@docupace/pipeline 1.0.77 → 1.0.79

package/src/auth0/metadata.js

@@ -1,141 +1,141 @@
-import fs from 'fs-extra';
-import axios from 'axios';
-import * as path from 'node:path'; // ESM-compatible import
-import { cloneRepository, pushDeployConfig } from '../next/deploy.js';
-import { getAuth0AuthToken } from './configure.js';
-import { getVaultSecrets } from './vault.js';
-import { getVaultSecretsConfigs } from '../next/config.js';
-
-export async function getAuth0Metadata(site, env, auth0Tenant, jiraTicket) {
-  try {
-    const connectDeployRepoPath = await cloneRepository('connect-deploy');
-
-    const envMap = {
-      dev: 'dev',
-      preprod: 'qa',
-      stage: 'stage',
-      uat: 'uat',
-      'prod-www3': 'prod',
-      'prod-lax': 'prod',
-      'prod-las': 'prod',
-    };
-
-    process.chdir(`${connectDeployRepoPath}/envs/${env}/${site}`);
-
-    const configPath = path.join('conf', 'application.conf');
-    const appConf = await fs.readFile(configPath, 'utf-8');
-
-    const connectContext = appConf.match(
-      /application\.context\s*=\s*"(.*?)"/,
-    )?.[1];
-    if (!connectContext) {
-      console.error('connectContext not found in application.conf. Exiting...');
-      process.exit(1);
-    }
-
-    const siteHost = appConf.match(
-      /docupace\.baseUrlClient\s*=\s*"?https?:\/\/([^/]+)"?/,
-    )?.[1];
-    if (!siteHost) {
-      console.error('siteHost not found in application.conf. Exiting...');
-      process.exit(1);
-    }
-
-    const connectEndpoint = `https://${siteHost}${connectContext}`;
-    console.log('CONNECT_ENDPOINT:', connectEndpoint);
-
-    console.log('Requesting token from Auth0...');
-    const siteCommonSecretsPath =
-      getVaultSecretsConfigs(site).siteCommonSecretsPath;
-    console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
-
-    const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
-
-    const auth0Domain =
-      auth0Tenant === ''
-        ? `docupace-${envMap[env]}-${site}.us.auth0.com`
-        : `${auth0Tenant}.us.auth0.com`;
-
-    const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
-    const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
-
-    const auth0Token = await getAuth0AuthToken(
-      auth0Domain,
-      auth0ClientId,
-      auth0ClientSecret,
-    );
-
-    const auth0Response = await axios.get(
-      `https://${auth0Domain}/api/v2/clients`,
-      {
-        headers: { authorization: `Bearer ${auth0Token}` },
-      },
-    );
-
-    const connectClient = auth0Response.data.find(
-      (client) => client.name === 'docupace-connect',
-    );
-
-    if (!connectClient) {
-      console.error('Client "docupace-connect" not found.');
-      process.exit(1);
-    }
-
-    const clientId = connectClient.client_id;
-    console.log('Found client_id:', clientId);
-
-    const metadataRes = await axios.get(
-      `https://${auth0Domain}/samlp/metadata/${clientId}`,
-      { responseType: 'text' },
-    );
-
-    const metadata = metadataRes.data;
-
-    if (metadata.length < 2000) {
-      console.error(
-        'Downloaded metadata looks incorrect (too small). Exiting...',
-      );
-      process.exit(1);
-    }
-
-    await fs.ensureDir('conf/saml');
-    await fs.writeFile('conf/saml/auth0.xml', metadata);
-    console.log('SAML metadata written to conf/saml/auth0.xml');
-
-    let newConfig = appConf;
-
-    if (/useSAML\s*=/.test(appConf)) {
-      newConfig = newConfig.replace(/useSAML\s*=.*/, 'useSAML=true');
-    } else {
-      newConfig += '\nuseSAML=true';
-    }
-
-    const replacements = {
-      'saml.clients.auth0.idpMetadataPath': '${samlEnvPath}"/auth0.xml"',
-      'saml.clients.auth0.spEntityId': `"${connectEndpoint}"`,
-      'saml.clients.auth0.redirectFormInput': '"RelayState"',
-      'saml.clients.auth0.idpLoginUrl': `"https://${auth0Domain}/v2/logout?client_id=${clientId}&returnTo=${connectEndpoint}"`,
-    };
-
-    for (const [key, value] of Object.entries(replacements)) {
-      const pattern = new RegExp(`${key}\\s*=.*`, 'g');
-      if (pattern.test(newConfig)) {
-        newConfig = newConfig.replace(pattern, `${key}=${value}`);
-      } else {
-        newConfig += `\n${key}=${value}`;
-      }
-    }
-
-    await fs.writeFile(configPath, newConfig);
-    console.log('The application.conf has been updated.');
-
-    const commitMessage = jiraTicket
-      ? `${jiraTicket} Auth0 SAML metadata update for site: (${site}) in env: (${env})`
-      : `Auth0 SAML metadata update for site: (${site}) in env: (${env})`;
-    console.log('Commit message:', commitMessage);
-    await pushDeployConfig(connectDeployRepoPath, commitMessage);
-  } catch (error) {
-    console.error('Error:', error.message);
-    process.exit(1);
-  }
-}
+import fs from 'fs-extra';
+import axios from 'axios';
+import * as path from 'node:path'; // ESM-compatible import
+import { cloneRepository, pushDeployConfig } from '../next/deploy.js';
+import { getAuth0AuthToken } from './configure.js';
+import { getVaultSecrets } from './vault.js';
+import { getVaultSecretsConfigs } from '../next/config.js';
+
+export async function getAuth0Metadata(site, env, auth0Tenant, jiraTicket) {
+  try {
+    const connectDeployRepoPath = await cloneRepository('connect-deploy');
+
+    const envMap = {
+      dev: 'dev',
+      preprod: 'qa',
+      stage: 'stage',
+      uat: 'uat',
+      'prod-www3': 'prod',
+      'prod-lax': 'prod',
+      'prod-las': 'prod',
+    };
+
+    process.chdir(`${connectDeployRepoPath}/envs/${env}/${site}`);
+
+    const configPath = path.join('conf', 'application.conf');
+    const appConf = await fs.readFile(configPath, 'utf-8');
+
+    const connectContext = appConf.match(
+      /application\.context\s*=\s*"(.*?)"/,
+    )?.[1];
+    if (!connectContext) {
+      console.error('connectContext not found in application.conf. Exiting...');
+      process.exit(1);
+    }
+
+    const siteHost = appConf.match(
+      /docupace\.baseUrlClient\s*=\s*"?https?:\/\/([^/]+)"?/,
+    )?.[1];
+    if (!siteHost) {
+      console.error('siteHost not found in application.conf. Exiting...');
+      process.exit(1);
+    }
+
+    const connectEndpoint = `https://${siteHost}${connectContext}`;
+    console.log('CONNECT_ENDPOINT:', connectEndpoint);
+
+    console.log('Requesting token from Auth0...');
+    const siteCommonSecretsPath =
+      getVaultSecretsConfigs(site).siteCommonSecretsPath;
+    console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
+
+    const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
+
+    const auth0Domain =
+      auth0Tenant === ''
+        ? `docupace-${envMap[env]}-${site}.us.auth0.com`
+        : `${auth0Tenant}.us.auth0.com`;
+
+    const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
+    const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
+
+    const auth0Token = await getAuth0AuthToken(
+      auth0Domain,
+      auth0ClientId,
+      auth0ClientSecret,
+    );
+
+    const auth0Response = await axios.get(
+      `https://${auth0Domain}/api/v2/clients`,
+      {
+        headers: { authorization: `Bearer ${auth0Token}` },
+      },
+    );
+
+    const connectClient = auth0Response.data.find(
+      (client) => client.name === 'docupace-connect',
+    );
+
+    if (!connectClient) {
+      console.error('Client "docupace-connect" not found.');
+      process.exit(1);
+    }
+
+    const clientId = connectClient.client_id;
+    console.log('Found client_id:', clientId);
+
+    const metadataRes = await axios.get(
+      `https://${auth0Domain}/samlp/metadata/${clientId}`,
+      { responseType: 'text' },
+    );
+
+    const metadata = metadataRes.data;
+
+    if (metadata.length < 2000) {
+      console.error(
+        'Downloaded metadata looks incorrect (too small). Exiting...',
+      );
+      process.exit(1);
+    }
+
+    await fs.ensureDir('conf/saml');
+    await fs.writeFile('conf/saml/auth0.xml', metadata);
+    console.log('SAML metadata written to conf/saml/auth0.xml');
+
+    let newConfig = appConf;
+
+    if (/useSAML\s*=/.test(appConf)) {
+      newConfig = newConfig.replace(/useSAML\s*=.*/, 'useSAML=true');
+    } else {
+      newConfig += '\nuseSAML=true';
+    }
+
+    const replacements = {
+      'saml.clients.auth0.idpMetadataPath': '${samlEnvPath}"/auth0.xml"',
+      'saml.clients.auth0.spEntityId': `"${connectEndpoint}"`,
+      'saml.clients.auth0.redirectFormInput': '"RelayState"',
+      'saml.clients.auth0.idpLoginUrl': `"https://${auth0Domain}/v2/logout?client_id=${clientId}&returnTo=${connectEndpoint}"`,
+    };
+
+    for (const [key, value] of Object.entries(replacements)) {
+      const pattern = new RegExp(`${key}\\s*=.*`, 'g');
+      if (pattern.test(newConfig)) {
+        newConfig = newConfig.replace(pattern, `${key}=${value}`);
+      } else {
+        newConfig += `\n${key}=${value}`;
+      }
+    }
+
+    await fs.writeFile(configPath, newConfig);
+    console.log('The application.conf has been updated.');
+
+    const commitMessage = jiraTicket
+      ? `${jiraTicket} Auth0 SAML metadata update for site: (${site}) in env: (${env})`
+      : `Auth0 SAML metadata update for site: (${site}) in env: (${env})`;
+    console.log('Commit message:', commitMessage);
+    await pushDeployConfig(connectDeployRepoPath, commitMessage);
+  } catch (error) {
+    console.error('Error:', error.message);
+    process.exit(1);
+  }
+}

package/src/auth0/metadata.test.js

@@ -1,186 +1,186 @@
-import { jest } from '@jest/globals';
-
-// ----- Mocks (ESM-safe) -----
-jest.unstable_mockModule('fs-extra', () => ({
-  default: {
-    readFile: jest.fn(),
-    writeFile: jest.fn(),
-    ensureDir: jest.fn(),
-  },
-}));
-
-jest.unstable_mockModule('axios', () => ({
-  default: {
-    get: jest.fn(),
-  },
-}));
-
-jest.unstable_mockModule('path', () => ({
-  join: jest.fn((...args) => args.join('/')),
-}));
-
-jest.unstable_mockModule('../next/deploy.js', () => ({
-  cloneRepository: jest.fn(),
-  pushDeployConfig: jest.fn(),
-}));
-
-jest.unstable_mockModule('./configure.js', () => ({
-  getAuth0AuthToken: jest.fn(),
-}));
-
-jest.unstable_mockModule('./vault.js', () => ({
-  getVaultSecrets: jest.fn(),
-}));
-
-jest.unstable_mockModule('../next/config.js', () => ({
-  getVaultSecretsConfigs: jest.fn(),
-}));
-
-// ----- Imports AFTER mocks -----
-const { getAuth0Metadata } = await import('./metadata.js');
-const fs = (await import('fs-extra')).default;
-const axios = (await import('axios')).default;
-const { cloneRepository, pushDeployConfig } = await import('../next/deploy.js');
-const { getAuth0AuthToken } = await import('./configure.js');
-const { getVaultSecrets } = await import('./vault.js');
-const { getVaultSecretsConfigs } = await import('../next/config.js');
-
-// ----- Shared Setup -----
-beforeAll(() => {
-  jest.spyOn(console, 'log').mockImplementation(() => {});
-  jest.spyOn(console, 'error').mockImplementation(() => {});
-});
-
-afterAll(() => {
-  console.log.mockRestore();
-  console.error.mockRestore();
-});
-
-describe('getAuth0Metadata', () => {
-  const site = 'example';
-  const env = 'dev';
-  const auth0Tenant = '';
-  const fakeRepoPath = '/tmp/repo';
-  const fakeAppConf = `
-    application.context = "/connect"
-    docupace.baseUrlClient = "https://example.docupace.com"
-  `;
-
-  const mockSecrets = {
-    AUTH0_CLIENT_ID: 'client-id',
-    AUTH0_CLIENT_SECRET: 'client-secret',
-  };
-
-  const auth0Token = 'fake-token';
-  const clientId = 'abc123';
-  const fakeMetadata = '<xml>'.padEnd(2500, 'a') + '</xml>';
-
-  let originalChdir;
-  let exitSpy;
-
-  beforeEach(() => {
-    jest.clearAllMocks();
-    axios.get.mockReset();
-
-    cloneRepository.mockResolvedValue(fakeRepoPath);
-    getVaultSecretsConfigs.mockReturnValue({
-      siteCommonSecretsPath: 'vault/path',
-    });
-    getVaultSecrets.mockResolvedValue(mockSecrets);
-    getAuth0AuthToken.mockResolvedValue(auth0Token);
-    fs.readFile.mockResolvedValue(fakeAppConf);
-    fs.writeFile.mockResolvedValue();
-    fs.ensureDir.mockResolvedValue();
-    pushDeployConfig.mockResolvedValue();
-
-    originalChdir = process.chdir;
-    process.chdir = jest.fn();
-
-    exitSpy = jest.spyOn(process, 'exit').mockImplementation(() => {});
-  });
-
-  afterEach(() => {
-    process.chdir = originalChdir;
-    exitSpy.mockRestore();
-  });
-
-  it('should download and write metadata, update config, and push changes', async () => {
-    axios.get
-      .mockResolvedValueOnce({
-        data: [{ name: 'docupace-connect', client_id: clientId }],
-      }) // clients
-      .mockResolvedValueOnce({ data: fakeMetadata }); // metadata
-
-    await getAuth0Metadata(site, env, auth0Tenant);
-
-    expect(cloneRepository).toHaveBeenCalledWith('connect-deploy');
-    expect(fs.readFile).toHaveBeenCalledWith('conf/application.conf', 'utf-8');
-    expect(fs.ensureDir).toHaveBeenCalledWith('conf/saml');
-    expect(fs.writeFile).toHaveBeenCalledWith(
-      'conf/saml/auth0.xml',
-      expect.stringContaining('<xml'),
-    );
-    expect(fs.writeFile).toHaveBeenCalledWith(
-      'conf/application.conf',
-      expect.stringContaining('useSAML=true'),
-    );
-    expect(pushDeployConfig).toHaveBeenCalled();
-  });
-
-  it('should exit if docupace-connect client is not found', async () => {
-    axios.get.mockResolvedValueOnce({ data: [] }); // empty clients
-
-    await getAuth0Metadata(site, env, auth0Tenant);
-
-    expect(process.exit).toHaveBeenCalledWith(1);
-    expect(console.error).toHaveBeenCalledWith(
-      'Client "docupace-connect" not found.',
-    );
-  });
-
-  it('should exit if metadata is too small', async () => {
-    axios.get
-      .mockResolvedValueOnce({
-        data: [{ name: 'docupace-connect', client_id: clientId }],
-      }) // clients
-      .mockResolvedValueOnce({ data: '<small>' }); // small metadata
-
-    await getAuth0Metadata(site, env, auth0Tenant);
-
-    expect(process.exit).toHaveBeenCalledWith(1);
-    expect(console.error).toHaveBeenCalledWith(
-      'Downloaded metadata looks incorrect (too small). Exiting...',
-    );
-  });
-
-  it('should exit if connectContext is missing', async () => {
-    fs.readFile.mockResolvedValue(`docupace.baseUrlClient = "https://abc.com"`); // no context
-
-    await getAuth0Metadata(site, env, auth0Tenant);
-
-    expect(process.exit).toHaveBeenCalledWith(1);
-    expect(console.error).toHaveBeenCalledWith(
-      'connectContext not found in application.conf. Exiting...',
-    );
-  });
-
-  it('should exit if siteHost is missing', async () => {
-    fs.readFile.mockResolvedValue(`application.context = "/abc"`); // no host
-
-    await getAuth0Metadata(site, env, auth0Tenant);
-
-    expect(process.exit).toHaveBeenCalledWith(1);
-    expect(console.error).toHaveBeenCalledWith(
-      'siteHost not found in application.conf. Exiting...',
-    );
-  });
-
-  it('should exit on unknown error', async () => {
-    getVaultSecrets.mockRejectedValue(new Error('boom'));
-
-    await getAuth0Metadata(site, env, auth0Tenant);
-
-    expect(process.exit).toHaveBeenCalledWith(1);
-    expect(console.error).toHaveBeenCalledWith('Error:', 'boom');
-  });
-});
+import { jest } from '@jest/globals';
+
+// ----- Mocks (ESM-safe) -----
+jest.unstable_mockModule('fs-extra', () => ({
+  default: {
+    readFile: jest.fn(),
+    writeFile: jest.fn(),
+    ensureDir: jest.fn(),
+  },
+}));
+
+jest.unstable_mockModule('axios', () => ({
+  default: {
+    get: jest.fn(),
+  },
+}));
+
+jest.unstable_mockModule('path', () => ({
+  join: jest.fn((...args) => args.join('/')),
+}));
+
+jest.unstable_mockModule('../next/deploy.js', () => ({
+  cloneRepository: jest.fn(),
+  pushDeployConfig: jest.fn(),
+}));
+
+jest.unstable_mockModule('./configure.js', () => ({
+  getAuth0AuthToken: jest.fn(),
+}));
+
+jest.unstable_mockModule('./vault.js', () => ({
+  getVaultSecrets: jest.fn(),
+}));
+
+jest.unstable_mockModule('../next/config.js', () => ({
+  getVaultSecretsConfigs: jest.fn(),
+}));
+
+// ----- Imports AFTER mocks -----
+const { getAuth0Metadata } = await import('./metadata.js');
+const fs = (await import('fs-extra')).default;
+const axios = (await import('axios')).default;
+const { cloneRepository, pushDeployConfig } = await import('../next/deploy.js');
+const { getAuth0AuthToken } = await import('./configure.js');
+const { getVaultSecrets } = await import('./vault.js');
+const { getVaultSecretsConfigs } = await import('../next/config.js');
+
+// ----- Shared Setup -----
+beforeAll(() => {
+  jest.spyOn(console, 'log').mockImplementation(() => {});
+  jest.spyOn(console, 'error').mockImplementation(() => {});
+});
+
+afterAll(() => {
+  console.log.mockRestore();
+  console.error.mockRestore();
+});
+
+describe('getAuth0Metadata', () => {
+  const site = 'example';
+  const env = 'dev';
+  const auth0Tenant = '';
+  const fakeRepoPath = '/tmp/repo';
+  const fakeAppConf = `
+    application.context = "/connect"
+    docupace.baseUrlClient = "https://example.docupace.com"
+  `;
+
+  const mockSecrets = {
+    AUTH0_CLIENT_ID: 'client-id',
+    AUTH0_CLIENT_SECRET: 'client-secret',
+  };
+
+  const auth0Token = 'fake-token';
+  const clientId = 'abc123';
+  const fakeMetadata = '<xml>'.padEnd(2500, 'a') + '</xml>';
+
+  let originalChdir;
+  let exitSpy;
+
+  beforeEach(() => {
+    jest.clearAllMocks();
+    axios.get.mockReset();
+
+    cloneRepository.mockResolvedValue(fakeRepoPath);
+    getVaultSecretsConfigs.mockReturnValue({
+      siteCommonSecretsPath: 'vault/path',
+    });
+    getVaultSecrets.mockResolvedValue(mockSecrets);
+    getAuth0AuthToken.mockResolvedValue(auth0Token);
+    fs.readFile.mockResolvedValue(fakeAppConf);
+    fs.writeFile.mockResolvedValue();
+    fs.ensureDir.mockResolvedValue();
+    pushDeployConfig.mockResolvedValue();
+
+    originalChdir = process.chdir;
+    process.chdir = jest.fn();
+
+    exitSpy = jest.spyOn(process, 'exit').mockImplementation(() => {});
+  });
+
+  afterEach(() => {
+    process.chdir = originalChdir;
+    exitSpy.mockRestore();
+  });
+
+  it('should download and write metadata, update config, and push changes', async () => {
+    axios.get
+      .mockResolvedValueOnce({
+        data: [{ name: 'docupace-connect', client_id: clientId }],
+      }) // clients
+      .mockResolvedValueOnce({ data: fakeMetadata }); // metadata
+
+    await getAuth0Metadata(site, env, auth0Tenant);
+
+    expect(cloneRepository).toHaveBeenCalledWith('connect-deploy');
+    expect(fs.readFile).toHaveBeenCalledWith('conf/application.conf', 'utf-8');
+    expect(fs.ensureDir).toHaveBeenCalledWith('conf/saml');
+    expect(fs.writeFile).toHaveBeenCalledWith(
+      'conf/saml/auth0.xml',
+      expect.stringContaining('<xml'),
+    );
+    expect(fs.writeFile).toHaveBeenCalledWith(
+      'conf/application.conf',
+      expect.stringContaining('useSAML=true'),
+    );
+    expect(pushDeployConfig).toHaveBeenCalled();
+  });
+
+  it('should exit if docupace-connect client is not found', async () => {
+    axios.get.mockResolvedValueOnce({ data: [] }); // empty clients
+
+    await getAuth0Metadata(site, env, auth0Tenant);
+
+    expect(process.exit).toHaveBeenCalledWith(1);
+    expect(console.error).toHaveBeenCalledWith(
+      'Client "docupace-connect" not found.',
+    );
+  });
+
+  it('should exit if metadata is too small', async () => {
+    axios.get
+      .mockResolvedValueOnce({
+        data: [{ name: 'docupace-connect', client_id: clientId }],
+      }) // clients
+      .mockResolvedValueOnce({ data: '<small>' }); // small metadata
+
+    await getAuth0Metadata(site, env, auth0Tenant);
+
+    expect(process.exit).toHaveBeenCalledWith(1);
+    expect(console.error).toHaveBeenCalledWith(
+      'Downloaded metadata looks incorrect (too small). Exiting...',
+    );
+  });
+
+  it('should exit if connectContext is missing', async () => {
+    fs.readFile.mockResolvedValue(`docupace.baseUrlClient = "https://abc.com"`); // no context
+
+    await getAuth0Metadata(site, env, auth0Tenant);
+
+    expect(process.exit).toHaveBeenCalledWith(1);
+    expect(console.error).toHaveBeenCalledWith(
+      'connectContext not found in application.conf. Exiting...',
+    );
+  });
+
+  it('should exit if siteHost is missing', async () => {
+    fs.readFile.mockResolvedValue(`application.context = "/abc"`); // no host
+
+    await getAuth0Metadata(site, env, auth0Tenant);
+
+    expect(process.exit).toHaveBeenCalledWith(1);
+    expect(console.error).toHaveBeenCalledWith(
+      'siteHost not found in application.conf. Exiting...',
+    );
+  });
+
+  it('should exit on unknown error', async () => {
+    getVaultSecrets.mockRejectedValue(new Error('boom'));
+
+    await getAuth0Metadata(site, env, auth0Tenant);
+
+    expect(process.exit).toHaveBeenCalledWith(1);
+    expect(console.error).toHaveBeenCalledWith('Error:', 'boom');
+  });
+});