@leverege/build-tools 2.38.2 → 2.39.0-beta.2

package/lib/server/refresh-npm-token.js

@@ -1,135 +0,0 @@
-#!/usr/bin/env node
-/*
- * refresh-npm-token will check the access time of the $HOME/.npmrc npm token
- * file and if it is older than 24 hours then it will be updated to whatever
- * value is currently in the NPM_DEVELOPER_SECRET on leverege-artifacts. It
- * will also check to see if the deprecated $HOME/.npmrc.ro file exists and
- * will suggest to the user to remove it. If either of the token files exist
- * the first 6 and last four characters of the token will be extracted and
- * reported via slack to allow DevOps operators to clean up old tokens in npm.
- *
- * For testing the Unix touch command may be used to modify the access access
- * time of the npmrc token. The REFRESH_NPM_TOKEN_DEBUG env variable may also
- * be set to enable debugging and disable the slack channel spam.
- *
- * touch -d 2023-08-20 ~/.npmrc; REFRESH_NPM_TOKEN_DEBUG=1 refresh-npm-token.mjs
- */
-
-/* eslint-disable security/detect-non-literal-fs-filename */
-"use strict";
-
-var _nodeFs = _interopRequireDefault(require("node:fs"));
-var _nodeOs = _interopRequireDefault(require("node:os"));
-var _chalk = _interopRequireDefault(require("chalk"));
-var _execa = _interopRequireDefault(require("execa"));
-var _semver = require("semver");
-function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
-// we can't use $ until we upgrade to ESM execa
-if ((0, _semver.lt)(process.version, '18.0.0')) {
-  console.log(_chalk.default.red('\n\n***ERROR: must be running at least node 18\n')); // eslint-disable-line no-console
-  process.exit(1);
-}
-
-// max age in seconds of the npmrc file before refresh
-const refreshThreshold = 3600 * 24; // 1 day
-
-// eslint-disable-next-line no-console
-const log = console.log;
-const debug = (obj, text) => {
-  if (process.env.REFRESH_NPM_TOKEN_DEBUG) {
-    log(obj, _chalk.default.yellow(text));
-  }
-};
-const fetchToken = filename => {
-  const results = {
-    filename,
-    exists: false,
-    token: 'none',
-    lastUpdated: -1
-  };
-  try {
-    if (_nodeFs.default.existsSync(filename)) {
-      results.exists = true;
-      const stat = _nodeFs.default.statSync(filename);
-      results.lastUpdated = Math.trunc((Date.now() - stat.mtimeMs) / 1000);
-      // grab the current token for logging a redacted version
-      const currentNpmrc = _nodeFs.default.readFileSync(filename, 'utf8');
-      const found = currentNpmrc.match(/_authToken=(.*)\n/);
-      if (found) {
-        results.token = `${found[1].slice(0, 8)}......${found[1].slice(-4)}`;
-      }
-    }
-  } catch (statErr) {
-    log({
-      statErr
-    }, `<==fs.statSync failed on file ${filename}`);
-  }
-  return results;
-};
-
-// fetch the tokens - note the RO token is deprecated and may not exist
-const npmrc = fetchToken(`${_nodeOs.default.homedir()}/.npmrc`);
-const npmrcRo = fetchToken(`${_nodeOs.default.homedir()}/.npmrc.ro`);
-debug({
-  npmrc,
-  npmrcRo
-}, '<==Your current tokens'); // debug
-
-if (npmrc.exists && npmrc.lastUpdated < refreshThreshold) {
-  process.exit(0);
-}
-
-// fetch the contents of the npmrc secret stored on leverege-registry
-let npmrcSecret;
-const execaOpts = ['secrets', 'versions', 'access', 'latest', '--secret=NPM_DEVELOPER_NPMRC', '--project=leverege-registry'];
-try {
-  const execaOut = await (0, _execa.default)('gcloud', execaOpts);
-  npmrcSecret = execaOut.stdout;
-  debug({
-    execaOut,
-    execaOpts
-  }, '<==exec info'); // debug
-} catch (err) {
-  log(_chalk.default.yellow(`\nFailed Command => [${err.escapedCommand}]\n\n`), _chalk.default.red(err.stderr));
-  process.exit(1);
-}
-
-// now update the user's npmrc file
-log(_chalk.default.yellow('\n*** Refreshing your ~/.npmrc npm token file'));
-try {
-  if (_nodeFs.default.existsSync(npmrc)) {
-    _nodeFs.default.copyFileSync(npmrc, `${npmrc}-BAK`); // make a backup for safety
-  }
-
-  _nodeFs.default.writeFileSync(npmrc.filename, npmrcSecret);
-} catch (fileErr) {
-  log(fileErr, 'fs failed');
-  process.exit(1);
-}
-const now = new Date().toLocaleString();
-const slackURL = 'https://hooks.slack.com/services/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';
-const execaAct = await (0, _execa.default)('gcloud', ['config', 'get', 'account']);
-const account = execaAct.stdout;
-const slackData = {
-  // eslint-disable-next-line max-len
-  text: `--- npmrc refreshed by \`${account}\` at ${now}\n     tokens RW [\`${npmrc.token}\`] RO [\`${npmrcRo.token}\`]`,
-  channel: '#dev-ops-helm'
-};
-if (process.env.REFRESH_NPM_TOKEN_DEBUG) {
-  log({
-    slackURL,
-    slackData
-  }, '<==Slack skipped');
-} else {
-  fetch(slackURL, {
-    method: 'POST',
-    body: JSON.stringify(slackData),
-    headers: {
-      'Content-Type': 'application/json'
-    }
-  });
-}
-if (npmrcRo.exists) {
-  log(_chalk.default.red('\nWARNING - the need for the ~/.npmrc.ro file has been eliminated - please remove'));
-  process.exit(1);
-}