@freshworks/shiftleft-tools 1.1.8

package/templates/postman-node/scripts/lib/fetch-jwt.sh

@@ -0,0 +1,86 @@
+#!/bin/bash
+# JWT fetching - environment-aware
+
+fetch_jwt() {
+    local config_file="$1"
+    local auth_type=$(jq -r '.auth.type' "$config_file")
+    local env_name=$(jq -r '.environment' "$config_file")
+    
+    case "$auth_type" in
+        "local")
+            log_info "Generating JWT (local mode)"
+            cd "$PROJECT_ROOT"
+            "$SCRIPT_DIR/auth/generate-jwt.sh" local local > /dev/null 2>&1
+            
+            # Read token from updated environment file
+            local env_file="$POSTMAN_DIR/environments/local.postman_environment.json"
+            local token=$(jq -r '.values[] | select(.key=="auth_token") | .value' "$env_file")
+            echo "$token"
+            ;;
+            
+        "aws")
+            log_info "Fetching secret from AWS Secrets Manager"
+            
+            local secret_name=$(jq -r '.auth.aws.secretName' "$config_file")
+            local client=$(jq -r '.auth.aws.client' "$config_file")
+            local region=$(jq -r '.auth.aws.region' "$config_file")
+            local aws_profile=$(jq -r '.auth.aws.profile // empty' "$config_file")
+            
+            # Set AWS profile if specified in config (unless already set by user)
+            if [ -n "$aws_profile" ] && [ -z "${AWS_PROFILE:-}" ]; then
+                export AWS_PROFILE="$aws_profile"
+                log_info "Using AWS profile: $aws_profile"
+            elif [ -n "${AWS_PROFILE:-}" ]; then
+                log_info "Using AWS profile from environment: $AWS_PROFILE"
+            else
+                log_info "Using default AWS credentials (IAM role)"
+            fi
+            
+            # Fetch secrets
+            set +e
+            SCRIPT_OUTPUT=$("$SCRIPT_DIR/auth/get-issuer-secret.sh" "$secret_name" "$client" "$region" 2>&1)
+            EXIT_CODE=$?
+            set -e
+            
+            if [ $EXIT_CODE -ne 0 ]; then
+                error "Failed to fetch AWS secret"
+                echo "$SCRIPT_OUTPUT" >&2
+                exit 1
+            fi
+            
+            # Extract both secrets from output (format: KEY=value)
+            ISSUER_SECRET=$(echo "$SCRIPT_OUTPUT" | grep "^PRIMARY_SECRET=" | cut -d'=' -f2-)
+            ISSUER_SECRET_SECONDARY=$(echo "$SCRIPT_OUTPUT" | grep "^SECONDARY_SECRET=" | cut -d'=' -f2-)
+            
+            if [ -z "$ISSUER_SECRET" ]; then
+                error "Failed to parse primary secret from AWS"
+                echo "$SCRIPT_OUTPUT" >&2
+                exit 1
+            fi
+            
+            log_info "Generating JWT with AWS secrets"
+            
+            # Export both secrets - generate-jwt.sh reads all other config from the config file
+            export ISSUER_SECRET
+            export ISSUER_SECRET_SECONDARY
+            
+            # Generate JWT using shell script and update environment file
+            # The script reads user-specific config from config/{env_name}.json (same as local mode)
+            "$SCRIPT_DIR/auth/generate-jwt.sh" aws "$env_name" > /dev/null 2>&1
+            
+            # Clear secrets from memory
+            unset ISSUER_SECRET
+            unset ISSUER_SECRET_SECONDARY
+            
+            # Read token from updated environment file
+            local env_file="$POSTMAN_DIR/environments/${env_name}.postman_environment.json"
+            local token=$(jq -r '.values[] | select(.key=="auth_token") | .value' "$env_file")
+            echo "$token"
+            ;;
+            
+        *)
+            error "Unknown auth type: $auth_type"
+            exit 1
+            ;;
+    esac
+}

package/templates/postman-node/scripts/lib/run-newman.sh

@@ -0,0 +1,104 @@
+#!/bin/bash
+# Newman test execution
+
+run_newman_tests() {
+    local environment="$1"
+    
+    cd "$POSTMAN_DIR"
+    
+    # Install dependencies if needed
+    if [ ! -d "node_modules" ]; then
+        log_info "Installing Newman dependencies..."
+        npm install --ignore-scripts
+    fi
+    
+    # Create reports directories
+    mkdir -p "$POSTMAN_DIR/reports"
+    mkdir -p "$POSTMAN_DIR/reports/json"
+    
+    local timestamp=$(date +%Y-%m-%d_%H-%M-%S)
+    local overall_exit_code=0
+    local passed_count=0
+    local failed_count=0
+    declare -a failed_collections=()
+    local env_file="$POSTMAN_DIR/environments/${environment}.postman_environment.json"
+    
+    # Run all collections in crud folder (sorted by filename)
+    for collection_file in "$POSTMAN_DIR/collections/crud"/*.json; do
+        if [ -f "$collection_file" ]; then
+            local collection_name=$(basename "$collection_file" .json)
+            local html_report_path="$POSTMAN_DIR/reports/${collection_name}-${environment}-${timestamp}.html"
+            local json_report_path="$POSTMAN_DIR/reports/json/${collection_name}-${timestamp}.json"
+            
+            echo ""
+            log_info "Running collection: $collection_name"
+            
+            local exit_code=0
+            npx newman run "$collection_file" \
+                -e "$env_file" \
+                --export-environment "$env_file" \
+                -r cli,htmlextra,json \
+                --reporter-htmlextra-export "$html_report_path" \
+                --reporter-htmlextra-title "${collection_name} - ${environment}" \
+                --reporter-json-export "$json_report_path" \
+                --delay-request 500 \
+                --color on || exit_code=$?
+            
+            if [ $exit_code -ne 0 ]; then
+                overall_exit_code=$exit_code
+                failed_count=$((failed_count + 1))
+                failed_collections+=("$collection_name")
+                log_error "Collection $collection_name failed"
+            else
+                passed_count=$((passed_count + 1))
+                log_success "Collection $collection_name passed"
+            fi
+            
+            echo "  HTML Report: $html_report_path"
+            echo "  JSON Report: $json_report_path"
+        fi
+    done
+    
+    echo ""
+    echo "========================================="
+    log_info "Test Results Summary"
+    echo "========================================="
+    echo "  Passed: $passed_count"
+    echo "  Failed: $failed_count"
+    
+    if [ ${#failed_collections[@]} -gt 0 ]; then
+        echo ""
+        echo "  Failed collections:"
+        for col in "${failed_collections[@]}"; do
+            echo "    - $col"
+        done
+    fi
+    
+    echo ""
+    log_info "Reports saved in: $POSTMAN_DIR/reports/"
+    
+    # Generate consolidated report (links must match per-collection HTML from this run's timestamp)
+    echo ""
+    log_info "Generating consolidated report..."
+    CONSOLIDATED_GENERATOR="$POSTMAN_DIR/scripts/report-generators/generate-consolidated-report.sh"
+    if [ -f "$CONSOLIDATED_GENERATOR" ]; then
+        "$CONSOLIDATED_GENERATOR" "$environment" "$timestamp" "$POSTMAN_DIR/reports" "$passed_count" "$failed_count" "$overall_exit_code" || log_error "Failed to generate consolidated report"
+        consolidated_report="$POSTMAN_DIR/reports/consolidated-${environment}-${timestamp}.html"
+        consolidated_json="$POSTMAN_DIR/reports/consolidated-${environment}-${timestamp}.json"
+        if [ -f "$consolidated_report" ]; then
+            echo ""
+            log_success "📊 Consolidated HTML: $consolidated_report"
+        fi
+        if [ -f "$consolidated_json" ]; then
+            log_success "📄 Consolidated JSON: $consolidated_json"
+        fi
+    fi
+    
+    if [ $overall_exit_code -eq 0 ]; then
+        log_success "All tests passed!"
+        return 0
+    else
+        log_error "Some tests failed (exit code: $overall_exit_code)"
+        exit $overall_exit_code
+    fi
+}

package/templates/postman-node/scripts/lib/setup-database.sh

@@ -0,0 +1,55 @@
+#!/bin/bash
+# Database setup functions
+
+setup_database() {
+    local config_file="$1"
+    
+    # Check Podman
+    if ! command -v podman &> /dev/null; then
+        error "Podman is not installed"
+        exit 1
+    fi
+    
+    if ! podman info &> /dev/null; then
+        error "Podman machine is not running. Run 'podman machine start'"
+        exit 1
+    fi
+    
+    log_info "Podman is available"
+    
+    # Start MySQL container
+    local container_name=$(jq -r '.setup.database.container_name' "$config_file")
+    local mysql_port=$(jq -r '.setup.database.port' "$config_file")
+    
+    log_info "Starting MySQL container: $container_name"
+    bash "$SCRIPT_DIR/database/start-mysql.sh"
+    
+    # Wait for MySQL
+    log_info "Waiting for MySQL to be ready..."
+    bash "$SCRIPT_DIR/database/wait-for-mysql.sh"
+    
+    log_success "Database ready"
+}
+
+run_migrations() {
+    local config_file="$1"
+    
+    # Source the test environment to get stack_settings (required by run-migrations.js)
+    local env_file=$(jq -r '.setup.app.env_file // "postman/local.test.env"' "$config_file")
+    if [ -f "$PROJECT_ROOT/$env_file" ]; then
+        log_info "Loading environment from $env_file"
+        source "$PROJECT_ROOT/$env_file"
+    else
+        log_warning "Environment file not found: $env_file"
+    fi
+    
+    log_info "Running migrations and seeding data..."
+    cd "$PROJECT_ROOT"
+    node "$SCRIPT_DIR/database/run-migrations.js" || {
+        local exit_code=$?
+        error "Migrations failed with exit code $exit_code"
+        exit $exit_code
+    }
+    
+    log_success "Migrations complete"
+}

package/templates/postman-node/scripts/lib/start-app.sh

@@ -0,0 +1,48 @@
+#!/bin/bash
+# Application startup functions
+
+start_application() {
+    local config_file="$1"
+    
+    cd "$PROJECT_ROOT"
+    
+    # Load environment variables
+    local env_file=$(jq -r '.setup.app.env_file // "local.env"' "$config_file")
+    if [ -f "$env_file" ]; then
+        source "$env_file"
+    else
+        source "$PROJECT_ROOT/local.env"
+    fi
+    
+    # Set environment variables
+    export NODE_ENV=$(jq -r '.setup.app.node_env' "$config_file")
+    export DB_HOST=$(jq -r '.setup.database.host' "$config_file")
+    export DB_PORT=$(jq -r '.setup.database.port' "$config_file")
+    export DB_USER=$(jq -r '.setup.database.user' "$config_file")
+    export DB_PASSWORD=$(jq -r '.setup.database.password' "$config_file")
+    # NOTE: Do NOT set DB_NAME - global and regional databases have different names
+    # They will use the values from local.env config instead
+    
+    local app_port=$(jq -r '.setup.app.port' "$config_file")
+    
+    log_info "Starting Node.js app on port $app_port"
+    node src/index.js $app_port &
+    APP_PID=$!
+    
+    log_info "App started with PID: $APP_PID"
+    
+    # Wait for app to be ready
+    log_info "Waiting for app health check..."
+    local max_wait=30
+    local elapsed=0
+    while [ $elapsed -lt $max_wait ]; do
+        if curl -s "http://localhost:$app_port/ping" > /dev/null 2>&1; then
+            log_success "App is ready!"
+            return 0
+        fi
+        sleep 1
+        elapsed=$((elapsed + 1))
+    done
+    
+    log_warning "App health check timed out, proceeding anyway..."
+}

package/templates/postman-node/scripts/lib/utils.sh

@@ -0,0 +1,114 @@
+#!/bin/bash
+# Common utility functions
+
+# Colors
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+CYAN='\033[0;36m'
+NC='\033[0m'
+
+# Logging functions (all output to stderr to avoid capturing in command substitution)
+log_header() {
+    echo -e "${BLUE}═══════════════════════════════════════════════════════════════${NC}" >&2
+    echo -e "${BLUE}  $1${NC}" >&2
+    echo -e "${BLUE}═══════════════════════════════════════════════════════════════${NC}" >&2
+}
+
+log_step() {
+    local step_num="$1"
+    local message="$2"
+    echo -e "${CYAN}[Step $step_num] $message${NC}" >&2
+}
+
+log_info() {
+    echo -e "${GREEN}✓${NC} $1" >&2
+}
+
+log_warning() {
+    echo -e "${YELLOW}⚠${NC} $1" >&2
+}
+
+log_error() {
+    echo -e "${RED}✗${NC} $1" >&2
+}
+
+log_success() {
+    echo -e "${GREEN}✓ $1${NC}" >&2
+}
+
+error() {
+    log_error "$1"
+}
+
+# Cleanup function
+cleanup() {
+    if [ "$CLEANUP_ENABLED" != "true" ]; then
+        log_warning "Cleanup skipped"
+        return
+    fi
+    
+    echo "" >&2
+    log_warning "Cleaning up..."
+    
+    # Stop app
+    if [ ! -z "${APP_PID:-}" ]; then
+        log_info "Stopping Node.js app (PID: $APP_PID)"
+        kill $APP_PID 2>/dev/null || true
+        wait $APP_PID 2>/dev/null || true
+    fi
+    
+    # Kill any process on app port
+    local app_port=$(jq -r '.setup.app.port // 4013' "$CONFIG_FILE" 2>/dev/null || echo "4013")
+    lsof -ti:$app_port | xargs kill -9 2>/dev/null || true
+    
+    # Cleanup Docker containers
+    if [ "$SETUP_DB" = "true" ]; then
+        bash "$SCRIPT_DIR/database/cleanup-mysql.sh" 2>/dev/null || true
+    fi
+    
+    log_success "Cleanup complete"
+}
+
+# Update Postman environment file
+update_postman_environment() {
+    local env="$1"
+    local api_url="$3"
+    local config_file="${4:-}"
+    
+    local env_file="$POSTMAN_DIR/environments/${env}.postman_environment.json"
+    
+    if [ ! -f "$env_file" ]; then
+        log_error "Environment file not found: $env_file"
+        return 1
+    fi
+    
+    # Read account_id from config if available
+    local product_account_id=""
+    if [ -n "$config_file" ] && [ -f "$config_file" ]; then
+        product_account_id=$(jq -r '.auth.jwt.account_id // ""' "$config_file")
+    fi
+    
+    # Update existing values (auth_token and agent_token are already set by generate-jwt.sh)
+    # Only update api_url and product_account_id here
+    jq --arg api_url "$api_url" \
+       --arg product_account_id "$product_account_id" \
+       '
+       # Update existing values
+       .values |= map(
+         if .key == "api_url" then .value = $api_url
+         elif .key == "product_account_id" and $product_account_id != "" then .value = $product_account_id
+         else . end
+       )
+       # Add product_account_id if it does not exist and we have a value
+       | if ($product_account_id != "") and ([.values[] | select(.key == "product_account_id")] | length == 0)
+         then .values += [{"key": "product_account_id", "value": $product_account_id, "type": "default", "enabled": true}]
+         else . end
+       ' \
+       "$env_file" > "$env_file.tmp"
+    
+    mv "$env_file.tmp" "$env_file"
+    
+    log_info "Environment file updated (product_account_id: ${product_account_id:-not set})"
+}

package/templates/postman-node/scripts/report-generators/stage-report-artifacts.sh

@@ -0,0 +1,26 @@
+#!/bin/bash
+#
+# Copy nyc and Stryker HTML reports into postman/reports/artifacts/ for Jenkins-safe links.
+#
+# Usage: stage-report-artifacts.sh <project_root> <reports_dir>
+
+set -euo pipefail
+
+PROJECT_ROOT="${1:?project root required}"
+REPORTS_DIR="${2:?reports dir required}"
+ARTIFACTS_DIR="$REPORTS_DIR/artifacts"
+
+rm -rf "$ARTIFACTS_DIR"
+mkdir -p "$ARTIFACTS_DIR/nyc" "$ARTIFACTS_DIR/stryker"
+
+NYC_SRC="$PROJECT_ROOT/coverage/unit-tests"
+if [ -f "$NYC_SRC/index.html" ]; then
+    cp -R "$NYC_SRC/." "$ARTIFACTS_DIR/nyc/"
+    echo "Staged nyc report -> artifacts/nyc/"
+fi
+
+STRYKER_SRC="$PROJECT_ROOT/coverage/mutation"
+if [ -f "$STRYKER_SRC/index.html" ]; then
+    cp -R "$STRYKER_SRC/." "$ARTIFACTS_DIR/stryker/"
+    echo "Staged Stryker report -> artifacts/stryker/"
+fi