@tomei/sso 0.65.1-test.1 → 0.65.1

package/.gitlab-ci.yml

@@ -1,83 +1,31 @@
-# ============================================================
-# .gitlab-ci.yml — npm package with trusted publishing (OIDC)
-#
-# Project path: all-tomei-projects/tomei-package/General/<package-name>
-#
-# Tag patterns:
-#   test-vX.Y.Z-rc.N     → npm publish --tag test    (RC for test env)
-#   staging-vX.Y.Z-rc.N  → npm publish --tag staging (RC for staging env)
-#   prod-vX.Y.Z          → npm publish --tag latest  (production, manual gate)
-#   prod-vX.Y.Z-hotfix.N → npm publish --tag latest  (hotfix, manual gate)
-#
-# No NPM_TOKEN secret needed — OIDC trusted publishing only.
-#
-# Required CI/CD variables (Settings → CI/CD → Variables):
-#   DISCORD_WEBHOOK  — Discord incoming webhook URL (masked)
-#
-# npm side setup required (npmjs.com):
-#   1. package.json → publishConfig.provenance: true
-#   2. npmjs.com → package Settings → Publishing Access
-#      → Enable OIDC publishing for GitLab project:
-#        all-tomei-projects/tomei-package/General/<package-name>
-# ============================================================
-default:
-  image: node:20-alpine
-  tags:
-    - shared
+variables:
+  SONAR_USER_HOME: "${CI_PROJECT_DIR}/.sonar"  # Defines the location of the analysis task cache
+  GIT_DEPTH: "0"  # Tells git to fetch all the branches of the project, required by the analysis task
 
 stages:
-  - validate
   - build
   - publish
-  - notify
 
-# ────────────────────────────────────────────────────────────
-# STAGE: validate
-# Runs lint and unit tests before publish
-# Skipped on prod tags — code already validated on test + staging
-# ────────────────────────────────────────────────────────────
-lint:
-  stage: validate
+sonarcloud-check:
+  stage: build
+  image:
+    name: sonarsource/sonar-scanner-cli:latest
+    entrypoint: [""]
   cache:
-    key: node-$CI_COMMIT_REF_SLUG
-    paths: [node_modules/]
+    key: "${CI_JOB_NAME}"
+    paths:
+      - .sonar/cache
   script:
-    - npm ci
-    - npm run lint
-  rules:
-    - if: '$CI_COMMIT_TAG =~ /^test-v/'
-    - if: '$CI_COMMIT_TAG =~ /^staging-v/'
+    - sonar-scanner
+  only:
+    - merge_requests
+    - main
 
-unit-test:
-  stage: validate
-  cache:
-    key: node-$CI_COMMIT_REF_SLUG
-    paths: [node_modules/]
-  script:
-    - npm ci
-    - npm test
-  coverage: '/Lines\s*:\s*(\d+\.?\d*)%/'
-  artifacts:
-    reports:
-      coverage_report:
-        coverage_format: cobertura
-        path: coverage/cobertura-coverage.xml
-    expire_in: 7 days
-  rules:
-    - if: '$CI_COMMIT_TAG =~ /^test-v/'
-    - if: '$CI_COMMIT_TAG =~ /^staging-v/'
-
-# ────────────────────────────────────────────────────────────
-# STAGE: build
-# Compiles the package (tsc / rollup / whatever your build uses)
-# Artifacts passed to publish jobs
-# Runs on all tag patterns
-# ────────────────────────────────────────────────────────────
-build:
+package-build:
   stage: build
-  cache:
-    key: node-$CI_COMMIT_REF_SLUG
-    paths: [node_modules/]
+  image: node:20-alpine
+  tags:
+    - shared
   script:
     - npm ci
     - npm run build
@@ -86,152 +34,23 @@ build:
       - dist/
     expire_in: 1 hour
   rules:
-    - if: '$CI_COMMIT_TAG =~ /^test-v/'
-    - if: '$CI_COMMIT_TAG =~ /^staging-v/'
-    - if: '$CI_COMMIT_TAG =~ /^prod-v/'
-
-# ────────────────────────────────────────────────────────────
-# STAGE: publish — test RC
-# Triggered by: test-vX.Y.Z-rc.N tag
-# Publishes with dist-tag "test"
-# Consumers must opt in: npm install @tomei/pkg@test
-# Version stamped: test-v1.24.0-rc.1 → 1.24.0-rc.1
-# ────────────────────────────────────────────────────────────
-publish-test:
-  stage: publish
-  needs: [build]
-  rules:
-    - if: '$CI_COMMIT_TAG =~ /^test-v/'
-  script:
-    - echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ~/.npmrc
-    - cat ~/.npmrc  # verify .npmrc content
-    - |
-      RC_VERSION=$(echo "$CI_COMMIT_TAG" | sed 's/^test-v\([0-9.]*\)-rc\.\([0-9]*\)$/\1-test.\2/')
-      echo "Publishing version $RC_VERSION with dist-tag: test"
-      npm version "$RC_VERSION" --no-git-tag-version --ignore-scripts --force
-      npm publish --tag test --access public
-      echo "Published: @$(node -p "require('./package.json').name")@$RC_VERSION [test]"
-
-# ────────────────────────────────────────────────────────────
-# STAGE: publish — staging RC
-# Triggered by: staging-vX.Y.Z-rc.N tag
-# Publishes with dist-tag "staging"
-# Consumers must opt in: npm install @tomei/pkg@staging
-# Version stamped: staging-v1.24.0-rc.1 → 1.24.0-rc.1
-# ────────────────────────────────────────────────────────────
-publish-staging:
-  stage: publish
-  needs: [build]
-  rules:
-    - if: '$CI_COMMIT_TAG =~ /^staging-v/'
-  script:
-    - echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ~/.npmrc
-    - |
-      RC_VERSION=$(echo "$CI_COMMIT_TAG" | sed 's/^staging-v\([0-9.]*\)-rc\.\([0-9]*\)$/\1-staging.\2/')
-      echo "Publishing version $RC_VERSION with dist-tag: staging"
-      npm version "$RC_VERSION" --no-git-tag-version --ignore-scripts --force
-      npm publish --tag staging --access public
-      echo "Published: @$(node -p "require('./package.json').name")@$RC_VERSION [staging]"
+    - if: '$CI_COMMIT_TAG =~ /^prod-v[0-9]+\.[0-9]+\.[0-9]+(-retry\.[0-9]+)?$/'
 
-# ────────────────────────────────────────────────────────────
-# STAGE: publish — production
-# Triggered by: prod-vX.Y.Z or prod-vX.Y.Z-hotfix.N tag (from main only)
-# Publishes with dist-tag "latest" — becomes the default install version
-# Manual gate — human must click Play in GitLab pipeline UI
-# Version stamped: prod-v2.2.0 → 2.2.0 | prod-v2.2.0-hotfix.1 → 2.2.0-hotfix.1
-# ────────────────────────────────────────────────────────────
-publish-prod:
+package-publish:
   stage: publish
-  needs: [build]
+  image: node:20-alpine
+  tags:
+    - shared
+  needs:
+    - job: package-build
+      artifacts: true
   rules:
-    - if: '$CI_COMMIT_TAG =~ /^prod-v/'
+    - if: '$CI_COMMIT_TAG =~ /^prod-v[0-9]+\.[0-9]+\.[0-9]+(-retry\.[0-9]+)?$/'
       when: manual
       allow_failure: false
   script:
-    - echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ~/.npmrc
-    - |
-      PROD_VERSION=$(echo "$CI_COMMIT_TAG" | sed 's/^prod-v//')
-      echo "Publishing version $PROD_VERSION with dist-tag: latest"
-      npm version "$PROD_VERSION" --no-git-tag-version --ignore-scripts --force
-      npm publish --tag latest --access public
-      echo "Published: @$(node -p "require('./package.json').name")@$PROD_VERSION [latest]"
-      echo "Pipeline: $CI_PIPELINE_URL"
-
-# ────────────────────────────────────────────────────────────
-# STAGE: notify — success
-# ────────────────────────────────────────────────────────────
-notify-success:
-  stage: notify
-  image: curlimages/curl:latest
-  needs:
-    - job: publish-test
-      optional: true
-    - job: publish-staging
-      optional: true
-    - job: publish-prod
-      optional: true
-  rules:
-    - if: '$CI_COMMIT_TAG =~ /^test-v/'
-      when: on_success
-    - if: '$CI_COMMIT_TAG =~ /^staging-v/'
-      when: on_success
-    - if: '$CI_COMMIT_TAG =~ /^prod-v/'
-      when: on_success
-  script:
-    - |
-      if echo "$CI_COMMIT_TAG" | grep -q "^test-v"; then
-        DIST_TAG="test"
-        COLOR=3066993
-      elif echo "$CI_COMMIT_TAG" | grep -q "^staging-v"; then
-        DIST_TAG="staging"
-        COLOR=16776960
-      elif echo "$CI_COMMIT_TAG" | grep -q "^prod-v"; then
-        DIST_TAG="latest"
-        COLOR=3066993
-      fi
-
-      curl -s -X POST "$DISCORD_WEBHOOK" \
-        -H "Content-Type: application/json" \
-        -d '{
-          "embeds": [{
-            "title": "Package published successfully",
-            "color": '"$COLOR"',
-            "fields": [
-              {"name": "Package",      "value": "'"$CI_PROJECT_NAME"'",  "inline": true},
-              {"name": "Tag",          "value": "'"$CI_COMMIT_TAG"'",    "inline": true},
-              {"name": "Dist-tag",     "value": "'"$DIST_TAG"'",         "inline": true},
-              {"name": "Published by", "value": "'"$GITLAB_USER_NAME"'", "inline": true},
-              {"name": "Pipeline",     "value": "'"$CI_PIPELINE_URL"'",  "inline": false}
-            ]
-          }]
-        }'
-
-# ────────────────────────────────────────────────────────────
-# STAGE: notify — failure
-# ────────────────────────────────────────────────────────────
-notify-failure:
-  stage: notify
-  image: curlimages/curl:latest
-  rules:
-    - if: '$CI_COMMIT_TAG =~ /^test-v/'
-      when: on_failure
-    - if: '$CI_COMMIT_TAG =~ /^staging-v/'
-      when: on_failure
-    - if: '$CI_COMMIT_TAG =~ /^prod-v/'
-      when: on_failure
-  script:
-    - |
-      curl -s -X POST "$DISCORD_WEBHOOK" \
-        -H "Content-Type: application/json" \
-        -d '{
-          "embeds": [{
-            "title": "Package publish FAILED",
-            "color": 15158332,
-            "fields": [
-              {"name": "Package",    "value": "'"$CI_PROJECT_NAME"'",  "inline": true},
-              {"name": "Tag",        "value": "'"$CI_COMMIT_TAG"'",    "inline": true},
-              {"name": "Failed by",  "value": "'"$GITLAB_USER_NAME"'", "inline": true},
-              {"name": "Pipeline",   "value": "'"$CI_PIPELINE_URL"'",  "inline": false}
-            ]
-          }]
-        }'
+    - npm ci
+    - test -n "$NPM_TOKEN"
+    - printf '%s\n' "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > .npmrc
+    - npm whoami --registry https://registry.npmjs.org/
+    - npm publish --tag latest --access public

package/__tests__/unit/components/group/group.spec.ts

@@ -2,15 +2,9 @@ import { Group } from '../../../../src/components/group/group';
 import { GroupRepository } from '../../../../src/components/group/group.repository';
 import { ClassError } from '@tomei/general';
 import { GroupTypeEnum } from '../../../../src/enum/group-type.enum';
-import { RedisService } from '../../../../src/redis-client/redis.service';
 
 
 describe('Group', () => {
-  beforeAll(() => {
-    process.env.REDIS_HOST = 'localhost';
-    process.env.REDIS_PORT = '6379';
-  });
-
   afterEach(() => {
     jest.clearAllMocks();
   });

package/__tests__/unit/components/group-reporting-user/group-reporting-user.spec.ts

@@ -1,11 +1,3 @@
-// Break circular dependency: group-reporting-user → user → login-user → user
-jest.mock('../../../../src/components/login-user/login-user', () => ({
-  LoginUser: class MockLoginUser {},
-}));
-jest.mock('../../../../src/components/login-user/user', () => ({
-  User: class MockUser {},
-}));
-
 import { GroupReportingUser } from '../../../../src/components/group-reporting-user/group-reporting-user';
 import { GroupReportingUserRepository } from '../../../../src/components/group-reporting-user/group-reporting-user.repository';
 import { ClassError } from '@tomei/general';
@@ -69,7 +61,7 @@ describe('GroupReportingUser', () => {
 
       await expect(
         GroupReportingUser.init(mockDbTransaction, '1')
-      ).rejects.toThrow(Error);
+      ).rejects.toThrow(ClassError);
     });
   });
 });