@docupace/pipeline 1.0.7-7.micro-cli11 → 1.0.7-alpha.0

package/src/auth0/configure.test.js

@@ -1,167 +0,0 @@
-// @jest-environment node
-import { jest } from '@jest/globals';
-
-// ─── Mock All Required Modules ───────────────────────────────────────────────
-
-jest.unstable_mockModule('fs-extra', () => ({
-  default: {
-    promises: {
-      mkdir: jest.fn(),
-    },
-    writeFile: jest.fn(),
-    ensureDir: jest.fn(),
-  },
-  writeFile: jest.fn(),
-  ensureDir: jest.fn(),
-}));
-
-jest.unstable_mockModule('axios', () => ({
-  default: {
-    post: jest.fn(),
-    get: jest.fn(),
-  },
-}));
-
-jest.unstable_mockModule('crypto', () => ({
-  randomBytes: () => ({
-    toString: () => 'mockBase64==',
-  }),
-}));
-
-jest.unstable_mockModule('../next/deploy.js', () => ({
-  cloneRepository: jest.fn(),
-  cloneEnvRepository: jest.fn(),
-  pushDeployConfig: jest.fn(),
-  readDeployConfig: jest.fn(),
-}));
-
-jest.unstable_mockModule('./vault.js', () => ({
-  getVaultSecrets: jest.fn(),
-  updateVaultSecrets: jest.fn(),
-}));
-
-jest.unstable_mockModule('../next/config.js', () => ({
-  coreSiteEnvMap: { dev: 'dev-env' },
-  environmentConfig: {
-    dev: {
-      newUrl: (site) => `dev.${site}.com`,
-      oldUrl: (site) => `legacy.${site}.com`,
-      ccUrl: (site) => `cc.${site}.com`,
-      docupaceHost: () => 'docupace.com',
-    },
-  },
-  getVaultSecretsConfigs: jest.fn(),
-}));
-
-// ─── Global References ───────────────────────────────────────────────────────
-
-let fs, axios, deploy, vault, config;
-let getAuth0AuthToken, cleanAndWritePropertiesFile, updateCoreSiteConfig;
-
-const originalProcessExit = process.exit;
-
-beforeAll(async () => {
-  // Mock process.exit to prevent killing the test runner
-  process.exit = jest.fn();
-
-  // Suppress noisy error output
-  jest.spyOn(console, 'error').mockImplementation(() => {});
-  jest.spyOn(console, 'log').mockImplementation(() => {});
-
-  // Import after mocks
-  ({ default: fs } = await import('fs-extra'));
-  ({ default: axios } = await import('axios'));
-  deploy = await import('../next/deploy.js');
-  vault = await import('./vault.js');
-  config = await import('../next/config.js');
-
-  const mod = await import('./configure.js');
-  ({ getAuth0AuthToken, cleanAndWritePropertiesFile, updateCoreSiteConfig } =
-    mod);
-});
-
-afterAll(() => {
-  // Restore
-  process.exit = originalProcessExit;
-  console.error.mockRestore();
-  console.log.mockRestore();
-});
-
-// ─── Tests ───────────────────────────────────────────────────────────────────
-
-describe('Deployment Automation Module (ESM)', () => {
-  describe('getAuth0AuthToken', () => {
-    it('should return access token on success', async () => {
-      axios.post.mockResolvedValue({ data: { access_token: 'mock-token' } });
-      const token = await getAuth0AuthToken('auth.domain', 'cid', 'secret');
-      expect(token).toBe('mock-token');
-    });
-
-    it('should return undefined on failure', async () => {
-      axios.post.mockRejectedValue({ message: 'fail' });
-      const token = await getAuth0AuthToken('auth.domain', 'cid', 'secret');
-      expect(token).toBeUndefined();
-      expect(console.error).toHaveBeenCalledWith(
-        'Error fetching Auth0 token:',
-        'fail',
-      );
-    });
-  });
-
-  describe('cleanAndWritePropertiesFile', () => {
-    it('writes cleaned file content', async () => {
-      fs.writeFile.mockResolvedValue();
-      await cleanAndWritePropertiesFile('/tmp/test.properties', 'a=1\n\nb=2\n');
-      expect(fs.writeFile).toHaveBeenCalledWith(
-        '/tmp/test.properties',
-        'a=1\nb=2',
-        'utf8',
-      );
-    });
-
-    it('calls process.exit on write error', async () => {
-      fs.writeFile.mockRejectedValue(new Error('disk full'));
-      await cleanAndWritePropertiesFile('/bad/path', 'x=y');
-      expect(process.exit).toHaveBeenCalledWith(1);
-    });
-  });
-
-  describe('updateCoreSiteConfig', () => {
-    it('updates config when S3 is enabled', async () => {
-      config.getVaultSecretsConfigs.mockReturnValue({
-        awsSecretsPath: 'aws/path',
-      });
-
-      deploy.cloneRepository.mockResolvedValue('/repo/path');
-
-      vault.getVaultSecrets.mockResolvedValue({
-        AWS_ACCESS_KEY_ID: 'abc',
-        AWS_SECRET_ACCESS_KEY: 'def',
-        AWS_REGION: 'us-west-2',
-      });
-
-      fs.ensureDir.mockResolvedValue();
-      fs.writeFile.mockResolvedValue();
-      deploy.pushDeployConfig.mockResolvedValue();
-
-      await updateCoreSiteConfig('mysite', 'dev', true, false);
-
-      expect(fs.ensureDir).toHaveBeenCalledWith('/repo/path/MYSITE');
-      expect(fs.writeFile).toHaveBeenCalled();
-      expect(deploy.pushDeployConfig).toHaveBeenCalled();
-    });
-
-    it('calls process.exit if cloneRepository fails', async () => {
-      config.getVaultSecretsConfigs.mockReturnValue({
-        awsSecretsPath: 'aws/path',
-      });
-
-      deploy.cloneRepository.mockRejectedValue(new Error('bad clone'));
-
-      await updateCoreSiteConfig('mysite', 'dev', true, false);
-
-      expect(process.exit).toHaveBeenCalledWith(1);
-      expect(console.error).toHaveBeenCalledWith('Error:', 'bad clone');
-    });
-  });
-});

package/src/auth0/export.js

@@ -1,48 +0,0 @@
-import { getVaultSecrets } from './vault.js';
-import { getVaultSecretsConfigs } from '../next/config.js';
-import { dump } from 'auth0-deploy-cli';
-
-export async function exportConf(site, env, auth0Tenant) {
-  try {
-    console.log(
-      `Exporting Auth0 configuration for site: ${site} and env: ${env}`,
-    );
-
-    const siteCommonSecretsPath =
-      getVaultSecretsConfigs(site).siteCommonSecretsPath;
-    console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
-    const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
-
-    let auth0Domain;
-    if (auth0Tenant === '') {
-      auth0Domain = `docupace-${env}-${site}.us.auth0.com`;
-    } else {
-      auth0Domain = `${auth0Tenant}.us.auth0.com`;
-    }
-    const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
-    const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
-
-    const config = {
-      config: {
-        AUTH0_DOMAIN: auth0Domain,
-        AUTH0_CLIENT_ID: auth0ClientId,
-        AUTH0_CLIENT_SECRET: auth0ClientSecret,
-      },
-      format: 'directory',
-      output_folder: `./auth0-${site}-export`,
-      export_ids: false,
-      env: false,
-      debug: true,
-    };
-
-    console.log(`Starting Auth0 ${site} configuration export...`);
-    await dump(config);
-    console.log(`Auth0 ${site} configuration export completed successfully!`);
-  } catch (error) {
-    console.error(
-      `Error during Auth0 ${site} configuration export:`,
-      error.message,
-    );
-    process.exit(1);
-  }
-}

package/src/auth0/export.test.js

@@ -1,103 +0,0 @@
-// exportConf.test.js
-import { jest } from '@jest/globals';
-
-// Mock modules using ESM-safe methods
-jest.unstable_mockModule('./vault.js', () => ({
-  getVaultSecrets: jest.fn(),
-}));
-
-jest.unstable_mockModule('../next/config.js', () => ({
-  getVaultSecretsConfigs: jest.fn(),
-}));
-
-jest.unstable_mockModule('auth0-deploy-cli', () => ({
-  dump: jest.fn(),
-}));
-
-// Import the actual function and mocked dependencies after mocks are in place
-const { exportConf } = await import('./export.js');
-const { getVaultSecrets } = await import('./vault.js');
-const { getVaultSecretsConfigs } = await import('../next/config.js');
-const { dump } = await import('auth0-deploy-cli');
-
-describe('exportConf', () => {
-  const site = 'example';
-  const env = 'dev';
-  const auth0Tenant = '';
-
-  const mockSecrets = {
-    AUTH0_CLIENT_ID: 'test-client-id',
-    AUTH0_CLIENT_SECRET: 'test-client-secret',
-  };
-
-  const mockPath = 'vault/path/to/secrets';
-
-  beforeEach(() => {
-    jest.clearAllMocks();
-
-    getVaultSecretsConfigs.mockReturnValue({
-      siteCommonSecretsPath: mockPath,
-    });
-
-    getVaultSecrets.mockResolvedValue(mockSecrets);
-
-    dump.mockResolvedValue(undefined);
-  });
-
-  it('should export Auth0 configuration with default tenant format', async () => {
-    const logSpy = jest.spyOn(console, 'log').mockImplementation(() => {});
-    await exportConf(site, env, auth0Tenant);
-
-    expect(getVaultSecretsConfigs).toHaveBeenCalledWith(site);
-    expect(getVaultSecrets).toHaveBeenCalledWith(mockPath);
-    expect(dump).toHaveBeenCalledWith(
-      expect.objectContaining({
-        config: {
-          AUTH0_DOMAIN: 'docupace-dev-example.us.auth0.com',
-          AUTH0_CLIENT_ID: 'test-client-id',
-          AUTH0_CLIENT_SECRET: 'test-client-secret',
-        },
-      }),
-    );
-
-    logSpy.mockRestore();
-  });
-
-  it('should export Auth0 configuration with custom tenant', async () => {
-    const customTenant = 'custom-tenant';
-    await exportConf(site, env, customTenant);
-
-    expect(dump).toHaveBeenCalledWith(
-      expect.objectContaining({
-        config: {
-          AUTH0_DOMAIN: 'custom-tenant.us.auth0.com',
-          AUTH0_CLIENT_ID: 'test-client-id',
-          AUTH0_CLIENT_SECRET: 'test-client-secret',
-        },
-      }),
-    );
-  });
-
-  it('should log error and exit process on failure', async () => {
-    getVaultSecrets.mockRejectedValue(new Error('Vault error'));
-
-    const errorSpy = jest.spyOn(console, 'error').mockImplementation(() => {});
-    const exitSpy = jest.spyOn(process, 'exit').mockImplementation(() => {
-      throw new Error('process.exit');
-    });
-
-    await expect(exportConf(site, env, auth0Tenant)).rejects.toThrow(
-      'process.exit',
-    );
-
-    expect(errorSpy).toHaveBeenCalledWith(
-      expect.stringContaining(
-        'Error during Auth0 example configuration export:',
-      ),
-      'Vault error',
-    );
-
-    errorSpy.mockRestore();
-    exitSpy.mockRestore();
-  });
-});

package/src/auth0/metadata.js

@@ -1,141 +0,0 @@
-import fs from 'fs-extra';
-import axios from 'axios';
-import * as path from 'node:path'; // ESM-compatible import
-import { cloneRepository, pushDeployConfig } from '../next/deploy.js';
-import { getAuth0AuthToken } from './configure.js';
-import { getVaultSecrets } from './vault.js';
-import { getVaultSecretsConfigs } from '../next/config.js';
-
-export async function getAuth0Metadata(site, env, auth0Tenant, jiraTicket) {
-  try {
-    const connectDeployRepoPath = await cloneRepository('connect-deploy');
-
-    const envMap = {
-      dev: 'dev',
-      preprod: 'qa',
-      stage: 'stage',
-      uat: 'uat',
-      'prod-www3': 'prod',
-      'prod-lax': 'prod',
-      'prod-las': 'prod',
-    };
-
-    process.chdir(`${connectDeployRepoPath}/envs/${env}/${site}`);
-
-    const configPath = path.join('conf', 'application.conf');
-    const appConf = await fs.readFile(configPath, 'utf-8');
-
-    const connectContext = appConf.match(
-      /application\.context\s*=\s*"(.*?)"/,
-    )?.[1];
-    if (!connectContext) {
-      console.error('connectContext not found in application.conf. Exiting...');
-      process.exit(1);
-    }
-
-    const siteHost = appConf.match(
-      /docupace\.baseUrlClient\s*=\s*"?https?:\/\/([^/]+)"?/,
-    )?.[1];
-    if (!siteHost) {
-      console.error('siteHost not found in application.conf. Exiting...');
-      process.exit(1);
-    }
-
-    const connectEndpoint = `https://${siteHost}${connectContext}`;
-    console.log('CONNECT_ENDPOINT:', connectEndpoint);
-
-    console.log('Requesting token from Auth0...');
-    const siteCommonSecretsPath =
-      getVaultSecretsConfigs(site).siteCommonSecretsPath;
-    console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
-
-    const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
-
-    const auth0Domain =
-      auth0Tenant === ''
-        ? `docupace-${envMap[env]}-${site}.us.auth0.com`
-        : `${auth0Tenant}.us.auth0.com`;
-
-    const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
-    const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
-
-    const auth0Token = await getAuth0AuthToken(
-      auth0Domain,
-      auth0ClientId,
-      auth0ClientSecret,
-    );
-
-    const auth0Response = await axios.get(
-      `https://${auth0Domain}/api/v2/clients`,
-      {
-        headers: { authorization: `Bearer ${auth0Token}` },
-      },
-    );
-
-    const connectClient = auth0Response.data.find(
-      (client) => client.name === 'docupace-connect',
-    );
-
-    if (!connectClient) {
-      console.error('Client "docupace-connect" not found.');
-      process.exit(1);
-    }
-
-    const clientId = connectClient.client_id;
-    console.log('Found client_id:', clientId);
-
-    const metadataRes = await axios.get(
-      `https://${auth0Domain}/samlp/metadata/${clientId}`,
-      { responseType: 'text' },
-    );
-
-    const metadata = metadataRes.data;
-
-    if (metadata.length < 2000) {
-      console.error(
-        'Downloaded metadata looks incorrect (too small). Exiting...',
-      );
-      process.exit(1);
-    }
-
-    await fs.ensureDir('conf/saml');
-    await fs.writeFile('conf/saml/auth0.xml', metadata);
-    console.log('SAML metadata written to conf/saml/auth0.xml');
-
-    let newConfig = appConf;
-
-    if (/useSAML\s*=/.test(appConf)) {
-      newConfig = newConfig.replace(/useSAML\s*=.*/, 'useSAML=true');
-    } else {
-      newConfig += '\nuseSAML=true';
-    }
-
-    const replacements = {
-      'saml.clients.auth0.idpMetadataPath': '${samlEnvPath}"/auth0.xml"',
-      'saml.clients.auth0.spEntityId': `"${connectEndpoint}"`,
-      'saml.clients.auth0.redirectFormInput': '"RelayState"',
-      'saml.clients.auth0.idpLoginUrl': `"https://${auth0Domain}/v2/logout?client_id=${clientId}&returnTo=${connectEndpoint}"`,
-    };
-
-    for (const [key, value] of Object.entries(replacements)) {
-      const pattern = new RegExp(`${key}\\s*=.*`, 'g');
-      if (pattern.test(newConfig)) {
-        newConfig = newConfig.replace(pattern, `${key}=${value}`);
-      } else {
-        newConfig += `\n${key}=${value}`;
-      }
-    }
-
-    await fs.writeFile(configPath, newConfig);
-    console.log('The application.conf has been updated.');
-
-    const commitMessage = jiraTicket
-      ? `${jiraTicket} Auth0 SAML metadata update for site: (${site}) in env: (${env})`
-      : `Auth0 SAML metadata update for site: (${site}) in env: (${env})`;
-    console.log('Commit message:', commitMessage);
-    await pushDeployConfig(connectDeployRepoPath, commitMessage);
-  } catch (error) {
-    console.error('Error:', error.message);
-    process.exit(1);
-  }
-}

package/src/auth0/metadata.test.js

@@ -1,186 +0,0 @@
-import { jest } from '@jest/globals';
-
-// ----- Mocks (ESM-safe) -----
-jest.unstable_mockModule('fs-extra', () => ({
-  default: {
-    readFile: jest.fn(),
-    writeFile: jest.fn(),
-    ensureDir: jest.fn(),
-  },
-}));
-
-jest.unstable_mockModule('axios', () => ({
-  default: {
-    get: jest.fn(),
-  },
-}));
-
-jest.unstable_mockModule('path', () => ({
-  join: jest.fn((...args) => args.join('/')),
-}));
-
-jest.unstable_mockModule('../next/deploy.js', () => ({
-  cloneRepository: jest.fn(),
-  pushDeployConfig: jest.fn(),
-}));
-
-jest.unstable_mockModule('./configure.js', () => ({
-  getAuth0AuthToken: jest.fn(),
-}));
-
-jest.unstable_mockModule('./vault.js', () => ({
-  getVaultSecrets: jest.fn(),
-}));
-
-jest.unstable_mockModule('../next/config.js', () => ({
-  getVaultSecretsConfigs: jest.fn(),
-}));
-
-// ----- Imports AFTER mocks -----
-const { getAuth0Metadata } = await import('./metadata.js');
-const fs = (await import('fs-extra')).default;
-const axios = (await import('axios')).default;
-const { cloneRepository, pushDeployConfig } = await import('../next/deploy.js');
-const { getAuth0AuthToken } = await import('./configure.js');
-const { getVaultSecrets } = await import('./vault.js');
-const { getVaultSecretsConfigs } = await import('../next/config.js');
-
-// ----- Shared Setup -----
-beforeAll(() => {
-  jest.spyOn(console, 'log').mockImplementation(() => {});
-  jest.spyOn(console, 'error').mockImplementation(() => {});
-});
-
-afterAll(() => {
-  console.log.mockRestore();
-  console.error.mockRestore();
-});
-
-describe('getAuth0Metadata', () => {
-  const site = 'example';
-  const env = 'dev';
-  const auth0Tenant = '';
-  const fakeRepoPath = '/tmp/repo';
-  const fakeAppConf = `
-    application.context = "/connect"
-    docupace.baseUrlClient = "https://example.docupace.com"
-  `;
-
-  const mockSecrets = {
-    AUTH0_CLIENT_ID: 'client-id',
-    AUTH0_CLIENT_SECRET: 'client-secret',
-  };
-
-  const auth0Token = 'fake-token';
-  const clientId = 'abc123';
-  const fakeMetadata = '<xml>'.padEnd(2500, 'a') + '</xml>';
-
-  let originalChdir;
-  let exitSpy;
-
-  beforeEach(() => {
-    jest.clearAllMocks();
-    axios.get.mockReset();
-
-    cloneRepository.mockResolvedValue(fakeRepoPath);
-    getVaultSecretsConfigs.mockReturnValue({
-      siteCommonSecretsPath: 'vault/path',
-    });
-    getVaultSecrets.mockResolvedValue(mockSecrets);
-    getAuth0AuthToken.mockResolvedValue(auth0Token);
-    fs.readFile.mockResolvedValue(fakeAppConf);
-    fs.writeFile.mockResolvedValue();
-    fs.ensureDir.mockResolvedValue();
-    pushDeployConfig.mockResolvedValue();
-
-    originalChdir = process.chdir;
-    process.chdir = jest.fn();
-
-    exitSpy = jest.spyOn(process, 'exit').mockImplementation(() => {});
-  });
-
-  afterEach(() => {
-    process.chdir = originalChdir;
-    exitSpy.mockRestore();
-  });
-
-  it('should download and write metadata, update config, and push changes', async () => {
-    axios.get
-      .mockResolvedValueOnce({
-        data: [{ name: 'docupace-connect', client_id: clientId }],
-      }) // clients
-      .mockResolvedValueOnce({ data: fakeMetadata }); // metadata
-
-    await getAuth0Metadata(site, env, auth0Tenant);
-
-    expect(cloneRepository).toHaveBeenCalledWith('connect-deploy');
-    expect(fs.readFile).toHaveBeenCalledWith('conf/application.conf', 'utf-8');
-    expect(fs.ensureDir).toHaveBeenCalledWith('conf/saml');
-    expect(fs.writeFile).toHaveBeenCalledWith(
-      'conf/saml/auth0.xml',
-      expect.stringContaining('<xml'),
-    );
-    expect(fs.writeFile).toHaveBeenCalledWith(
-      'conf/application.conf',
-      expect.stringContaining('useSAML=true'),
-    );
-    expect(pushDeployConfig).toHaveBeenCalled();
-  });
-
-  it('should exit if docupace-connect client is not found', async () => {
-    axios.get.mockResolvedValueOnce({ data: [] }); // empty clients
-
-    await getAuth0Metadata(site, env, auth0Tenant);
-
-    expect(process.exit).toHaveBeenCalledWith(1);
-    expect(console.error).toHaveBeenCalledWith(
-      'Client "docupace-connect" not found.',
-    );
-  });
-
-  it('should exit if metadata is too small', async () => {
-    axios.get
-      .mockResolvedValueOnce({
-        data: [{ name: 'docupace-connect', client_id: clientId }],
-      }) // clients
-      .mockResolvedValueOnce({ data: '<small>' }); // small metadata
-
-    await getAuth0Metadata(site, env, auth0Tenant);
-
-    expect(process.exit).toHaveBeenCalledWith(1);
-    expect(console.error).toHaveBeenCalledWith(
-      'Downloaded metadata looks incorrect (too small). Exiting...',
-    );
-  });
-
-  it('should exit if connectContext is missing', async () => {
-    fs.readFile.mockResolvedValue(`docupace.baseUrlClient = "https://abc.com"`); // no context
-
-    await getAuth0Metadata(site, env, auth0Tenant);
-
-    expect(process.exit).toHaveBeenCalledWith(1);
-    expect(console.error).toHaveBeenCalledWith(
-      'connectContext not found in application.conf. Exiting...',
-    );
-  });
-
-  it('should exit if siteHost is missing', async () => {
-    fs.readFile.mockResolvedValue(`application.context = "/abc"`); // no host
-
-    await getAuth0Metadata(site, env, auth0Tenant);
-
-    expect(process.exit).toHaveBeenCalledWith(1);
-    expect(console.error).toHaveBeenCalledWith(
-      'siteHost not found in application.conf. Exiting...',
-    );
-  });
-
-  it('should exit on unknown error', async () => {
-    getVaultSecrets.mockRejectedValue(new Error('boom'));
-
-    await getAuth0Metadata(site, env, auth0Tenant);
-
-    expect(process.exit).toHaveBeenCalledWith(1);
-    expect(console.error).toHaveBeenCalledWith('Error:', 'boom');
-  });
-});