@mojaloop/sdk-scheme-adapter 12.0.1 → 12.2.0

package/Dockerfile

@@ -0,0 +1,35 @@
+FROM node:16-alpine as builder
+
+RUN apk add --no-cache git python3 build-base
+
+EXPOSE 3000
+
+WORKDIR /src
+
+# This is super-ugly, but it means we don't have to re-run npm install every time any of the source
+# files change- only when any dependencies change- which is a superior developer experience when
+# relying on docker-compose.
+COPY ./package.json .
+COPY ./package-lock.json .
+RUN npm ci --only=production
+FROM node:16-alpine
+
+ARG BUILD_DATE
+ARG VCS_URL
+ARG VCS_REF
+ARG VERSION
+
+# See http://label-schema.org/rc1/ for label schema info
+LABEL org.label-schema.schema-version="1.0"
+LABEL org.label-schema.name="sdk-scheme-adapter"
+LABEL org.label-schema.build-date=$BUILD_DATE
+LABEL org.label-schema.vcs-url=$VCS_URL
+LABEL org.label-schema.vcs-ref=$VCS_REF
+LABEL org.label-schema.url="https://mojaloop.io/"
+LABEL org.label-schema.version=$VERSION
+
+COPY --from=builder /src/ /src
+COPY ./src ./src
+COPY ./secrets /
+
+CMD ["node", "src/index.js"]

package/LICENSE.md

@@ -0,0 +1,10 @@
+# LICENSE
+
+Copyright © 2017 Bill & Melinda Gates Foundation
+
+The Mojaloop files are made available by the Bill & Melinda Gates Foundation under the Apache License, Version 2.0
+(the "License") and you may not use these files except in compliance with the [License](http://www.apache.org/licenses/LICENSE-2.0). You may obtain a copy of the License at
+
+[http://www.apache.org/licenses/LICENSE-2.0](http://www.apache.org/licenses/LICENSE-2.0)
+
+Unless required by applicable law or agreed to in writing, the Mojaloop files are distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the [License](http://www.apache.org/licenses/LICENSE-2.0).

package/PROXY.md

@@ -0,0 +1,84 @@
+### SDK Proxy Configuration
+
+The SDK Proxy allows a DFSP to use the same outbound SDK endpoint for talking to a DFSP through the Mojaloop API and to a non-Mojaloop (custom) REST API exposed by the Mojaloop Hub. For example:
+* to issue a Mojaloop transfer request, a DFSP would call: `http://local.sdk-adapter.com:4001/transfers`
+* to issue a request to a custom API, a DFSP would call: `http://local.sdk-adapter.com:4001/customservice`
+
+To be able to connect to a custom API, the DFSP must:
+
+1. Define API endpoint information in a Proxy configuration YAML file.
+2. Specify the location of the configuration file in the environment variable `PROXY_CONFIG_PATH`.
+3. Map the configuration file into the container at runtime.
+
+The configuration file is structured as follows:
+```yaml
+version: 1.0
+routes:
+  - description: 'Routing by URL path as string'
+    match:
+      - path: /sdk-path-1
+      - path: /sdk-other-path-1
+    destination:
+      path: /switch-path-1
+
+  - description: 'Routing by URL path as regexp'
+    match:
+      - path: ~ ^\/sdk-.*2$
+    destination:
+      path: /switch-path-2
+
+  - description: 'Routing by query and headers params with regexp'
+    match:
+      - path: /sdk-custom-api
+        headers:
+          - name: CustomHeader
+            value: ~ *
+        query:
+          - key: customQueryKey
+            value: Value1
+          - key: ~ query.*Special
+            value: ~ val.*2
+    destination:
+      path: /switch-path-3
+
+```
+
+#### Elements of configuration file
+
+* `version` **(required)** - Must be set to `1.0`.
+
+* `routes` **(required)** - Must contain an array of routes, that is, endpoint mappings with corresponding forwarding rules.
+
+##### Routes
+
+* `description` **(optional)** - User description of route.
+
+* `match` **(required)** - Must contain one or more forwarding rules that will be applied to incoming requests.
+A request will be forwarded to the `destination` if **ANY** of the rules match the request.
+
+* `destination` **(required)** - The endpoint that the SDK Proxy should forward requests to.
+
+##### Forwarding rules
+
+There must be at least one forwarding rule defined in `match`, additional rules are optional.
+
+A forwarding rule value can be defined as a plain string or a regular expression.
+
+When using a regular expression, the value must be prefixed with the tilde symbol (`~`) and a space, for example:
+```
+~ customVal.*
+
+~ ^\/api\/common\/.*\/v1$
+```
+
+A forwarding rule is applied by the SDK Proxy when **ALL** of the items inside the rule match the corresponding request parameters (such as an endpoint URL, or HTTP request headers, or query parameters). You can define rules about request parameters using the following elements in the configuration file:
+
+* `path` - used to match a URL path
+
+* `headers` - array of `name`/`value` pairs used to match HTTP request headers:
+    * `name` - HTTP header name
+    * `value` - HTTP header value
+
+* `query` - array of `key`/`value` pairs used to match HTTP query parameters:
+    * `key` - HTTP query key
+    * `value` - HTTP query value

package/README.md

@@ -0,0 +1,228 @@
+[![Git Commit](https://img.shields.io/github/last-commit/mojaloop/sdk-scheme-adapter.svg?style=flat)](https://github.com/mojaloop/sdk-scheme-adapter/commits/master)
+[![Git Releases](https://img.shields.io/github/release/mojaloop/sdk-scheme-adapter.svg?style=flat)](https://github.com/mojaloop/sdk-scheme-adapter/releases)
+[![Npm Version](https://img.shields.io/npm/v/@mojaloop/sdk-scheme-adapter.svg?style=flat)](https://www.npmjs.com/package/@mojaloop/sdk-scheme-adapter)
+[![NPM Vulnerabilities](https://img.shields.io/snyk/vulnerabilities/npm/@mojaloop/sdk-scheme-adapter.svg?style=flat)](https://www.npmjs.com/package/@mojaloop/sdk-scheme-adapter)
+[![CircleCI](https://circleci.com/gh/mojaloop/sdk-scheme-adapter.svg?style=svg)](https://circleci.com/gh/mojaloop/sdk-scheme-adapter)
+
+# Mojaloop SDK Scheme Adapter
+
+This package provides a scheme adapter that interfaces between a Mojaloop API compliant switch and a DFSP backend platform that does not natively implement the Mojaloop API.
+
+The API between the scheme adapter and the DFSP backend is synchronous HTTP while the interface between the scheme adapter and the switch is native Mojaloop API.
+
+This package exemplifies the use of the Mojaloop SDK Standard Components for TLS, JWS and ILP (available [here](http://www.github.com/mojaloop/sdk-standard-components)).
+
+For information on the background and context of this project please see the presentation [here](docs/Mojaloop%20-%20Modusbox%20Onboarding%20functionality.pdf)
+
+## DFSP Backend API
+
+DFSP backends must implement the [DFSP Inbound API](docs/dfspInboundApi.yaml) in order for the scheme adapter to make incoming transfers i.e. to receive funds to a customer account.
+
+DFSP backends can call the [DFSP Outbound API](/src/outboundApi/api.yaml) in order to make outgoing transfers i.e. to send funds from a customer account.
+
+## Docker Image
+
+This package is available as a pre-built docker image on Docker Hub: [https://hub.docker.com/r/mojaloop/sdk-scheme-adapter](https://hub.docker.com/r/mojaloop/sdk-scheme-adapter)
+
+## NPM Package
+
+Users who do not wish to use all the functionality of the scheme adapter as-is are able to import this package as a dependency into their own projects. The scheme adapter package is [published on npm](https://www.npmjs.com/package/@mojaloop/sdk-scheme-adapter) and exposes the following components for external use:
+
+- Inbound Server Middleware
+- Outbound Server Middleware
+- Request Router
+- Request Validation Framework
+- Unique Request Identifier Framework (RandomPhrase)
+- Logger
+- Distributed Cache Abstraction (uses REDIS as a backing service)
+
+## Quick Start
+
+The steps shown below illustrate setting up the Mojaloop SDK Scheme Adapter locally with a mock DFSP backend.
+
+This configuration is suitable as a starting point for DFSPs wishing to utilize the scheme adapter for integrating their backend systems with a Mojaloop API enabled switch.
+
+_Note that these instructions are for Linux based systems. For Mac and/or Windows you will need to translate the following for your environment._
+
+1. Make sure you have docker and docker-compose installed locally. See [https://docs.docker.com/v17.12/install/](https://docs.docker.com/v17.12/install/) and [https://docs.docker.com/compose/install/](https://docs.docker.com/compose/install/) respectively.
+1. Clone the Mojaloop SDK Mock DFSP Backend repository locally:
+
+   Change directory into your workspace then to clone using HTTPS:
+
+   ```bash
+   $ git clone https://github.com/mojaloop/sdk-mock-dfsp-backend.git
+   ```
+
+   or to clone using SSH:
+
+   ```bash
+   $ git clone git@github.com:mojaloop/sdk-mock-dfsp-backend.git
+   ```
+
+   Now change directory into the cloned repository directory:
+
+   ```bash
+   $ cd sdk-mock-dfsp-backend
+   ```
+
+1. Edit the scheme adapter configuration to point the scheme adapter at your Mojaloop API enabled switch or simulator:
+
+   Use your favourite text editor to edit the file `src/scheme-adapter.env`.
+   Change the value of the `PEER_ENDPOINT` variable to the DNS name or IP address and port number of your Mojaloop API enabled switch or simulator. Save the file.
+
+1. Use docker-compose to download and run the pre-built scheme-adapter, shared cache and mock DFSP backend containers locally:
+
+   Change directory into the `src` subfolder and run docker-compose
+
+   ```bash
+   $ cd src/
+   $ docker-compose up
+   ```
+
+   You should see docker download the pre-built docker images for the scheme adapter, shared cache (redis) and mock DFSP backend. Docker-compose will start the containers.
+
+1. Test the outbound (sending money) API:
+
+   Find the IP address of the mock DFSP backend container. To do this you can use...
+
+   ```bash
+   docker network ls
+   ```
+
+   to find the list of docker networks on your local machine. Identity the docker network created by docker-compose, docker-compose will assign a name based on the directory name from which you ran the `docker-compose up` command.
+
+   Once you have identified the network you can use...
+
+   ```bash
+   docker network inspect {network name}
+   ```
+
+   This will print a JSON structure to the terminal containing the set of containers in the network and their individual IP addresses.
+
+   Use the following command to tell the mock DFSP backend to initiate an outbound money transfer via the scheme-adapter:
+
+   _Dont forget to substitute in the correct IP address for the Mock DFSP Backend container_
+
+   ```bash
+   curl -X POST \
+     http://{MOCK Container IP Address}:3000/send \
+     -H 'Content-Type: application/json' \
+     -d '{
+       "from": {
+           "displayName": "John Doe",
+           "idType": "MSISDN",
+           "idValue": "123456789"
+       },
+       "to": {
+           "idType": "MSISDN",
+           "idValue": "987654321"
+       },
+       "amountType": "SEND",
+       "currency": "USD",
+       "amount": "100",
+       "transactionType": "TRANSFER",
+       "note": "test payment",
+       "homeTransactionId": "123ABC"
+   }'
+   ```
+
+   The response from the above call should indicate the result of the communication between the scheme-adapter and the Mojaloop API enabled switch or simulator.
+
+1. Speak to your switch operator or use your simulator to test the inbound (receiving money) API.
+
+You can now examine the code of the Mock DFSP backend to understand how it implements the scheme-adapter simplified inbound API.
+
+
+## Testing
+
+### Unit Tests
+
+Unit tests can be found in the `./src/test/unit` directory, and follow the same directory structure of the main project.
+
+Run the unit tests with the following (from `./src` dir):
+
+```bash
+npm run test
+```
+
+### Integration Tests
+
+```bash
+docker-compose -f docker-compose.yml build
+docker-compose -f docker-compose.yml up -d
+./docker/wait4/wait4.js cicd-integration-tests
+cd src
+npm run test:int
+cd ../
+docker-compose -f docker-compose.yml down
+
+# test report you can find in
+src/junit.xml
+```
+
+### Get status of quote request
+The status of a previously sent quotation request can be get by executing `GET /quotes/{ID}`.
+When the response to the original quote request is sent, the response is cached in the redis store. When a `GET /quotes/{ID}` is received,
+the cached response is retrieved from the redis store and returned to the caller as a body with `PUT /quotes/{ID}` request.
+When the redis is setup as a persistent store then it will return the response for all the quote requests sent with `POST /quotes`. If the the redis is setup as cache with expiry time then it will not return response for the expired quotes when the cache expires. Also only the payer dfsp is supposed to make the `GET /quotes/{ID}` request.
+If the quote response is not found in the redis store `PUT /quotes/{ID}` will be made with the following body
+```
+{
+   "errorInformation":{
+      "errorCode":"3205",
+      "errorDescription":"Quote ID not found"
+   }
+}
+```
+
+### Dev Tools
+This project uses @redocly/openapi-cli and @mojaloop/api-snippets to build interfaces.
+
+Any interface changes should be done in the corresponding `api-template.yaml`
+file and then rebuilt using the command below or the `build:openapi` scripts.
+
+```bash
+openapi bundle --output api.yaml --ext yaml api_template.yaml
+```
+
+To rebuild the inbound interface run
+
+```bash
+npm run build:openapi:inbound
+```
+
+To rebuild the outbound interface run
+
+```bash
+npm run build:openapi:outbound
+```
+
+## Automated Releases
+
+As part of our CI/CD process, we use a combination of CircleCI, standard-version
+npm package and github-release CircleCI orb to automatically trigger our releases
+and image builds. This process essentially mimics a manual tag and release.
+
+On a merge to master, CircleCI is configured to use the mojaloopci github account
+to push the latest generated CHANGELOG and package version number.
+
+Once those changes are pushed, CircleCI will pull the updated master, tag and
+push a release triggering another subsequent build that also publishes a docker image.
+
+### Potential problems
+
+*   There is a case where the merge to master workflow will resolve successfully, triggering
+    a release. Then that tagged release workflow subsequently failing due to the image scan,
+    audit check, vulnerability check or other "live" checks.
+
+    This will leave master without an associated published build. Fixes that require
+    a new merge will essentially cause a skip in version number or require a clean up
+    of the master branch to the commit before the CHANGELOG and bump.
+
+    This may be resolved by relying solely on the previous checks of the
+    merge to master workflow to assume that our tagged release is of sound quality.
+    We are still mulling over this solution since catching bugs/vulnerabilities/etc earlier
+    is a boon.
+
+*   It is unknown if a race condition might occur with multiple merges with master in
+    quick succession, but this is a suspected edge case.

package/SECURITY.md

@@ -0,0 +1,18 @@
+# Security Policy
+
+## Supported Versions
+
+All versions of this project are currently being supported with security updates.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 0.0.x   | :white_check_mark: |
+
+
+## Reporting a Vulnerability
+
+Please report any vulnerabilities you may discover privately, so as to not expose current users to unnecessary risk, by contacting the repository owner.
+
+Reports will be assessed by the development team and an impact assessment carried out as soon as possible.
+
+Further actions will be planned and communicated as deemed appropriate by the repository owner in order to minimise exposure of users to risk.

package/audit-resolve.json

@@ -414,6 +414,26 @@
       "decision": "ignore",
       "madeAt": 1649898257344,
       "expiresAt": 1652490250295
+    },
+    "1070030|@mojaloop/central-services-shared>widdershins>markdown-it": {
+      "decision": "ignore",
+      "madeAt": 1650460940438,
+      "expiresAt": 1653052932045
+    },
+    "1070030|@mojaloop/central-services-shared>shins>markdown-it": {
+      "decision": "ignore",
+      "madeAt": 1650459472663,
+      "expiresAt": 1653051469252
+    },
+    "1068154|@mojaloop/central-services-shared>shins>sanitize-html": {
+      "decision": "ignore",
+      "madeAt": 1650459474362,
+      "expiresAt": 1653051469252
+    },
+    "1068155|@mojaloop/central-services-shared>shins>sanitize-html": {
+      "decision": "ignore",
+      "madeAt": 1650459475376,
+      "expiresAt": 1653051469252
     }
   },
   "rules": {},

package/docker/ml-testing-toolkit/secrets/keygen.sh

@@ -0,0 +1,5 @@
+#openssl genrsa -des3 -out privatekey.pem 2048
+openssl genrsa -out privatekey.pem 2048
+openssl req -new -x509 -key privatekey.pem -out publickey.cer -days 1825 -subj "/CN=testingtoolkitdfsp/C=US/ST=Ohio/L=Columbus/O=Testing Toolkit/OU=Payments"
+#openssl rsa -in privatekey.pem -pubout -out publickey.cer
+#openssl rsa -in privatekey.pem -out privatekey.pem

package/docker/ml-testing-toolkit/secrets/privatekey.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEpQIBAAKCAQEAwczEjlUeOPutgPRlpZSbcbJJwsmmxsBfoPDw1sjBiR7L6Doh
+VqKd810+TmiDRYgCzOLabje/mtLiDC95MtuPF5yUiVE04ar6Ny5pZLxJEnbDEOAE
+TxOn1gzCKeRHYOcgybDi6TLhnvyFyIaXKzyBhEYvxI8VvRV11UawLqvpgVrdsbZy
+1FQOMLq7OB+J6qC7fhR61F6Wu45RZlZMB482c658P7dCQCdQtEMEF5kuBNB/JuUR
+e0qKjl2udKVL3wgBC7J7o7Tx8kY5T63q/ZC3TfoTclFeXtIePt8Eu74u3d6WpSWb
+Z12mewRBVPtmbGHgEXpih3uayaqIeC8Dc4zO5QIDAQABAoIBAQCPMGJR36YS6DGL
+xAeOTbyERvykxSVKWDzPxvXLXE1SqMRz8u9K+Z/GfjBY8nN7XkDjbQGCygHxvLpz
+0me0IfEZuwEsbCmsSw3Q06PfYBaFY+ZAg6PrYVRynL6hAR+UA3GAVAdz0bpOI7od
+LQRoV65CMzF8A1RGfqKvUClAcph2j4lbjjRZ1OExDdcbRCI4h9qgGOMo9o9OEB1X
+HHiPhtS1ZwjczqCyJHkkHbOgYNPN7SDy8vHFOVjMDIADF+S/NLrxGUUIUDvNMnGV
+D4G8thQD2zSatMjlbJJ+oNt++T/SJMSIiuQTB5zy/KpiMPUN+AXhq5h/dHDcFXhA
+ng2deEcJAoGBAOQr1g/s/3V32tQpYloTMOPqIJoVnZnlcXbKy3nWLuOrkVlM0x3V
+AEwC7ntb2eOSQ331AvBd/EESgtZr1jvxfsHG+MjwEylcOE33g4MqCKthGcnFA8zG
+Z5h6OqTtHdY1bmuiisPvBA4/x2o7mWJz35vT0Sny3cci3f2D6pmPpuq3AoGBANlv
+wjWgeDQSR8nTdM1P7zepVdN51f8Fl3r49kMhceVHdwL5iL7q4GkxUgpCyBkFoElW
+vmsLgR1fnb+qBtF2kvljQtlRrlgwz1GgYNhp+aAgcAjvQ9fQcvCLr1leXzf6VBHx
+jXEIUAlAJVlJ5gWKlDNK9ytjurOvOXipRC4GQKdDAoGBALNOt6RATOjVTYSZGQ9M
+MYmKPiCYiAeexbHi4FBYvvRvqYOR2f6BmwAg9aS/o9Uw5hUf7DVUxp2knGlAyVTG
+DSTe5jeSYpyIOj8bGaCD8dgsMIXda4ULDfJHa7qcFGx4BNRVIdOkC33fJSkYuQsj
+oD/nD2J1109c2TMW7c/LkhK1AoGAUD8xws7tbfJNMkxrMBbPJ5DETx8I/myW4lid
+slrWiRLd9mgXsrZGiiwcphLNfIaaCFcOQb1mMmwGcSUUDRwg1A9xLXk6yeuBqBNz
+iotaCGHQV0vOkwioUuSKm4X7yFIH0vN+CvhRaYiWACUI0oS5e1CwdgABeK0znbeC
+pSXDmLcCgYEA1ls595Ue5cUCmFDvpCIifsATNOMPguKeFuPbYSItQod3P3Bj6txV
+phe0jUtWPhIF3I0XOtea2Usvbrj64GMNWLaeK2pdsbIWBlsu2tuqaAfKYiGpGCAh
+QWGAPwZ4w7Z3nmA6IhaD6zUnzBGserHv59XttKK0AiQwYMn6UvUIq0M=
+-----END RSA PRIVATE KEY-----

package/docker/ml-testing-toolkit/secrets/publickey.cer

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

package/docker/ml-testing-toolkit/secrets/tls/createSecrets.sh

@@ -0,0 +1,29 @@
+OUTPUT_DIR="."
+
+rm *.key *.pem *.csr *.crt *.srl
+
+## Generating Server CA certificate
+openssl genrsa -out "$OUTPUT_DIR/hub_server_cakey.key" 4096
+openssl req -new -sha256 -config openssl.conf -nodes -x509 -days 10000 -extensions v3_ca -key "$OUTPUT_DIR/hub_server_cakey.key" -out "$OUTPUT_DIR/hub_server_cacert.pem" -subj '/CN=hubserverca/C=US/ST=Ohio/L=Columbus/O=Hub Server CA/OU=Payments'
+
+## Generate server key
+openssl genrsa -out "$OUTPUT_DIR/hub_server_key.key" 4096
+
+## Generate server csr
+openssl req -new -sha256 -config openssl.conf -key hub_server_cakey.key -subj "/C=US/ST=CA/O=Hub Server/CN=mojaloop-testing-toolkit" -out hub_server.csr
+
+## Sign server cert
+openssl x509 -req -days 3650 -sha256 -extfile openssl.conf -extensions v3_req -in hub_server.csr -signkey hub_server_key.key  -CA hub_server_cacert.pem -CAkey hub_server_cakey.key -CAcreateserial -out hub_server_cert.pem
+
+## Generating Client CA certificate
+openssl genrsa -out "$OUTPUT_DIR/hub_client_cakey.key" 4096
+openssl req -new -sha256 -config openssl.conf -nodes -x509 -days 10000 -extensions v3_ca -key "$OUTPUT_DIR/hub_client_cakey.key" -out "$OUTPUT_DIR/hub_client_cacert.pem" -subj '/CN=hubclientca/C=US/ST=Ohio/L=Columbus/O=Hub Client CA/OU=Payments'
+
+## Generate client key
+openssl genrsa -out "$OUTPUT_DIR/hub_client_key.key" 4096
+
+## Generate client csr
+openssl req -new -sha256 -key hub_client_key.key -out "$OUTPUT_DIR/hub_client.csr" -subj '/CN=hubclient/C=US/ST=Ohio/L=Columbus/O=Hub Client/OU=Payments/emailAddress=admin@hubclient.com'
+
+
+#openssl x509 -in hub_server_cert.pem -text -noout

package/docker/ml-testing-toolkit/secrets/tls/hub_client.csr

@@ -0,0 +1,28 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

package/docker/ml-testing-toolkit/secrets/tls/hub_client_cacert.pem

@@ -0,0 +1,32 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

package/docker/ml-testing-toolkit/secrets/tls/hub_client_cakey.key

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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==
+-----END RSA PRIVATE KEY-----

package/docker/ml-testing-toolkit/secrets/tls/hub_client_key.key

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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=
+-----END RSA PRIVATE KEY-----