@docupace/pipeline 1.0.43 → 1.0.44

package/src/auth0/export.js

@@ -1,43 +1,43 @@
-import { getVaultSecrets } from './vault.js';
-import { getVaultSecretsConfigs } from '../next/config.js';
-import { dump } from 'auth0-deploy-cli';
-
-export async function exportConf(site, env) {
-  try {
-    console.log(
-      `Exporting Auth0 configuration for site: ${site} and env: ${env}`,
-    );
-
-    const siteCommonSecretsPath =
-      getVaultSecretsConfigs(site).siteCommonSecretsPath;
-    console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
-    const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
-
-    const auth0Domain = `docupace-${env}-${site}.us.auth0.com`;
-    const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
-    const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
-
-    const config = {
-      config: {
-        AUTH0_DOMAIN: auth0Domain,
-        AUTH0_CLIENT_ID: auth0ClientId,
-        AUTH0_CLIENT_SECRET: auth0ClientSecret,
-      },
-      format: 'directory',
-      output_folder: `./auth0-${site}-export`,
-      export_ids: false,
-      env: false,
-      debug: true,
-    };
-
-    console.log(`Starting Auth0 ${site} configuration export...`);
-    await dump(config);
-    console.log(`Auth0 ${site} configuration export completed successfully!`);
-  } catch (error) {
-    console.error(
-      `Error during Auth0 ${site} configuration export:`,
-      error.message,
-    );
-    process.exit(1);
-  }
-}
+import { getVaultSecrets } from './vault.js';
+import { getVaultSecretsConfigs } from '../next/config.js';
+import { dump } from 'auth0-deploy-cli';
+
+export async function exportConf(site, env) {
+  try {
+    console.log(
+      `Exporting Auth0 configuration for site: ${site} and env: ${env}`,
+    );
+
+    const siteCommonSecretsPath =
+      getVaultSecretsConfigs(site).siteCommonSecretsPath;
+    console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
+    const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
+
+    const auth0Domain = `docupace-${env}-${site}.us.auth0.com`;
+    const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
+    const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
+
+    const config = {
+      config: {
+        AUTH0_DOMAIN: auth0Domain,
+        AUTH0_CLIENT_ID: auth0ClientId,
+        AUTH0_CLIENT_SECRET: auth0ClientSecret,
+      },
+      format: 'directory',
+      output_folder: `./auth0-${site}-export`,
+      export_ids: false,
+      env: false,
+      debug: true,
+    };
+
+    console.log(`Starting Auth0 ${site} configuration export...`);
+    await dump(config);
+    console.log(`Auth0 ${site} configuration export completed successfully!`);
+  } catch (error) {
+    console.error(
+      `Error during Auth0 ${site} configuration export:`,
+      error.message,
+    );
+    process.exit(1);
+  }
+}

package/src/auth0/metadata.js

@@ -1,132 +1,132 @@
-import fs from 'fs-extra';
-import axios from 'axios';
-import path from 'path';
-import { cloneRepository } from '../next/deploy.js';
-import { getAuth0AuthToken } from './configure.js';
-import { getVaultSecrets } from './vault.js';
-import { getVaultSecretsConfigs } from '../next/config.js';
-import { pushDeployConfig } from '../next/deploy.js';
-
-export async function getAuth0Metadata(site, env) {
-  try {
-    const connectDeployRepoPath = await cloneRepository('connect-deploy');
-
-    if (env === 'qa') {
-      console.log(
-        `The environment is: (${env}), but connect-deploy has preprod instead`,
-      );
-      process.chdir(`${connectDeployRepoPath}/envs/preprod/${site}`);
-    } else {
-      process.chdir(`${connectDeployRepoPath}/envs/${env}/${site}`);
-    }
-
-    const configPath = path.join('conf', 'application.conf');
-    const appConf = await fs.readFile(configPath, 'utf-8');
-    const connectContext = appConf.match(
-      /application\.context\s*=\s*"(.*?)"/,
-    )?.[1];
-
-    if (!connectContext) {
-      console.error('connectContext not found in application.conf. Exiting...');
-      process.exit(1);
-    }
-
-    const siteHost = appConf.match(
-      /docupace\.baseUrlClient\s*=\s*"?https?:\/\/([^/]+)"?/,
-    )?.[1];
-
-    if (!siteHost) {
-      console.error('siteHost not found in application.conf. Exiting...');
-      process.exit(1);
-    }
-
-    const connectEndpoint = `https://${siteHost}${connectContext}`;
-    console.log('CONNECT_ENDPOINT:', connectEndpoint);
-
-    console.log('Requesting token from Auth0...');
-    const siteCommonSecretsPath =
-      getVaultSecretsConfigs(site).siteCommonSecretsPath;
-    console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
-    const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
-    const auth0Domain = `docupace-${env}-${site}.us.auth0.com`;
-    const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
-    const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
-    const auth0Token = await getAuth0AuthToken(
-      auth0Domain,
-      auth0ClientId,
-      auth0ClientSecret,
-    );
-
-    const auth0Response = await axios.get(
-      `https://${auth0Domain}/api/v2/clients`,
-      {
-        headers: { authorization: `Bearer ${auth0Token}` },
-      },
-    );
-
-    const connectClient = auth0Response.data.find(
-      (client) => client.name === 'docupace-connect',
-    );
-
-    if (!connectClient) {
-      console.error('Client "docupace-connect" not found.');
-      process.exit(1);
-    }
-
-    const clientId = connectClient.client_id;
-    console.log('Found client_id:', clientId);
-
-    const metadataRes = await axios.get(
-      `https://${auth0Domain}/samlp/metadata/${clientId}`,
-      {
-        responseType: 'text',
-      },
-    );
-
-    const metadata = metadataRes.data;
-
-    if (metadata.length < 2000) {
-      console.error(
-        'Downloaded metadata looks incorrect (too small). Exiting...',
-      );
-      process.exit(1);
-    }
-    await fs.ensureDir('conf/saml');
-    await fs.writeFile('conf/saml/auth0.xml', metadata);
-    console.log('SAML metadata written to conf/saml/auth0.xml');
-
-    let newConfig = appConf;
-
-    if (/useSAML\s*=/.test(appConf)) {
-      newConfig = newConfig.replace(/useSAML\s*=.*/, 'useSAML=true');
-    } else {
-      newConfig += '\nuseSAML=true';
-    }
-
-    const replacements = {
-      'saml.clients.auth0.idpMetadataPath': '${samlEnvPath}"/auth0.xml"',
-      'saml.clients.auth0.spEntityId': `"${connectEndpoint}"`,
-      'saml.clients.auth0.redirectFormInput': '"RelayState"',
-      'saml.clients.auth0.idpLoginUrl': `"https://${auth0Domain}/v2/logout?client_id=${clientId}&returnTo=${connectEndpoint}"`,
-    };
-
-    for (const [key, value] of Object.entries(replacements)) {
-      const pattern = new RegExp(`${key}\\s*=.*`, 'g');
-      if (pattern.test(newConfig)) {
-        newConfig = newConfig.replace(pattern, `${key}=${value}`);
-      } else {
-        newConfig += `\n${key}=${value}`;
-      }
-    }
-
-    await fs.writeFile(configPath, newConfig);
-    console.log('The application.conf has been updated.');
-    await pushDeployConfig(
-      connectDeployRepoPath,
-      `Auth0 SAML metadata update for site: (${site}) in env: (${env})`,
-    );
-  } catch (error) {
-    console.error('Error:', error.message);
-    process.exit(1);
-  }
-}
+import fs from 'fs-extra';
+import axios from 'axios';
+import path from 'path';
+import { cloneRepository } from '../next/deploy.js';
+import { getAuth0AuthToken } from './configure.js';
+import { getVaultSecrets } from './vault.js';
+import { getVaultSecretsConfigs } from '../next/config.js';
+import { pushDeployConfig } from '../next/deploy.js';
+
+export async function getAuth0Metadata(site, env) {
+  try {
+    const connectDeployRepoPath = await cloneRepository('connect-deploy');
+
+    if (env === 'qa') {
+      console.log(
+        `The environment is: (${env}), but connect-deploy has preprod instead`,
+      );
+      process.chdir(`${connectDeployRepoPath}/envs/preprod/${site}`);
+    } else {
+      process.chdir(`${connectDeployRepoPath}/envs/${env}/${site}`);
+    }
+
+    const configPath = path.join('conf', 'application.conf');
+    const appConf = await fs.readFile(configPath, 'utf-8');
+    const connectContext = appConf.match(
+      /application\.context\s*=\s*"(.*?)"/,
+    )?.[1];
+
+    if (!connectContext) {
+      console.error('connectContext not found in application.conf. Exiting...');
+      process.exit(1);
+    }
+
+    const siteHost = appConf.match(
+      /docupace\.baseUrlClient\s*=\s*"?https?:\/\/([^/]+)"?/,
+    )?.[1];
+
+    if (!siteHost) {
+      console.error('siteHost not found in application.conf. Exiting...');
+      process.exit(1);
+    }
+
+    const connectEndpoint = `https://${siteHost}${connectContext}`;
+    console.log('CONNECT_ENDPOINT:', connectEndpoint);
+
+    console.log('Requesting token from Auth0...');
+    const siteCommonSecretsPath =
+      getVaultSecretsConfigs(site).siteCommonSecretsPath;
+    console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
+    const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
+    const auth0Domain = `docupace-${env}-${site}.us.auth0.com`;
+    const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
+    const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
+    const auth0Token = await getAuth0AuthToken(
+      auth0Domain,
+      auth0ClientId,
+      auth0ClientSecret,
+    );
+
+    const auth0Response = await axios.get(
+      `https://${auth0Domain}/api/v2/clients`,
+      {
+        headers: { authorization: `Bearer ${auth0Token}` },
+      },
+    );
+
+    const connectClient = auth0Response.data.find(
+      (client) => client.name === 'docupace-connect',
+    );
+
+    if (!connectClient) {
+      console.error('Client "docupace-connect" not found.');
+      process.exit(1);
+    }
+
+    const clientId = connectClient.client_id;
+    console.log('Found client_id:', clientId);
+
+    const metadataRes = await axios.get(
+      `https://${auth0Domain}/samlp/metadata/${clientId}`,
+      {
+        responseType: 'text',
+      },
+    );
+
+    const metadata = metadataRes.data;
+
+    if (metadata.length < 2000) {
+      console.error(
+        'Downloaded metadata looks incorrect (too small). Exiting...',
+      );
+      process.exit(1);
+    }
+    await fs.ensureDir('conf/saml');
+    await fs.writeFile('conf/saml/auth0.xml', metadata);
+    console.log('SAML metadata written to conf/saml/auth0.xml');
+
+    let newConfig = appConf;
+
+    if (/useSAML\s*=/.test(appConf)) {
+      newConfig = newConfig.replace(/useSAML\s*=.*/, 'useSAML=true');
+    } else {
+      newConfig += '\nuseSAML=true';
+    }
+
+    const replacements = {
+      'saml.clients.auth0.idpMetadataPath': '${samlEnvPath}"/auth0.xml"',
+      'saml.clients.auth0.spEntityId': `"${connectEndpoint}"`,
+      'saml.clients.auth0.redirectFormInput': '"RelayState"',
+      'saml.clients.auth0.idpLoginUrl': `"https://${auth0Domain}/v2/logout?client_id=${clientId}&returnTo=${connectEndpoint}"`,
+    };
+
+    for (const [key, value] of Object.entries(replacements)) {
+      const pattern = new RegExp(`${key}\\s*=.*`, 'g');
+      if (pattern.test(newConfig)) {
+        newConfig = newConfig.replace(pattern, `${key}=${value}`);
+      } else {
+        newConfig += `\n${key}=${value}`;
+      }
+    }
+
+    await fs.writeFile(configPath, newConfig);
+    console.log('The application.conf has been updated.');
+    await pushDeployConfig(
+      connectDeployRepoPath,
+      `Auth0 SAML metadata update for site: (${site}) in env: (${env})`,
+    );
+  } catch (error) {
+    console.error('Error:', error.message);
+    process.exit(1);
+  }
+}

package/src/auth0/vault.js

@@ -1,107 +1,107 @@
-import axios from 'axios';
-
-/**
- * Fetch secrets from Vault.
- * @param {string} vaultPath - The path in Vault to fetch secrets from.
- * @returns {Promise<Object>} - The secret data as a JSON object.
- */
-export async function getVaultSecrets(vaultPath) {
-  if (!vaultPath) {
-    console.error('Error: VAULT_PATH is required.');
-    throw new Error('VAULT_PATH is required.');
-  }
-
-  const vaultToken = process.env.VAULT_TOKEN;
-  const vaultAddr = process.env.VAULT_ADDR;
-
-  if (!vaultToken || !vaultAddr) {
-    console.error('Error: VAULT_TOKEN and VAULT_ADDR must be set.');
-    throw new Error('VAULT_TOKEN and VAULT_ADDR must be set.');
-  }
-
-  try {
-    // Disable SSL verification globally by setting environment variable
-    if (process.env.VAULT_SKIP_VERIFY === 'true') {
-      process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
-    }
-
-    // Fetch the secret from Vault
-    const response = await axios.get(`${vaultAddr}/v1/${vaultPath}`, {
-      headers: {
-        'X-Vault-Token': vaultToken,
-      },
-    });
-
-    // Validate the response contains JSON data
-    const data = response.data;
-    if (data && typeof data === 'object') {
-      // console.log(`Secrets fetched successfully from Vault at ${JSON.stringify(data.data.data)})`);
-      return data.data.data;
-    } else {
-      console.error('Error: Invalid JSON received from Vault.');
-      throw new Error('Invalid JSON received from Vault.');
-    }
-  } catch (error) {
-    if (error.response) {
-      console.error(
-        `Error: Failed to connect to Vault server at ${vaultAddr}. Response: ${error.response.status} ${error.response.statusText}`,
-      );
-    } else {
-      console.error(`Error: ${error.message}`);
-    }
-    // throw error;
-  }
-}
-
-/**
- * Update a secret in Vault.
- * @param {string} vaultPath - The path in Vault where the secret should be updated.
- * @param {Object} secretData - The secret data to be stored (as a JSON object).
- * @returns {Promise<Object>} - The response from Vault as a JSON object.
- */
-export async function updateVaultSecrets(vaultPath, secretData) {
-  if (!vaultPath || !secretData) {
-    console.error('Usage: updateVaultSecret(vaultPath, secretData)');
-    throw new Error('Both vaultPath and secretData are required.');
-  }
-
-  const vaultToken = process.env.VAULT_TOKEN;
-  const vaultAddr = process.env.VAULT_ADDR;
-
-  if (!vaultToken || !vaultAddr) {
-    console.error('Error: VAULT_TOKEN and VAULT_ADDR must be set.');
-    throw new Error('VAULT_TOKEN and VAULT_ADDR must be set.');
-  }
-
-  try {
-    // Disable SSL verification globally if VAULT_SKIP_VERIFY is set
-    if (process.env.VAULT_SKIP_VERIFY === 'true') {
-      process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
-    }
-
-    // Make the POST request to update the Vault secret
-    const response = await axios.post(
-      `${vaultAddr}/v1/${vaultPath}`,
-      secretData,
-      {
-        headers: {
-          'X-Vault-Token': vaultToken,
-          'Content-Type': 'application/json',
-        },
-      },
-    );
-
-    // Return the response from Vault
-    console.log(response.data);
-    return response.data;
-  } catch (error) {
-    if (error.response) {
-      console.error(
-        `Error: Failed to update secret at ${vaultPath}. Response: ${error.response.status} ${error.response.statusText}`,
-      );
-    } else {
-      console.error(`Error: ${error.message}`);
-    }
-    // throw error;
-  }
-}
+import axios from 'axios';
+
+/**
+ * Fetch secrets from Vault.
+ * @param {string} vaultPath - The path in Vault to fetch secrets from.
+ * @returns {Promise<Object>} - The secret data as a JSON object.
+ */
+export async function getVaultSecrets(vaultPath) {
+  if (!vaultPath) {
+    console.error('Error: VAULT_PATH is required.');
+    throw new Error('VAULT_PATH is required.');
+  }
+
+  const vaultToken = process.env.VAULT_TOKEN;
+  const vaultAddr = process.env.VAULT_ADDR;
+
+  if (!vaultToken || !vaultAddr) {
+    console.error('Error: VAULT_TOKEN and VAULT_ADDR must be set.');
+    throw new Error('VAULT_TOKEN and VAULT_ADDR must be set.');
+  }
+
+  try {
+    // Disable SSL verification globally by setting environment variable
+    if (process.env.VAULT_SKIP_VERIFY === 'true') {
+      process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
+    }
+
+    // Fetch the secret from Vault
+    const response = await axios.get(`${vaultAddr}/v1/${vaultPath}`, {
+      headers: {
+        'X-Vault-Token': vaultToken,
+      },
+    });
+
+    // Validate the response contains JSON data
+    const data = response.data;
+    if (data && typeof data === 'object') {
+      // console.log(`Secrets fetched successfully from Vault at ${JSON.stringify(data.data.data)})`);
+      return data.data.data;
+    } else {
+      console.error('Error: Invalid JSON received from Vault.');
+      throw new Error('Invalid JSON received from Vault.');
+    }
+  } catch (error) {
+    if (error.response) {
+      console.error(
+        `Error: Failed to connect to Vault server at ${vaultAddr}. Response: ${error.response.status} ${error.response.statusText}`,
+      );
+    } else {
+      console.error(`Error: ${error.message}`);
+    }
+    // throw error;
+  }
+}
+
+/**
+ * Update a secret in Vault.
+ * @param {string} vaultPath - The path in Vault where the secret should be updated.
+ * @param {Object} secretData - The secret data to be stored (as a JSON object).
+ * @returns {Promise<Object>} - The response from Vault as a JSON object.
+ */
+export async function updateVaultSecrets(vaultPath, secretData) {
+  if (!vaultPath || !secretData) {
+    console.error('Usage: updateVaultSecret(vaultPath, secretData)');
+    throw new Error('Both vaultPath and secretData are required.');
+  }
+
+  const vaultToken = process.env.VAULT_TOKEN;
+  const vaultAddr = process.env.VAULT_ADDR;
+
+  if (!vaultToken || !vaultAddr) {
+    console.error('Error: VAULT_TOKEN and VAULT_ADDR must be set.');
+    throw new Error('VAULT_TOKEN and VAULT_ADDR must be set.');
+  }
+
+  try {
+    // Disable SSL verification globally if VAULT_SKIP_VERIFY is set
+    if (process.env.VAULT_SKIP_VERIFY === 'true') {
+      process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
+    }
+
+    // Make the POST request to update the Vault secret
+    const response = await axios.post(
+      `${vaultAddr}/v1/${vaultPath}`,
+      secretData,
+      {
+        headers: {
+          'X-Vault-Token': vaultToken,
+          'Content-Type': 'application/json',
+        },
+      },
+    );
+
+    // Return the response from Vault
+    console.log(response.data);
+    return response.data;
+  } catch (error) {
+    if (error.response) {
+      console.error(
+        `Error: Failed to update secret at ${vaultPath}. Response: ${error.response.status} ${error.response.statusText}`,
+      );
+    } else {
+      console.error(`Error: ${error.message}`);
+    }
+    // throw error;
+  }
+}