@mbc-cqrs-serverless/cli 0.1.4-beta.0

package/templates/infra-local/cognito-local/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "cognito-local",
+  "version": "1.0.0",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "patch-package",
+    "dev": "HOST=0.0.0.0 npx cognito-local",
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "author": "",
+  "license": "ISC",
+  "dependencies": {
+    "cognito-local": "^3.23.2",
+    "patch-package": "^8.0.0"
+  }
+}

package/templates/infra-local/cognito-local/patches/cognito-local+3.23.2.patch

@@ -0,0 +1,57 @@
+diff --git a/node_modules/cognito-local/lib/errors.d.ts b/node_modules/cognito-local/lib/errors.d.ts
+index 73c8ba1..4de35b5 100644
+--- a/node_modules/cognito-local/lib/errors.d.ts
++++ b/node_modules/cognito-local/lib/errors.d.ts
+@@ -46,3 +46,6 @@ export declare class InvalidLambdaResponseError extends CognitoError {
+ export declare class InvalidParameterError extends CognitoError {
+     constructor(message?: string);
+ }
++export declare class UserDisableException extends CognitoError {
++    constructor();
++}
+diff --git a/node_modules/cognito-local/lib/errors.js b/node_modules/cognito-local/lib/errors.js
+index ff327dc..a4da36a 100644
+--- a/node_modules/cognito-local/lib/errors.js
++++ b/node_modules/cognito-local/lib/errors.js
+@@ -18,6 +18,7 @@ __export(exports, {
+   ResourceNotFoundError: () => ResourceNotFoundError,
+   UnexpectedLambdaExceptionError: () => UnexpectedLambdaExceptionError,
+   UnsupportedError: () => UnsupportedError,
++  UserDisableException: () => UserDisableException,
+   UserLambdaValidationError: () => UserLambdaValidationError,
+   UserNotConfirmedException: () => UserNotConfirmedException,
+   UserNotFoundError: () => UserNotFoundError,
+@@ -101,6 +102,11 @@ class InvalidParameterError extends CognitoError {
+     super("InvalidParameterException", message);
+   }
+ }
++class UserDisableException extends CognitoError {
++  constructor() {
++    super("UserDisableException", "User is disable.");
++  }
++}
+ // Annotate the CommonJS export names for ESM import in node:
+ 0 && (module.exports = {
+   CodeMismatchError,
+@@ -115,6 +121,7 @@ class InvalidParameterError extends CognitoError {
+   ResourceNotFoundError,
+   UnexpectedLambdaExceptionError,
+   UnsupportedError,
++  UserDisableException,
+   UserLambdaValidationError,
+   UserNotConfirmedException,
+   UserNotFoundError,
+diff --git a/node_modules/cognito-local/lib/targets/initiateAuth.js b/node_modules/cognito-local/lib/targets/initiateAuth.js
+index ee7c3d6..23632d7 100644
+--- a/node_modules/cognito-local/lib/targets/initiateAuth.js
++++ b/node_modules/cognito-local/lib/targets/initiateAuth.js
+@@ -125,6 +125,9 @@ const userPasswordAuthFlow = async (ctx, req, userPool, userPoolClient, services
+   if (user.UserStatus === "UNCONFIRMED") {
+     throw new import_errors.UserNotConfirmedException();
+   }
++  if (!user.Enabled) {
++    throw new import_errors.UserDisableException();
++  }
+   if (userPool.options.MfaConfiguration === "OPTIONAL" && (user.MFAOptions ?? []).length > 0 || userPool.options.MfaConfiguration === "ON") {
+     return verifyMfaChallenge(ctx, user, req, userPool, services);
+   }

package/templates/infra-local/docker-compose.yml

@@ -0,0 +1,91 @@
+version: '2'
+services:
+  stepfunctions-local:
+    image: amazon/aws-stepfunctions-local
+    ports:
+      - 8083:8083
+    environment:
+      - AWS_ACCOUNT_ID=101010101010
+      - AWS_DEFAULT_REGION=ap-northeast-1
+      - LAMBDA_ENDPOINT=http://host.docker.internal:3002
+      - SQS_ENDPOINT=http://host.docker.internal:9324
+      - SNS_ENDPOINT=http://host.docker.internal:4002
+      - DYNAMODB_ENDPOINT=http://host.docker.internal:8000
+      - STEP_FUNCTIONS_ENDPOINT=http://host.docker.internal:8083
+      - ECS_ENDPOINT=VALUE
+    extra_hosts:
+      - 'host.docker.internal:host-gateway'
+
+  rds:
+    image: mysql:8
+    environment:
+      MYSQL_ROOT_PASSWORD: RootCqrs
+      MYSQL_DATABASE: cqrs
+    volumes:
+      - ./docker-data/mysql:/var/lib/mysql
+    ports:
+      - 3306:3306
+
+  dynamodb-local:
+    image: amazon/dynamodb-local
+    ports:
+      - 8000:8000
+    volumes:
+      - ./docker-data/dynamodb-local:/home/dynamodblocal/data
+    working_dir: /home/dynamodblocal
+    command: '-jar DynamoDBLocal.jar -sharedDb -dbPath ./data'
+
+  dynamodb-admin:
+    image: aaronshaf/dynamodb-admin
+    environment:
+      - DYNAMO_ENDPOINT=dynamodb-local:8000
+      - AWS_REGION=ap-northeast-1
+      - AWS_ACCESS_KEY_ID=local
+      - AWS_SECRET_ACCESS_KEY=local
+    ports:
+      - 8001:8001
+    depends_on:
+      - dynamodb-local
+
+  queue:
+    image: softwaremill/elasticmq-native:latest
+    ports:
+      - 9324:9324 # sqs
+      - 9325:9325 # ui
+    volumes:
+      - ./elasticmq.conf:/opt/elasticmq.conf
+      - ./docker-data/elasticmq:/data
+
+  localstack:
+    image: localstack/localstack
+    ports:
+      - '4566:4566'
+      - '4510-4559:4510-4559'
+    environment:
+      - SERVICES=s3
+      - AWS_DEFAULT_REGION=ap-northeast-1
+      - SERVICE_ACCESS_KEY=local
+      - SERVICE_SECRET_KEY=local
+      - EXTRA_CORS_ALLOWED_ORIGINS=*
+    volumes:
+      - ./docker-data/localstack:/var/lib/localstack
+      - ./docker-data/run/docker.sock:/var/run/docker.sock
+
+  appsync:
+    build:
+      context: ./appsync-simulator
+      dockerfile: Dockerfile
+    ports:
+      - 4001:4001
+    environment:
+      - PORT=4001
+      - API_KEY=da2-fakeApiId123456
+
+  cognito-local:
+    build:
+      context: ./cognito-local
+      dockerfile: Dockerfile
+    ports:
+      - 9229:9229
+    volumes:
+      - ./docker-data/.cognito:/app/.cognito

package/templates/infra-local/elasticmq.conf

@@ -0,0 +1,23 @@
+include classpath("application.conf")
+
+node-address {
+    host = "*"
+}
+
+queues {
+    task-action-queue {
+        defaultVisibilityTimeout = 60 seconds
+        delay = 5 seconds
+        receiveMessageWait = 0 seconds
+    }
+    notification-queue {
+        defaultVisibilityTimeout = 60 seconds
+        delay = 5 seconds
+        receiveMessageWait = 0 seconds
+    }
+}
+
+aws {
+  region = ap-northeast-1
+  accountId = 101010101010
+}

package/templates/infra-local/resources.sh

@@ -0,0 +1,11 @@
+#!/bin/sh
+
+if [ -f .env ]; then
+  export $(echo $(cat .env | sed 's/#.*//g'| xargs) | envsubst)
+fi
+
+echo "======= create S3 buckets ======="
+aws --endpoint-url=http://localhost:4566 s3 mb s3://$S3_BUCKET_NAME
+
+echo "======= list S3 buckets ======="
+aws --endpoint-url=http://localhost:4566 s3 ls

package/templates/infra-local/scripts/trigger_ddb_stream.sh

@@ -0,0 +1,69 @@
+#!/bin/bash
+
+export AWS_DEFAULT_REGION=ap-northeast-1
+export AWS_ACCOUNT_ID=101010101010
+export AWS_ACCESS_KEY_ID=local
+export AWS_SECRET_ACCESS_KEY=local
+
+endpoint='http://localhost:8000'
+
+source .env
+
+echo "Read table name"
+declare -a tables
+while IFS= read -r line; do
+	tables+=("$line")
+done < <(jq -r '.[]' ./prisma/dynamodbs/cqrs.json)
+
+# Check table health
+start=$(date +%s)
+for table in "${tables[@]}"; do
+	while true; do
+
+		elapsed=$(($(date +%s) - ${start}))
+		if [[ ${elapsed} -gt 10 ]]; then
+			echo "Timeout"
+			exit 1
+		fi
+
+		echo "Check health table ${table}"
+		status=$(aws --endpoint=${endpoint} dynamodb describe-table --table-name local-${APP_NAME}-${table}-command --query 'Table.TableStatus')
+		echo "Table status: ${status}"
+		if [[ "${status}" == "\"ACTIVE\"" ]]; then
+			echo "Table ${table} is ACTIVE"
+			break
+		else
+			echo "Table ${table} is not ACTIVE"
+			sleep 1
+		fi
+	done
+done
+
+# Wait serverless start
+start=$(date +%s)
+while true; do
+
+	elapsed=$(($(date +%s) - ${start}))
+	if [[ ${elapsed} -gt 10 ]]; then
+		echo "Timeout"
+		exit 1
+	fi
+
+	echo "Check health serverless"
+	status=$(curl -s -o /dev/null -w "%{http_code}" http://localhost:3000)
+	echo "Serverless status: ${status}"
+	if [[ "${status}" == "200" ]]; then
+		echo "Serverless is ACTIVE"
+		break
+	else
+		echo "Serverless is not ACTIVE"
+		sleep 1
+	fi
+done
+
+# Trigger command stream
+timestamp=$(date +%s)
+for table in "${tables[@]}"; do
+	echo "Send a command to trigger command stream ${table}"
+	aws --endpoint=${endpoint} dynamodb put-item --table-name local-${APP_NAME}-${table}-command --item "{\"pk\": {\"S\": \"test\" }, \"sk\": { \"S\": \"${timestamp}\" }}"
+done

package/templates/infra-local/serverless.yml

@@ -0,0 +1,306 @@
+service: serverless-example
+useDotenv: true
+
+plugins:
+  - serverless-offline-sns
+  - serverless-offline-sqs
+  - serverless-offline-lambda
+  - serverless-step-functions
+  - serverless-step-functions-local
+  - serverless-dynamodb
+  - serverless-offline-dynamodb-streams
+  - serverless-offline-aws-eventbridge
+  - serverless-offline-ses-v2
+  - serverless-offline
+
+custom:
+  serverless-offline:
+    corsAllowOrigin: '*'
+    corsAllowHeaders: '*'
+    host: 0.0.0.0
+    reloadHandler: true
+    ignoreJWTSignature: true
+  serverless-offline-ses-v2:
+    port: 8005
+  serverless-offline-sns:
+    port: 4002 # a free port for the sns server to run on
+    debug: true
+    subscriptions:
+      - topic:
+          topicName: CqrsSnsTopic
+          rawMessageDelivery: 'true'
+          filterPolicy: { 'action': ['task-execute'] }
+        queue: http://localhost:9324/101010101010/task-action-queue
+      - topic:
+          topicName: CqrsSnsTopic
+          rawMessageDelivery: 'true'
+          filterPolicy:
+            {
+              'action':
+                ['notification-action', 'command-status', 'task-status'],
+            }
+        queue: http://localhost:9324/101010101010/notification-queue
+    # host: 0.0.0.0 # Optional, defaults to 127.0.0.1 if not provided to serverless-offline
+    # sns-endpoint: http://127.0.0.1:4567 # Optional. Only if you want to use a custom SNS provider endpoint
+    # sns-subscribe-endpoint: http://127.0.0.1:3000 # Optional. Only if you want to use a custom subscribe endpoint from SNS to send messages back to
+    accountId: 101010101010 # Optional
+  serverless-offline-sqs:
+    autoCreate: false # create queue if not exists
+    accountId: 101010101010
+    debug: true
+    apiVersion: '2012-11-05'
+    endpoint: http://localhost:9324
+    region: ap-northeast-1
+    accessKeyId: root
+    secretAccessKey: root
+    skipCacheInvalidation: false
+  stepFunctionsLocal:
+    accountId: 101010101010
+    region: ap-northeast-1
+    # lambdaEndpoint: http://0.0.0.0:3002
+    externalInstance: true
+  serverless-dynamodb:
+    stages:
+      # set for create tables on dev enviroment
+      - dev
+    start:
+      docker: true
+      inMemory: true
+      port: 8000
+      noStart: true
+      seed: true
+      migrate: false # create tables on start
+      onStart: false
+      convertEmptyValues: true
+  serverless-offline-dynamodb-streams:
+    endpoint: http://localhost:8000
+  serverless-offline-aws-eventbridge:
+    port: 4010 # port to run the eventBridge mock server on
+    mockEventBridgeServer: true # Set to false if EventBridge is already mocked by another stack
+    hostname: 127.0.0.1 # IP or hostname of existing EventBridge if mocked by another stack
+    pubSubPort: 4011 # Port to run the MQ server (or just listen if using an EventBridge Mock server from another stack)
+    debug: false # flag to show debug messages
+    account: '' # account id that gets passed to the event
+    maximumRetryAttempts: 10 # maximumRetryAttempts to retry lambda
+    retryDelayMs: 500 # retry delay
+    throwRetryExhausted: false # default true
+    payloadSizeLimit: '10mb' # Controls the maximum payload size being passed to https://www.npmjs.com/package/bytes (Note: this payload size might not be the same size as your AWS Eventbridge receive)
+    # localStackConfig:
+    #   localStackEndpoint: http://localhost:4566
+
+provider:
+  name: aws
+  region: ap-northeast-1
+  runtime: nodejs18.x
+  profile: serverless
+  httpApi:
+    authorizers:
+      localAuthorizer:
+        type: jwt
+        identitySource: $request.header.Authorization
+        issuerUrl: http://localhost:9229/local_2G7noHgW
+        audience:
+          - dnk8y7ii3wled35p3lw0l2cd7
+      keycloakAuthorizer:
+        type: jwt
+        identitySource: $request.header.Authorization
+        issuerUrl: http://localhost:8180/realms/master
+        # issuerUrl: http://localhost:8180/auth/realms/master # old version
+        audience:
+          - cqrs-demo
+
+functions:
+  main:
+    handler: ../dist/main.handler
+    events:
+      - httpApi: # public api
+          method: GET
+          path: /
+      - httpApi:
+          method: ANY
+          path: '/swagger-ui/{proxy+}'
+      - httpApi: # protected api
+          method: ANY
+          path: '/{proxy+}'
+          authorizer:
+            name: localAuthorizer
+          # authorizer:
+          #   name: keycloakAuthorizer
+      # - eventBridge:
+      #     eventBus: marketing
+      #     # run every 5 minutes
+      #     schedule: "cron(0/5 * * * ? *)"
+      - sqs:
+          arn:
+            Fn::GetAtt:
+              - TaskActionQueue
+              - Arn
+      - sqs:
+          arn:
+            Fn::GetAtt:
+              - NotificationQueue
+              - Arn
+      - stream:
+          type: dynamodb
+          maximumRetryAttempts: 10
+          arn: ${env:LOCAL_DDB_MASTER_STREAM}
+          filterPatterns:
+            - eventName: [INSERT]
+
+stepFunctions:
+  # https://goessner.net/articles/JsonPath/index.html
+  # https://docs.aws.amazon.com/step-functions/latest/dg/concepts-input-output-filtering.html
+  stateMachines:
+    command:
+      name: command
+      definition:
+        Comment: 'An example of the Amazon States Language using wait states'
+        StartAt: check_version
+        States:
+          fail:
+            Type: Fail
+            CausePath: $.cause
+            ErrorPath: $.error
+          success:
+            Type: Succeed
+          check_version:
+            Type: Task
+            Resource: arn:aws:states:::lambda:invoke
+            Parameters:
+              FunctionName: arn:aws:lambda:ap-northeast-1:101010101010:function:serverless-example-dev-main
+              Payload:
+                input.$: $
+                context.$: $$
+            Retry:
+              - ErrorEquals:
+                  - Lambda.ServiceException
+                  - Lambda.AWSLambdaException
+                  - Lambda.SdkClientException
+                IntervalSeconds: 2
+                MaxAttempts: 5
+                BackoffRate: 2
+            OutputPath: $.Payload[0][0]
+            Next: check_version_result
+          check_version_result:
+            Type: Choice
+            Choices:
+              - Variable: $.result
+                NumericEquals: 0
+                Next: history_copy
+              - Variable: $.result
+                NumericEquals: 1
+                Next: wait_prev_command
+              - Variable: $.result
+                NumericEquals: -1
+                Next: fail
+            Default: wait_prev_command
+          wait_prev_command:
+            Type: Task
+            Resource: arn:aws:states:::lambda:invoke.waitForTaskToken
+            Parameters:
+              FunctionName: arn:aws:lambda:ap-northeast-1:101010101010:function:serverless-example-dev-main
+              Payload:
+                input.$: $
+                context.$: $$
+                taskToken.$: $$.Task.Token
+            Retry:
+              - ErrorEquals:
+                  - Lambda.ServiceException
+                  - Lambda.AWSLambdaException
+                  - Lambda.SdkClientException
+                IntervalSeconds: 2
+                MaxAttempts: 5
+                BackoffRate: 2
+            OutputPath: $.Payload[0][0]
+            Next: history_copy
+          history_copy:
+            Type: Task
+            Resource: arn:aws:states:::lambda:invoke
+            Parameters:
+              FunctionName: arn:aws:lambda:ap-northeast-1:101010101010:function:serverless-example-dev-main
+              Payload:
+                input.$: $
+                context.$: $$
+            Retry:
+              - ErrorEquals:
+                  - Lambda.ServiceException
+                  - Lambda.AWSLambdaException
+                  - Lambda.SdkClientException
+                IntervalSeconds: 2
+                MaxAttempts: 5
+                BackoffRate: 2
+            OutputPath: $.Payload[0][0]
+            Next: transform_data
+          transform_data:
+            Type: Task
+            Resource: arn:aws:states:::lambda:invoke
+            Parameters:
+              FunctionName: arn:aws:lambda:ap-northeast-1:101010101010:function:serverless-example-dev-main
+              Payload:
+                input.$: $
+                context.$: $$
+            Retry:
+              - ErrorEquals:
+                  - Lambda.ServiceException
+                  - Lambda.AWSLambdaException
+                  - Lambda.SdkClientException
+                IntervalSeconds: 2
+                MaxAttempts: 5
+                BackoffRate: 2
+            OutputPath: $.Payload[0][0]
+            Next: sync_data_all
+          sync_data_all:
+            Type: Map
+            MaxConcurrency: 0
+            ItemsPath: $
+            Iterator:
+              StartAt: sync_data
+              States:
+                sync_data:
+                  Type: Task
+                  Resource: arn:aws:states:::lambda:invoke
+                  Parameters:
+                    FunctionName: arn:aws:lambda:ap-northeast-1:101010101010:function:serverless-example-dev-main
+                    Payload:
+                      input.$: $
+                      context.$: $$
+                  Retry:
+                    - ErrorEquals:
+                        - Lambda.ServiceException
+                        - Lambda.AWSLambdaException
+                        - Lambda.SdkClientException
+                      IntervalSeconds: 2
+                      MaxAttempts: 5
+                      BackoffRate: 2
+                  OutputPath: $.Payload[0][0]
+                  End: true
+            Next: finish
+          finish:
+            Type: Task
+            Resource: arn:aws:states:::lambda:invoke
+            Parameters:
+              FunctionName: arn:aws:lambda:ap-northeast-1:101010101010:function:serverless-example-dev-main
+              Payload:
+                input.$: $
+                context.$: $$
+            Retry:
+              - ErrorEquals:
+                  - Lambda.ServiceException
+                  - Lambda.AWSLambdaException
+                  - Lambda.SdkClientException
+                IntervalSeconds: 2
+                MaxAttempts: 5
+                BackoffRate: 2
+            OutputPath: $.Payload[0][0]
+            Next: success
+
+resources:
+  Resources:
+    TaskActionQueue:
+      Type: AWS::SQS::Queue
+      Properties:
+        QueueName: task-action-queue
+    NotificationQueue:
+      Type: AWS::SQS::Queue
+      Properties:
+        QueueName: notification-queue

package/templates/jest.config.js

@@ -0,0 +1,4 @@
+module.exports = {
+  preset: 'ts-jest',
+  testEnvironment: 'node',
+};

package/templates/nest-cli.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://json.schemastore.org/nest-cli",
+  "collection": "@nestjs/schematics",
+  "sourceRoot": "src",
+  "compilerOptions": {
+    "deleteOutDir": true,
+    "plugins": [
+      {
+        "name": "@nestjs/swagger",
+        "options": {
+          "introspectComments": true
+        }
+      }
+    ]
+  }
+}