@metaplay/metaplay-auth 1.0.0

package/CHANGELOG.md

@@ -0,0 +1,7 @@
+# Changelog
+
+## [1.0.0] - 2023-01-17
+
+### Added
+
+* Initial `metaplay-auth` version.

package/LICENSE

@@ -0,0 +1 @@
+This module and all files within are distributed under the Metaplay SDK Software License.

package/README.md

@@ -0,0 +1,25 @@
+# metaplay-auth
+
+## Description
+
+`metaplay-auth` is a command-line tool for authenticating to Metaplay infrastructure using your Metaplay account and interacting with your game servers.
+
+## Installation
+
+You can install `metaplay-auth` via NPM:
+
+```
+npm install -g @metaplay/metaplay-auth
+```
+
+Alternatively, you can quickly locally run the latest version using `npx`:
+
+```
+npx @metaplay/metaplay-auth@latest login
+npx @metaplay/metaplay-auth@latest show-tokens
+npx @metaplay/metaplay-auth@latest logout
+```
+
+## License
+
+See the LICENSE file.

package/dist/auth.js

@@ -0,0 +1,110 @@
+/* eslint-disable @typescript-eslint/no-misused-promises */
+import express from 'express';
+import open from 'open';
+import * as crypto from 'crypto';
+import { createServer } from 'net';
+import { setSecret, getSecret, removeSecret } from './secret_store.js';
+import { logger } from './logging.js';
+// oauth2 client details (maybe move these to be discovered from some online location to make changes easier to manage?)
+const clientId = 'c16ea663-ced3-46c6-8f85-38c9681fe1f0';
+const authorizationEndpoint = 'https://auth.metaplay.dev/oauth2/auth';
+const tokenEndpoint = 'https://auth.metaplay.dev/oauth2/token';
+function generateCodeVerifierAndChallenge() {
+    const verifier = crypto.randomBytes(32).toString('hex');
+    const challenge = crypto.createHash('sha256').update(verifier).digest('base64url');
+    return { verifier, challenge };
+}
+async function findAvailablePort() {
+    return await new Promise((resolve, reject) => {
+        // Ports need to be in sync with oauth2 client callbacks.
+        const portsToCheck = [5000, 5001, 5002, 5003, 5004];
+        let index = 0;
+        // Test ports by opening a server on them.
+        function tryNextPort() {
+            if (index >= portsToCheck.length) {
+                reject(new Error('Could not find an available port.'));
+            }
+            const port = portsToCheck[index];
+            const server = createServer();
+            logger.debug(`Trying port ${port}...`);
+            server.listen(port, () => {
+                server.once('close', () => {
+                    resolve(port);
+                });
+                server.close();
+                logger.debug(`Port ${port} is available.`);
+            });
+            server.on('error', () => {
+                logger.debug(`Port ${port} is not available.`);
+                index++;
+                tryNextPort();
+            });
+        }
+        tryNextPort();
+    });
+}
+export async function loginAndSaveTokens() {
+    // Find an available port to listen on.
+    const availablePort = await findAvailablePort();
+    const app = express();
+    const redirectUri = `http://localhost:${availablePort}/callback`;
+    const { verifier, challenge } = generateCodeVerifierAndChallenge();
+    const state = crypto.randomBytes(16).toString('hex');
+    // Create a /callback endpoint that exchanges the code for tokens.
+    app.get('/callback', async (req, res) => {
+        const code = req.query.code;
+        logger.debug(`Received callback request with code ${code}. Preparing to exchange for tokens...`);
+        const tokens = await exchangeCodeForTokens(state, redirectUri, verifier, code);
+        logger.debug(`Received tokens ${JSON.stringify(tokens)}. Storing them...`);
+        await setSecret('id_token', tokens.id_token);
+        await setSecret('access_token', tokens.access_token);
+        console.log('Login tokens stored successfully.');
+        // TODO: Could return a pre-generated HTML page instead of text?
+        res.send('Authentication successful! You can close this window.');
+        server.close();
+        console.log('You are now logged in and can call the other commands.');
+        process.exit(0);
+    });
+    // Start the server.
+    const server = app.listen(availablePort, () => {
+        const authorizationUrl = `${authorizationEndpoint}?response_type=code&client_id=${clientId}&redirect_uri=${encodeURIComponent(redirectUri)}&code_challenge=${challenge}&code_challenge_method=S256&scope=openid&state=${encodeURIComponent(state)}`;
+        console.log(`Attempting to open a browser to log in. If a browser did not open up, you can copy-paste the following URL to authenticate:\n\n${authorizationUrl}\n`);
+        void open(authorizationUrl);
+        logger.debug(`Listening on port ${availablePort} and waiting for callback...`);
+    });
+}
+export async function loadTokens() {
+    const idToken = await getSecret('id_token');
+    const accessToken = await getSecret('access_token');
+    if (idToken == null || accessToken == null) {
+        throw new Error('Metaplay tokens not found. Are you logged in?');
+    }
+    return {
+        id_token: idToken,
+        access_token: accessToken
+    };
+}
+export async function removeTokens() {
+    try {
+        await removeSecret('id_token');
+        logger.debug('Removed id_token.');
+        await removeSecret('access_token');
+        logger.debug('Removed access_token.');
+    }
+    catch (error) {
+        if (error instanceof Error) {
+            throw new Error(`Could not remove tokens: ${error.message}`);
+        }
+    }
+}
+async function exchangeCodeForTokens(state, redirectUri, verifier, code) {
+    const response = await fetch(tokenEndpoint, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded'
+        },
+        body: `grant_type=authorization_code&code=${code}&redirect_uri=${encodeURIComponent(redirectUri)}&client_id=${clientId}&code_verifier=${verifier}&state=${encodeURIComponent(state)}`
+    });
+    return await response.json();
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,OAAO,OAAO,MAAM,SAAS,CAAA;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,KAAK,CAAA;AAClC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAErC,wHAAwH;AACxH,MAAM,QAAQ,GAAG,sCAAsC,CAAA;AACvD,MAAM,qBAAqB,GAAG,uCAAuC,CAAA;AACrE,MAAM,aAAa,GAAG,wCAAwC,CAAA;AAE9D,SAAS,gCAAgC;IACvC,MAAM,QAAQ,GAAW,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC/D,MAAM,SAAS,GAAW,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC1F,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;AAChC,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,yDAAyD;QACzD,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QACnD,IAAI,KAAK,GAAG,CAAC,CAAA;QAEb,0CAA0C;QAC1C,SAAS,WAAW;YAClB,IAAI,KAAK,IAAI,YAAY,CAAC,MAAM,EAAE;gBAChC,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAA;aACvD;YAED,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;YAChC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAA;YAE7B,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,CAAA;YACtC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBACvB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBACxB,OAAO,CAAC,IAAI,CAAC,CAAA;gBACf,CAAC,CAAC,CAAA;gBACF,MAAM,CAAC,KAAK,EAAE,CAAA;gBACd,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,gBAAgB,CAAC,CAAA;YAC5C,CAAC,CAAC,CAAA;YAEF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACtB,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,oBAAoB,CAAC,CAAA;gBAC9C,KAAK,EAAE,CAAA;gBACP,WAAW,EAAE,CAAA;YACf,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,WAAW,EAAE,CAAA;IACf,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,uCAAuC;IACvC,MAAM,aAAa,GAAG,MAAM,iBAAiB,EAAE,CAAA;IAE/C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAA;IACrB,MAAM,WAAW,GAAG,oBAAoB,aAAa,WAAW,CAAA;IAChE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,gCAAgC,EAAE,CAAA;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAEpD,kEAAkE;IAClE,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,GAAoB,EAAE,GAAqB,EAAE,EAAE;QACzE,MAAM,IAAI,GAAuB,GAAG,CAAC,KAAK,CAAC,IAAc,CAAA;QACzD,MAAM,CAAC,KAAK,CAAC,uCAAuC,IAAI,uCAAuC,CAAC,CAAA;QAEhG,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC9E,MAAM,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;QAE1E,MAAM,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC5C,MAAM,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;QAEpD,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAA;QAChD,gEAAgE;QAChE,GAAG,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAA;QACjE,MAAM,CAAC,KAAK,EAAE,CAAA;QACd,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAA;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;IAEF,oBAAoB;IACpB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,EAAE;QAC5C,MAAM,gBAAgB,GAAW,GAAG,qBAAqB,iCAAiC,QAAQ,iBAAiB,kBAAkB,CAAC,WAAW,CAAC,mBAAmB,SAAS,kDAAkD,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAA;QAC3P,OAAO,CAAC,GAAG,CAAC,kIAAkI,gBAAgB,IAAI,CAAC,CAAA;QACnK,KAAK,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAE3B,MAAM,CAAC,KAAK,CAAC,qBAAqB,aAAa,8BAA8B,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAA;IAC3C,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,CAAA;IAEnD,IAAI,OAAO,IAAI,IAAI,IAAI,WAAW,IAAI,IAAI,EAAE;QAC1C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;KACjE;IAED,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,WAAW;KAC1B,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,IAAI;QACF,MAAM,YAAY,CAAC,UAAU,CAAC,CAAA;QAC9B,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;QACjC,MAAM,YAAY,CAAC,cAAc,CAAC,CAAA;QAClC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAA;KACtC;IAAC,OAAO,KAAK,EAAE;QACd,IAAI,KAAK,YAAY,KAAK,EAAE;YAC1B,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;SAC7D;KACF;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAE,KAAa,EAAE,WAAmB,EAAE,QAAgB,EAAE,IAAY;IACtG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE;QAC1C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,sCAAsC,IAAI,iBAAiB,kBAAkB,CAAC,WAAW,CAAC,cAAc,QAAQ,kBAAkB,QAAQ,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE;KACtL,CAAC,CAAA;IACF,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;AAC9B,CAAC"}

package/dist/index.js

@@ -0,0 +1,168 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+import { loginAndSaveTokens, loadTokens, removeTokens } from './auth.js';
+import { StackAPI } from './stackapi.js';
+import { validateTokens } from './utils.js';
+import { setLogLevel } from './logging.js';
+import { exit } from 'process';
+const program = new Command();
+program
+    .name('metaplay-auth')
+    .description('Authenticate with Metaplay and get AWS and Kubernetes credentials for game servers.')
+    .version('1.0.0')
+    .option('-d, --debug', 'enable debug output')
+    .hook('preAction', (thisCommand) => {
+    // Handle debug flag for all commands.
+    const opts = thisCommand.opts();
+    if (opts.debug) {
+        setLogLevel(0);
+    }
+    else {
+        setLogLevel(10);
+    }
+});
+program.command('login')
+    .description('login to your Metaplay account')
+    .action(async () => {
+    await loginAndSaveTokens();
+});
+program.command('logout')
+    .description('log out of your Metaplay account')
+    .action(async () => {
+    console.log('Logging out by removing locally stored tokens...');
+    try {
+        // TODO: Could check if the tokens existed in the first place and print something nicer if doing an unnecessary operation?
+        await removeTokens();
+        console.log('Done! You are now logged out.');
+    }
+    catch (error) {
+        if (error instanceof Error) {
+            console.error(`Error logging out: ${error.message}`);
+        }
+        exit(1);
+    }
+});
+program.command('show-tokens')
+    .description('show loaded tokens')
+    .action(async () => {
+    try {
+        // TODO: Could detect if not logged in and fail more gracefully?
+        const tokens = await loadTokens();
+        console.log(tokens);
+    }
+    catch (error) {
+        if (error instanceof Error) {
+            console.error(`Error showing tokens: ${error.message}`);
+        }
+        exit(1);
+    }
+});
+program.command('get-kubeconfig')
+    .description('get kubeconfig for deployment')
+    .argument('[gameserver]', 'address of gameserver (e.g. idler-develop.p1.metaplay.io)')
+    .option('-s, --stack-api <stack-api-base-path>', 'explicit stack api (e.g. https://infra.p1.metaplay.io/stackapi/)')
+    .option('-o, --organization <organization>', 'organization name (e.g. metaplay)')
+    .option('-p, --project <project>', 'project name (e.g. idler)')
+    .option('-e, --environment <environment>', 'environment name (e.g. develop)')
+    .action(async (gameserver, options) => {
+    try {
+        const tokens = await loadTokens();
+        if (!validateTokens(tokens)) {
+            throw new Error('Invalid tokens; try to refresh?');
+        }
+        if (!gameserver && !(options.organization && options.project && options.environment)) {
+            throw new Error('Could not determine a deployment to fetch the KubeConfigs from. You need to specify either a gameserver or an organization, project, and environment');
+        }
+        const stackApi = new StackAPI(tokens.id_token, tokens.access_token);
+        if (options.stackApi) {
+            stackApi.stack_api_base_uri = options.stackApi;
+        }
+        const payload = gameserver ? { gameserver } : { organization: options.organization, project: options.project, environment: options.environment };
+        const credentials = await stackApi.getKubeConfig(payload);
+        console.log(credentials);
+    }
+    catch (error) {
+        if (error instanceof Error) {
+            console.error(`Error getting KubeConfig: ${error.message}`);
+        }
+        exit(1);
+    }
+});
+program.command('get-aws-credentials')
+    .description('get AWS credentials for deployment')
+    .argument('[gameserver]', 'address of gameserver (e.g. idler-develop.p1.metaplay.io)')
+    .option('-s, --stack-api <stack-api-base-path>', 'explicit stack api (e.g. https://infra.p1.metaplay.io/stackapi/)')
+    .option('-o, --organization <organization>', 'organization name (e.g. metaplay)')
+    .option('-p, --project <project>', 'project name (e.g. idler)')
+    .option('-e, --environment <environment>', 'environment name (e.g. develop)')
+    .option('-f, --format <format>', 'output format (json or env)', 'json')
+    .action(async (gameserver, options) => {
+    try {
+        if (options.format !== 'json' && options.format !== 'env') {
+            throw new Error('Invalid format; must be one of json or env');
+        }
+        const tokens = await loadTokens();
+        if (!validateTokens(tokens)) {
+            throw new Error('Invalid tokens; try to refresh?');
+        }
+        if (!gameserver && !(options.organization && options.project && options.environment)) {
+            throw new Error('Could not determine a deployment to fetch the AWS credentials from. You need to specify either a gameserver or an organization, project, and environment');
+        }
+        const stackApi = new StackAPI(tokens.id_token, tokens.access_token);
+        if (options.stackApi) {
+            stackApi.stack_api_base_uri = options.stackApi;
+        }
+        const payload = gameserver ? { gameserver } : { organization: options.organization, project: options.project, environment: options.environment };
+        const credentials = await stackApi.getAwsCredentials(payload);
+        if (options.format === 'env') {
+            console.log(`export AWS_ACCESS_KEY_ID=${credentials.AccessKeyId}`);
+            console.log(`export AWS_SECRET_ACCESS_KEY=${credentials.SecretAccessKey}`);
+            console.log(`export AWS_SESSION_TOKEN=${credentials.SessionToken}`);
+        }
+        else {
+            console.log(JSON.stringify({
+                ...credentials,
+                Version: 1 // this is needed to comply with `aws` format for external credential providers
+            }));
+        }
+    }
+    catch (error) {
+        if (error instanceof Error) {
+            console.error(`Error getting AWS credentials: ${error.message}`);
+        }
+        exit(1);
+    }
+});
+program.command('get-environment')
+    .description('get environment details for deployment')
+    .argument('[gameserver]', 'address of gameserver (e.g. idler-develop.p1.metaplay.io)')
+    .option('-s, --stack-api <stack-api-base-path>', 'explicit stack api (e.g. https://infra.p1.metaplay.io/stackapi/)')
+    .option('-o, --organization <organization>', 'organization name (e.g. metaplay)')
+    .option('-p, --project <project>', 'project name (e.g. idler)')
+    .option('-e, --environment <environment>', 'environment name (e.g. develop)')
+    .action(async (gameserver, options) => {
+    try {
+        const tokens = await loadTokens();
+        if (!validateTokens(tokens)) {
+            throw new Error('Invalid tokens; try to refresh?');
+        }
+        if (!gameserver && !(options.organization && options.project && options.environment)) {
+            throw new Error('Could not determine a deployment to fetch environment details from. You need to specify either a gameserver or an organization, project, and environment');
+        }
+        const stackApi = new StackAPI(tokens.id_token, tokens.access_token);
+        if (options.stackApi) {
+            stackApi.stack_api_base_uri = options.stackApi;
+        }
+        const payload = gameserver ? { gameserver } : { organization: options.organization, project: options.project, environment: options.environment };
+        const environment = await stackApi.getEnvironmentDetails(payload);
+        console.log(JSON.stringify(environment));
+    }
+    catch (error) {
+        if (error instanceof Error) {
+            console.error(`Error getting environment details: ${error.message}`);
+        }
+        exit(1);
+    }
+});
+void program.parseAsync();
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAE9B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAA;AAE7B,OAAO;KACJ,IAAI,CAAC,eAAe,CAAC;KACrB,WAAW,CAAC,qFAAqF,CAAC;KAClG,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,aAAa,EAAE,qBAAqB,CAAC;KAC5C,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE;IACjC,sCAAsC;IACtC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,CAAA;IAC/B,IAAI,IAAI,CAAC,KAAK,EAAE;QACd,WAAW,CAAC,CAAC,CAAC,CAAA;KACf;SAAM;QACL,WAAW,CAAC,EAAE,CAAC,CAAA;KAChB;AACH,CAAC,CAAC,CAAA;AAEJ,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;KACrB,WAAW,CAAC,gCAAgC,CAAC;KAC7C,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,kBAAkB,EAAE,CAAA;AAC5B,CAAC,CAAC,CAAA;AAEJ,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;KACtB,WAAW,CAAC,kCAAkC,CAAC;KAC/C,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAA;IAE/D,IAAI;QACF,0HAA0H;QAC1H,MAAM,YAAY,EAAE,CAAA;QACpB,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAA;KAC7C;IAAC,OAAO,KAAK,EAAE;QACd,IAAI,KAAK,YAAY,KAAK,EAAE;YAC1B,OAAO,CAAC,KAAK,CAAC,sBAAsB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;SACrD;QACD,IAAI,CAAC,CAAC,CAAC,CAAA;KACR;AACH,CAAC,CAAC,CAAA;AAEJ,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;KAC3B,WAAW,CAAC,oBAAoB,CAAC;KACjC,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI;QACF,gEAAgE;QAChE,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAA;QACjC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;KACpB;IAAC,OAAO,KAAK,EAAE;QACd,IAAI,KAAK,YAAY,KAAK,EAAE;YAC1B,OAAO,CAAC,KAAK,CAAC,yBAAyB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;SACxD;QACD,IAAI,CAAC,CAAC,CAAC,CAAA;KACR;AACH,CAAC,CAAC,CAAA;AAEJ,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC;KAC9B,WAAW,CAAC,+BAA+B,CAAC;KAC5C,QAAQ,CAAC,cAAc,EAAE,2DAA2D,CAAC;KACrF,MAAM,CAAC,uCAAuC,EAAE,kEAAkE,CAAC;KACnH,MAAM,CAAC,mCAAmC,EAAE,mCAAmC,CAAC;KAChF,MAAM,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;KAC9D,MAAM,CAAC,iCAAiC,EAAE,iCAAiC,CAAC;KAC5E,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE;IACpC,IAAI;QACF,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAA;QAEjC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE;YAC3B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;SACnD;QAED,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC,EAAE;YACpF,MAAM,IAAI,KAAK,CAAC,sJAAsJ,CAAC,CAAA;SACxK;QAED,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;QACnE,IAAI,OAAO,CAAC,QAAQ,EAAE;YACpB,QAAQ,CAAC,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAA;SAC/C;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAA;QAEhJ,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;QACzD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;KACzB;IAAC,OAAO,KAAK,EAAE;QACd,IAAI,KAAK,YAAY,KAAK,EAAE;YAC1B,OAAO,CAAC,KAAK,CAAC,6BAA6B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;SAC5D;QACD,IAAI,CAAC,CAAC,CAAC,CAAA;KACR;AACH,CAAC,CAAC,CAAA;AAEJ,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC;KACnC,WAAW,CAAC,oCAAoC,CAAC;KACjD,QAAQ,CAAC,cAAc,EAAE,2DAA2D,CAAC;KACrF,MAAM,CAAC,uCAAuC,EAAE,kEAAkE,CAAC;KACnH,MAAM,CAAC,mCAAmC,EAAE,mCAAmC,CAAC;KAChF,MAAM,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;KAC9D,MAAM,CAAC,iCAAiC,EAAE,iCAAiC,CAAC;KAC5E,MAAM,CAAC,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,CAAC;KACtE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE;IACpC,IAAI;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE;YACzD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;SAC9D;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAA;QAEjC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE;YAC3B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;SACnD;QAED,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC,EAAE;YACpF,MAAM,IAAI,KAAK,CAAC,0JAA0J,CAAC,CAAA;SAC5K;QAED,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;QACnE,IAAI,OAAO,CAAC,QAAQ,EAAE;YACpB,QAAQ,CAAC,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAA;SAC/C;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAA;QAEhJ,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAE7D,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE;YAC5B,OAAO,CAAC,GAAG,CAAC,4BAA4B,WAAW,CAAC,WAAW,EAAE,CAAC,CAAA;YAClE,OAAO,CAAC,GAAG,CAAC,gCAAgC,WAAW,CAAC,eAAe,EAAE,CAAC,CAAA;YAC1E,OAAO,CAAC,GAAG,CAAC,4BAA4B,WAAW,CAAC,YAAY,EAAE,CAAC,CAAA;SACpE;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACzB,GAAG,WAAW;gBACd,OAAO,EAAE,CAAC,CAAC,+EAA+E;aAC3F,CAAC,CAAC,CAAA;SACJ;KACF;IAAC,OAAO,KAAK,EAAE;QACd,IAAI,KAAK,YAAY,KAAK,EAAE;YAC1B,OAAO,CAAC,KAAK,CAAC,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;SACjE;QACD,IAAI,CAAC,CAAC,CAAC,CAAA;KACR;AACH,CAAC,CAAC,CAAA;AAEJ,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC;KAC/B,WAAW,CAAC,wCAAwC,CAAC;KACrD,QAAQ,CAAC,cAAc,EAAE,2DAA2D,CAAC;KACrF,MAAM,CAAC,uCAAuC,EAAE,kEAAkE,CAAC;KACnH,MAAM,CAAC,mCAAmC,EAAE,mCAAmC,CAAC;KAChF,MAAM,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;KAC9D,MAAM,CAAC,iCAAiC,EAAE,iCAAiC,CAAC;KAC5E,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE;IACpC,IAAI;QACF,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAA;QAEjC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE;YAC3B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;SACnD;QAED,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC,EAAE;YACpF,MAAM,IAAI,KAAK,CAAC,0JAA0J,CAAC,CAAA;SAC5K;QAED,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;QACnE,IAAI,OAAO,CAAC,QAAQ,EAAE;YACpB,QAAQ,CAAC,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAA;SAC/C;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAA;QAEhJ,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAA;QACjE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAA;KACzC;IAAC,OAAO,KAAK,EAAE;QACd,IAAI,KAAK,YAAY,KAAK,EAAE;YAC1B,OAAO,CAAC,KAAK,CAAC,sCAAsC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;SACrE;QACD,IAAI,CAAC,CAAC,CAAC,CAAA;KACR;AACH,CAAC,CAAC,CAAA;AAEJ,KAAK,OAAO,CAAC,UAAU,EAAE,CAAA"}

package/dist/logging.js

@@ -0,0 +1,18 @@
+import { Logger } from 'tslog';
+/**
+ * The logger instance. Use this to log messages.
+ */
+export const logger = new Logger({
+    overwrite: {
+        transportFormatted(logMetaMarkup, logArgs, logErrors, settings) {
+            console.error(`${logMetaMarkup} ${logArgs.join('')} ${logErrors.join('')}`);
+        }
+    }
+});
+/**
+ * Set the log level. We use 0 and 10.
+ */
+export function setLogLevel(level) {
+    logger.settings.minLevel = level;
+}
+//# sourceMappingURL=logging.js.map

package/dist/logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../src/logging.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,CAAA;AAE9B;;GAEG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;IAC/B,SAAS,EAAE;QACT,kBAAkB,CAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ;YAC7D,OAAO,CAAC,KAAK,CAAC,GAAG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAC7E,CAAC;KACF;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,UAAU,WAAW,CAAE,KAAa;IACxC,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAA;AAClC,CAAC"}

package/dist/secret_store.js

@@ -0,0 +1,79 @@
+import { promises as fs } from 'fs';
+import { join } from 'path';
+import { randomBytes, createCipheriv, createDecipheriv, scryptSync } from 'crypto';
+import { homedir } from 'os';
+import { logger } from './logging.js';
+const filePath = process.env.METAPLAY_AUTH_FILE ?? join(homedir(), '.metaplay_auth.json');
+const algorithm = 'aes-256-cbc';
+const password = process.env.METAPLAY_AUTH_PASSWORD ?? '';
+const salt = process.env.METAPLAY_AUTH_SALT ?? 'saltysalt';
+async function loadSecrets() {
+    try {
+        logger.debug(`Loading secrets from ${filePath}...`);
+        await fs.access(filePath);
+        const data = await fs.readFile(filePath, 'utf8');
+        // if password is not provided, treat as unencrypted
+        if (password.length === 0) {
+            logger.debug('No password provided. Treating as unencrypted.');
+            return JSON.parse(data);
+        }
+        logger.debug('Decrypting data...');
+        const decryptedData = decrypt(data);
+        return JSON.parse(decryptedData);
+    }
+    catch (error) {
+        const nodeError = error;
+        if (nodeError.code === 'ENOENT') {
+            // file does not exist, just revert to an empty object
+            return {};
+        }
+        if (password.length === 0) {
+            throw new Error('The file is encrypted. Please set the METAPLAY_AUTH_PASSWORD environment variable.');
+        }
+        throw error;
+    }
+}
+function encrypt(text) {
+    const key = scryptSync(password, salt, 32);
+    const iv = randomBytes(16); // Generate a 16-byte IV
+    const cipher = createCipheriv(algorithm, key, iv);
+    const encrypted = Buffer.concat([cipher.update(text), cipher.final()]);
+    return iv.toString('hex') + ':' + encrypted.toString('hex'); // Store IV with the encrypted data
+}
+function decrypt(text) {
+    const textParts = text.split(':');
+    if (textParts.length !== 2) {
+        throw new Error('Invalid encrypted data format.');
+    }
+    const iv = Buffer.from(textParts[0], 'hex');
+    if (iv.length !== 16) { // Ensure the IV is 16 bytes
+        throw new Error('Invalid IV length.');
+    }
+    const encryptedText = Buffer.from(textParts[1], 'hex');
+    const key = scryptSync(password, salt, 32);
+    const decipher = createDecipheriv(algorithm, key, iv);
+    const decrypted = Buffer.concat([decipher.update(encryptedText), decipher.final()]);
+    return decrypted.toString();
+}
+export async function setSecret(key, value) {
+    logger.debug(`Setting secret ${key}...`);
+    const secrets = await loadSecrets();
+    secrets[key] = value;
+    const secretJson = JSON.stringify(secrets);
+    const content = password.length !== 0 ? encrypt(secretJson) : secretJson;
+    await fs.writeFile(filePath, content);
+}
+export async function getSecret(key) {
+    logger.debug(`Getting secret ${key}...`);
+    const secrets = await loadSecrets();
+    return secrets[key];
+}
+export async function removeSecret(key) {
+    logger.debug(`Removing secret ${key}...`);
+    const currentSecrets = await loadSecrets();
+    const { [key]: _, ...secrets } = currentSecrets; // remove key from secrets
+    const secretJson = JSON.stringify(secrets);
+    const content = password.length !== 0 ? encrypt(secretJson) : secretJson;
+    await fs.writeFile(filePath, content);
+}
+//# sourceMappingURL=secret_store.js.map

package/dist/secret_store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret_store.js","sourceRoot":"","sources":["../src/secret_store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAA;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAA;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAErC,MAAM,QAAQ,GAAW,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,qBAAqB,CAAC,CAAA;AACjG,MAAM,SAAS,GAAG,aAAa,CAAA;AAC/B,MAAM,QAAQ,GAAW,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAA;AACjE,MAAM,IAAI,GAAW,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,WAAW,CAAA;AAIlE,KAAK,UAAU,WAAW;IACxB,IAAI;QACF,MAAM,CAAC,KAAK,CAAC,wBAAwB,QAAQ,KAAK,CAAC,CAAA;QAEnD,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QACzB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAEhD,oDAAoD;QACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;YACzB,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAA;YAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;SACxB;QAED,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;QAClC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAEnC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;KACjC;IAAC,OAAO,KAAK,EAAE;QACd,MAAM,SAAS,GAAG,KAA8B,CAAA;QAChD,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE;YAC/B,sDAAsD;YACtD,OAAO,EAAE,CAAA;SACV;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;YACzB,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAA;SACtG;QACD,MAAM,KAAK,CAAA;KACZ;AACH,CAAC;AAED,SAAS,OAAO,CAAE,IAAY;IAC5B,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1C,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA,CAAC,wBAAwB;IACnD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IACjD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACtE,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA,CAAC,mCAAmC;AACjG,CAAC;AAED,SAAS,OAAO,CAAE,IAAY;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE;QAC1B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;KAClD;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC3C,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,EAAE,EAAE,4BAA4B;QAClD,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;KACtC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACtD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACnF,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAA;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAE,GAAW,EAAE,KAAa;IACzD,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC,CAAA;IAExC,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAA;IACnC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IACpB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAA;IACxE,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAE,GAAW;IAC1C,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC,CAAA;IAExC,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAA;IACnC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAA;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAE,GAAW;IAC7C,MAAM,CAAC,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,CAAA;IAEzC,MAAM,cAAc,GAAG,MAAM,WAAW,EAAE,CAAA;IAC1C,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,cAAc,CAAA,CAAC,0BAA0B;IAE1E,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAA;IACxE,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;AACvC,CAAC"}

package/dist/stackapi.js

@@ -0,0 +1,116 @@
+import { isValidFQDN, getGameserverAdminUrl } from './utils.js';
+import { logger } from './logging.js';
+export class StackAPI {
+    id_token;
+    access_token;
+    _stack_api_base_uri;
+    constructor(idToken, accessToken) {
+        if (idToken == null) {
+            throw new Error('id_token is missing');
+        }
+        if (accessToken == null) {
+            throw new Error('access_token is missing');
+        }
+        this.id_token = idToken;
+        this.access_token = accessToken;
+        this._stack_api_base_uri = 'https://infra.p1.metaplay.io/stackapi';
+    }
+    get stack_api_base_uri() {
+        return this._stack_api_base_uri.replace(/\/$/, '');
+    }
+    set stack_api_base_uri(uri) {
+        uri = uri.replace(/\/$/, ''); // Remove trailing slash
+        this._stack_api_base_uri = uri;
+    }
+    async getAwsCredentials(gs) {
+        let url = '';
+        if (gs.gameserver != null) {
+            if (isValidFQDN(gs.gameserver)) {
+                const adminUrl = getGameserverAdminUrl(gs.gameserver);
+                url = `https://${adminUrl}/.infra/credentials/aws`;
+            }
+            else {
+                url = `${this.stack_api_base_uri}/v0/credentials/${gs.gameserver}/aws`;
+            }
+        }
+        else if (gs.organization != null && gs.project != null && gs.environment != null) {
+            url = `${this.stack_api_base_uri}/v1/servers/${gs.organization}/${gs.project}/${gs.environment}/credentials/aws`;
+        }
+        else {
+            throw new Error('Invalid arguments for getAwsCredentials');
+        }
+        logger.debug(`Getting AWS credentials from ${url}...`);
+        const response = await fetch(url, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${this.id_token}`,
+                'Content-Type': 'application/json'
+            }
+        });
+        if (response.status !== 200) {
+            throw new Error(`Failed to fetch AWS credetials: ${response.statusText}`);
+        }
+        return await response.json();
+    }
+    async getKubeConfig(gs) {
+        let url = '';
+        if (gs.gameserver != null) {
+            if (isValidFQDN(gs.gameserver)) {
+                const adminUrl = getGameserverAdminUrl(gs.gameserver);
+                url = `https://${adminUrl}/.infra/credentials/k8s`;
+            }
+            else {
+                url = `${this.stack_api_base_uri}/v0/credentials/${gs.gameserver}/k8s`;
+            }
+        }
+        else if (gs.organization != null && gs.project != null && gs.environment != null) {
+            url = `${this.stack_api_base_uri}/v1/servers/${gs.organization}/${gs.project}/${gs.environment}/credentials/k8s`;
+        }
+        else {
+            throw new Error('Invalid arguments for getKubeConfig');
+        }
+        logger.debug(`Getting KubeConfig from ${url}...`);
+        const response = await fetch(url, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${this.id_token}`,
+                'Content-Type': 'application/json'
+            }
+        });
+        if (response.status !== 200) {
+            throw new Error(`Failed to fetch KubeConfigs: ${response.statusText}`);
+        }
+        return await response.text();
+    }
+    async getEnvironmentDetails(gs) {
+        let url = '';
+        if (gs.gameserver != null) {
+            if (isValidFQDN(gs.gameserver)) {
+                const adminUrl = getGameserverAdminUrl(gs.gameserver);
+                url = `https://${adminUrl}/.infra/environment`;
+            }
+            else {
+                url = `${this.stack_api_base_uri}/v0/deployments/${gs.gameserver}`;
+            }
+        }
+        else if (gs.organization != null && gs.project != null && gs.environment != null) {
+            url = `${this.stack_api_base_uri}/v1/servers/${gs.organization}/${gs.project}/${gs.environment}`;
+        }
+        else {
+            throw new Error('Invalid arguments for environment details');
+        }
+        logger.debug(`Getting environment details from ${url}...`);
+        const response = await fetch(url, {
+            method: 'GET',
+            headers: {
+                Authorization: `Bearer ${this.id_token}`,
+                'Content-Type': 'application/json'
+            }
+        });
+        if (response.status !== 200) {
+            throw new Error(`Failed to fetch environment details: ${response.statusText}`);
+        }
+        return await response.json();
+    }
+}
+//# sourceMappingURL=stackapi.js.map

package/dist/stackapi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stackapi.js","sourceRoot":"","sources":["../src/stackapi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAgBrC,MAAM,OAAO,QAAQ;IACF,QAAQ,CAAQ;IAChB,YAAY,CAAQ;IAE7B,mBAAmB,CAAQ;IAEnC,YAAa,OAAsB,EAAE,WAA0B;QAC7D,IAAI,OAAO,IAAI,IAAI,EAAE;YACnB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;SACvC;QACD,IAAI,WAAW,IAAI,IAAI,EAAE;YACvB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;SAC3C;QAED,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAA;QAC/B,IAAI,CAAC,mBAAmB,GAAG,uCAAuC,CAAA;IACpE,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACpD,CAAC;IAED,IAAI,kBAAkB,CAAE,GAAW;QACjC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA,CAAC,wBAAwB;QACrD,IAAI,CAAC,mBAAmB,GAAG,GAAG,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAE,EAAgB;QACvC,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,IAAI,EAAE,CAAC,UAAU,IAAI,IAAI,EAAE;YACzB,IAAI,WAAW,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE;gBAC9B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,EAAE,CAAC,UAAU,CAAC,CAAA;gBACrD,GAAG,GAAG,WAAW,QAAQ,yBAAyB,CAAA;aACnD;iBAAM;gBACL,GAAG,GAAG,GAAG,IAAI,CAAC,kBAAkB,mBAAmB,EAAE,CAAC,UAAU,MAAM,CAAA;aACvE;SACF;aAAM,IAAI,EAAE,CAAC,YAAY,IAAI,IAAI,IAAI,EAAE,CAAC,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,IAAI,IAAI,EAAE;YAClF,GAAG,GAAG,GAAG,IAAI,CAAC,kBAAkB,eAAe,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,WAAW,kBAAkB,CAAA;SACjH;aAAM;YACL,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;SAC3D;QAED,MAAM,CAAC,KAAK,CAAC,gCAAgC,GAAG,KAAK,CAAC,CAAA;QACtD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE;gBACxC,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAA;QAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE;YAC3B,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;SAC1E;QAED,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,aAAa,CAAE,EAAgB;QACnC,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,IAAI,EAAE,CAAC,UAAU,IAAI,IAAI,EAAE;YACzB,IAAI,WAAW,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE;gBAC9B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,EAAE,CAAC,UAAU,CAAC,CAAA;gBACrD,GAAG,GAAG,WAAW,QAAQ,yBAAyB,CAAA;aACnD;iBAAM;gBACL,GAAG,GAAG,GAAG,IAAI,CAAC,kBAAkB,mBAAmB,EAAE,CAAC,UAAU,MAAM,CAAA;aACvE;SACF;aAAM,IAAI,EAAE,CAAC,YAAY,IAAI,IAAI,IAAI,EAAE,CAAC,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,IAAI,IAAI,EAAE;YAClF,GAAG,GAAG,GAAG,IAAI,CAAC,kBAAkB,eAAe,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,WAAW,kBAAkB,CAAA;SACjH;aAAM;YACL,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;SACvD;QAED,MAAM,CAAC,KAAK,CAAC,2BAA2B,GAAG,KAAK,CAAC,CAAA;QAEjD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE;gBACxC,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAA;QAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE;YAC3B,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;SACvE;QAED,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAE,EAAgB;QAC3C,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,IAAI,EAAE,CAAC,UAAU,IAAI,IAAI,EAAE;YACzB,IAAI,WAAW,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE;gBAC9B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,EAAE,CAAC,UAAU,CAAC,CAAA;gBACrD,GAAG,GAAG,WAAW,QAAQ,qBAAqB,CAAA;aAC/C;iBAAM;gBACL,GAAG,GAAG,GAAG,IAAI,CAAC,kBAAkB,mBAAmB,EAAE,CAAC,UAAU,EAAE,CAAA;aACnE;SACF;aAAM,IAAI,EAAE,CAAC,YAAY,IAAI,IAAI,IAAI,EAAE,CAAC,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,IAAI,IAAI,EAAE;YAClF,GAAG,GAAG,GAAG,IAAI,CAAC,kBAAkB,eAAe,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;SACjG;aAAM;YACL,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;SAC7D;QAED,MAAM,CAAC,KAAK,CAAC,oCAAoC,GAAG,KAAK,CAAC,CAAA;QAC1D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE;gBACxC,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAA;QAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE;YAC3B,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;SAC/E;QAED,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;CACF"}

package/dist/utils.js

@@ -0,0 +1,60 @@
+export function stackApiBaseFromOptions(arg, options) {
+    return '';
+}
+/**
+ * Checks if the given string is a fully qualified domain name (FQDN).
+ *
+ * @param domain The domain name to check.
+ * @returns true if the domain is a valid FQDN, false otherwise.
+ */
+export function isValidFQDN(domain) {
+    const fqdnRegex = /^(?=.{1,253}$)(([a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,})$/;
+    return fqdnRegex.test(domain);
+}
+/**
+ * Splits an HTTP URL into its components: scheme, hostname, port, and subpaths.
+ *
+ * @param urlString The HTTP URL string to be split.
+ * @returns An object containing the scheme, hostname, port, and subpaths.
+ */
+export function splitUrlComponents(urlString) {
+    try {
+        const url = new URL(urlString);
+        // Extract the scheme (protocol without the ":"), hostname, and port
+        const scheme = url.protocol.slice(0, -1); // Removes the trailing ":"
+        const hostname = url.hostname;
+        const port = url.port ?? null;
+        // Extract subpaths (pathname) and remove the leading "/"
+        const subpaths = url.pathname.slice(1) ?? null;
+        return { scheme, hostname, port, subpaths };
+    }
+    catch (error) {
+        throw new Error('Invalid URL');
+    }
+}
+export function getGameserverAdminUrl(uri) {
+    const parts = uri.split('.');
+    const hostname = parts[0];
+    const domain = uri.substring(hostname.length + 1);
+    return `${hostname}-admin.${domain}`;
+}
+export function validateTokens(tokens) {
+    if (tokens.id_token == null) {
+        throw new Error('id_token is missing');
+    }
+    if (tokens.access_token == null) {
+        throw new Error('access_token is missing');
+    }
+    if (!isJwtTokenExpired(tokens.id_token)) {
+        throw new Error('id_token is expired');
+    }
+    return true;
+}
+function isJwtTokenExpired(token) {
+    const base64Url = token.split('.')[1];
+    const base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/');
+    const payload = JSON.parse(Buffer.from(base64, 'base64').toString());
+    const now = Math.floor(Date.now() / 1000);
+    return payload.exp > now;
+}
+//# sourceMappingURL=utils.js.map

package/dist/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,uBAAuB,CAAE,GAAW,EAAE,OAA4B;IAChF,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAE,MAAc;IACzC,MAAM,SAAS,GAAG,+EAA+E,CAAA;IAEjG,OAAO,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAE,SAAiB;IACnD,IAAI;QACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAA;QAE9B,oEAAoE;QACpE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,2BAA2B;QACpE,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAA;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,IAAI,CAAA;QAE7B,yDAAyD;QACzD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;QAE9C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;KAC5C;IAAC,OAAO,KAAK,EAAE;QACd,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;KAC/B;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAE,GAAW;IAChD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAE5B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACzB,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAEjD,OAAO,GAAG,QAAQ,UAAU,MAAM,EAAE,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,cAAc,CAAE,MAAqC;IACnE,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,EAAE;QAC3B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;KACvC;IACD,IAAI,MAAM,CAAC,YAAY,IAAI,IAAI,EAAE;QAC/B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;KAC3C;IAED,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;QACvC,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;KACvC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,iBAAiB,CAAE,KAAa;IACvC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACrC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;IAEpE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACzC,OAAO,OAAO,CAAC,GAAG,GAAG,GAAG,CAAA;AAC1B,CAAC"}