-  });
-
-program
-  .command('getAuth0Metadata <site> <env>')
-  .description('Get Auth0 metadata for the given site')
-  .action(async (site, env) => {
-    await getAuth0Metadata(site, env);
-  });
-
-program.parse(process.argv);