cloudcommerce 0.3.0 → 0.4.1

package/packages/apps/webhooks/lib/events-to-webhooks-app.js

@@ -0,0 +1,127 @@
+import logger from 'firebase-functions/logger';
+import api from '@cloudcommerce/api';
+import axios from 'axios';
+
+const updateManualQueue = async (manualQueue, appId) => {
+  if (manualQueue) {
+    try {
+      await api.patch(`applications/${appId}`, { data: { manual_queue: manualQueue } });
+      manualQueue = null;
+    } catch (err) {
+      logger.error(err);
+    }
+  }
+};
+const sendWebhook = async (options, doc, urls, manualQueue, appId, customer, docId, isCart) => {
+  const url = options && options.webhook_uri;
+  if (url && !urls.includes(url) && (!isCart || options.send_carts)) {
+    urls.push(url);
+    logger.log(`Event ${isCart ? 'cart' : 'order'} => ${url}`);
+    if (options.skip_pending === true
+            && (!doc.financial_status || doc.financial_status.current === 'pending')) {
+      return null;
+    }
+    logger.log(`> Sending ${isCart ? 'cart' : 'order'} notification`);
+    const token = options.webhook_token;
+    let headers;
+    if (token) {
+      headers = {
+        Authorization: `Bearer ${token}`,
+      };
+    }
+    const body = {
+      [isCart ? 'cart' : 'order']: doc,
+      customer,
+    };
+    try {
+      const { status } = await axios.post(url, body, { headers });
+      if (status) {
+        await updateManualQueue(manualQueue, appId);
+        // logger.log(`> ${status}`);
+        return status;
+      }
+    } catch (error) {
+      if (error.response && error.config) {
+        const err = { name: `#${docId} POST to ${error.config.url} failed` };
+        const { status, data } = error.response;
+        err.response = {
+          status,
+          data: JSON.stringify(data),
+        };
+        err.data = JSON.stringify(error.config.data);
+        logger.error(err);
+      } else {
+        logger.error(error);
+      }
+    }
+  }
+  return null;
+};
+const handleApiEvent = async ({
+  evName, apiEvent, apiDoc, app,
+}) => {
+  const appData = { ...app.data, ...app.hidden_data };
+  const resourceId = apiEvent.resource_id;
+  const key = `${evName}_${resourceId}`;
+  if (Array.isArray(appData.ignore_events)
+        && appData.ignore_events.includes(evName)) {
+    logger.info('>> ', key, ' - Ignored event');
+    return null;
+  }
+  try {
+    if (appData.webhooks) {
+      let docId;
+      let manualQueue = null;
+      let isCart;
+      if (evName === 'applications-dataSet') {
+        const body = appData;
+        if (body && Array.isArray(body.manual_queue) && body.manual_queue.length) {
+          manualQueue = body.manual_queue;
+          const nextId = manualQueue[0];
+          if (typeof nextId === 'string' && /[a-f0-9]{24}/.test(nextId)) {
+            docId = nextId.trim();
+          }
+          manualQueue.shift();
+        }
+      } else {
+        isCart = evName === 'carts-delayed';
+        docId = apiDoc._id;
+      }
+      if (docId) {
+        let customer;
+        let doc;
+        if (isCart) {
+          doc = apiDoc;
+          if (doc.completed || doc.available === false) {
+            return null;
+          }
+          const customerId = doc.customers && apiDoc.customers[0];
+          if (customerId) {
+            customer = (await api.get(`customers/${customerId}`)).data;
+          }
+        } else {
+          doc = (await api.get(`orders/${docId}`)).data;
+        }
+        if (doc) {
+          const urls = [];
+          const { webhooks } = appData;
+          if (Array.isArray(webhooks)) {
+            webhooks.forEach(async (webhook) => {
+              await sendWebhook(webhook, doc, urls, manualQueue, app._id, customer, docId, isCart);
+            });
+          }
+          await sendWebhook(appData, doc, urls, manualQueue, app._id, customer, docId, isCart);
+          return null;
+        }
+        await updateManualQueue(manualQueue, app._id);
+      }
+    }
+    return null;
+  } catch (err) {
+    logger.error(err);
+    return null;
+  }
+};
+
+export default handleApiEvent;
+// # sourceMappingURL=events-to-webhooks-app.js.map

package/packages/apps/webhooks/lib/events-to-webhooks-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events-to-webhooks-app.js","sourceRoot":"","sources":["../src/events-to-webhooks-app.ts"],"names":[],"mappings":"AAEA,OAAO,MAAM,MAAM,2BAA2B,CAAC;AAC/C,OAAO,GAAG,MAAM,oBAAoB,CAAC;AACrC,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,iBAAiB,GAAG,KAAK,EAC7B,WAAyB,EACzB,KAAa,EACb,EAAE;IACF,IAAI,WAAW,EAAE;QACf,IAAI;YACF,MAAM,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YAClF,WAAW,GAAG,IAAI,CAAC;SACpB;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SACnB;KACF;AACH,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,KAAK,EACvB,OAA6B,EAC7B,GAAwB,EACxB,IAAW,EACX,WAAyB,EACzB,KAAa,EACb,QAAoB,EACpB,KAAc,EACd,MAAgB,EAChB,EAAE;IACF,MAAM,GAAG,GAAG,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC;IAC3C,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,EAAE;QACjE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,MAAM,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,OAAO,GAAG,EAAE,CAAC,CAAC;QAE3D,IACE,OAAO,CAAC,YAAY,KAAK,IAAI;eAC1B,CAAC,CAAC,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,gBAAgB,CAAC,OAAO,KAAK,SAAS,CAAC,EACxE;YACA,OAAO,IAAI,CAAC;SACb;QAED,MAAM,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,eAAe,CAAC,CAAC;QAElE,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC;QACpC,IAAI,OAA+C,CAAC;QAEpD,IAAI,KAAK,EAAE;YACT,OAAO,GAAG;gBACR,aAAa,EAAE,UAAU,KAAK,EAAE;aACjC,CAAC;SACH;QACD,MAAM,IAAI,GAAG;YACX,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG;YAChC,QAAQ;SACT,CAAC;QAEF,IAAI;YACF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5D,IAAI,MAAM,EAAE;gBACV,MAAM,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBAC5C,6BAA6B;gBAC7B,OAAO,MAAM,CAAC;aACf;SACF;QAAC,OAAO,KAAU,EAAE;YACnB,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE;gBAClC,MAAM,GAAG,GAAyB,EAAE,IAAI,EAAE,IAAI,KAAK,YAAY,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;gBAC3F,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC;gBACxC,GAAG,CAAC,QAAQ,GAAG;oBACb,MAAM;oBACN,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;iBAC3B,CAAC;gBACF,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC7C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;aACnB;iBAAM;gBACL,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;aACrB;SACF;KACF;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,cAAc,GAAoB,KAAK,EAAE,EAC7C,MAAM,EACN,QAAQ,EACR,MAAM,EACN,GAAG,GACJ,EAAE,EAAE;IACH,MAAM,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC;IACxC,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,UAAU,EAAE,CAAC;IAEtC,IACE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;WACjC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EACzC;QACA,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;KACb;IAED,IAAI;QACF,IAAI,OAAO,CAAC,QAAQ,EAAE;YACpB,IAAI,KAAyB,CAAC;YAC9B,IAAI,WAAW,GAAiB,IAAI,CAAC;YACrC,IAAI,MAA2B,CAAC;YAEhC,IAAI,MAAM,KAAK,sBAAsB,EAAE;gBACrC,MAAM,IAAI,GAAG,OAAO,CAAC;gBACrB,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;oBACxE,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC;oBAChC,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;oBAC9B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;wBAC7D,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;qBACvB;oBACD,WAAW,CAAC,KAAK,EAAE,CAAC;iBACrB;aACF;iBAAM;gBACL,MAAM,GAAG,MAAM,KAAK,eAAe,CAAC;gBACpC,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC;aACpB;YAED,IAAI,KAAK,EAAE;gBACT,IAAI,QAA+B,CAAC;gBACpC,IAAI,GAAmB,CAAC;gBACxB,IAAI,MAAM,EAAE;oBACV,GAAG,GAAG,MAAe,CAAC;oBACtB,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK,EAAE;wBAC5C,OAAO,IAAI,CAAC;qBACb;oBACD,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;oBACxD,IAAI,UAAU,EAAE;wBACd,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,aAAa,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;qBAC5D;iBACF;qBAAM;oBACL,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAC/C;gBAED,IAAI,GAAG,EAAE;oBACP,MAAM,IAAI,GAAa,EAAE,CAAC;oBAC1B,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;oBAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;wBAC3B,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;4BACjC,MAAM,WAAW,CACf,OAAO,EACP,GAAG,EACH,IAAI,EACJ,WAAW,EACX,GAAG,CAAC,GAAG,EACP,QAAQ,EACR,KAAK,EACL,MAAM,CACP,CAAC;wBACJ,CAAC,CAAC,CAAC;qBACJ;oBACD,MAAM,WAAW,CACf,OAAO,EACP,GAAG,EACH,IAAI,EACJ,WAAW,EACX,GAAG,CAAC,GAAG,EACP,QAAQ,EACR,KAAK,EACL,MAAM,CACP,CAAC;oBACF,OAAO,IAAI,CAAC;iBACb;gBAED,MAAM,iBAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;aAC/C;SACF;QACD,OAAO,IAAI,CAAC;KACb;IAAC,OAAO,GAAG,EAAE;QACZ,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;KACb;AACH,CAAC,CAAC;AAEF,eAAe,cAAc,CAAC"}

package/packages/apps/webhooks/lib/index.js

@@ -0,0 +1,2 @@
+export * from './app-webhooks.js';
+// # sourceMappingURL=index.js.map

package/packages/apps/webhooks/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC"}

package/packages/apps/webhooks/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@cloudcommerce/app-webhooks",
+  "type": "module",
+  "version": "0.4.1",
+  "description": "E-Com Plus Cloud Commerce app for general order webhooks",
+  "main": "lib/index.js",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ecomplus/cloud-commerce.git",
+    "directory": "packages/apps/webhooks"
+  },
+  "author": "E-Com Club Softwares para E-commerce <ti@e-com.club>",
+  "license": "Apache 2.0 with Commons Clause",
+  "bugs": {
+    "url": "https://github.com/ecomplus/cloud-commerce/issues"
+  },
+  "homepage": "https://github.com/ecomplus/cloud-commerce/tree/main/packages/apps/webhooks#readme",
+  "scripts": {
+    "build": "sh ../../../scripts/build-lib.sh"
+  },
+  "dependencies": {
+    "@cloudcommerce/api": "workspace:*",
+    "@cloudcommerce/firebase": "workspace:*",
+    "axios": "^1.2.6",
+    "firebase-admin": "^11.5.0",
+    "firebase-functions": "^4.2.0"
+  },
+  "devDependencies": {
+    "@cloudcommerce/types": "workspace:*",
+    "@firebase/app-types": "^0.9.0"
+  }
+}

package/packages/apps/webhooks/src/app-webhooks.ts

@@ -0,0 +1,14 @@
+/* eslint-disable import/prefer-default-export */
+import '@cloudcommerce/firebase/lib/init';
+import {
+  createAppEventsFunction,
+  ApiEventHandler,
+} from '@cloudcommerce/firebase/lib/helpers/pubsub';
+import handleApiEvent from './events-to-webhooks-app';
+
+export const webhooksapp = {
+  onStoreEvent: createAppEventsFunction(
+    'webhooksApp',
+    handleApiEvent as ApiEventHandler,
+  ),
+};

package/packages/apps/webhooks/src/events-to-webhooks-app.ts

@@ -0,0 +1,178 @@
+import type { ApiEventHandler } from '@cloudcommerce/firebase/lib/helpers/pubsub';
+import type { Carts, Customers, Orders } from '@cloudcommerce/api/types';
+import logger from 'firebase-functions/logger';
+import api from '@cloudcommerce/api';
+import axios from 'axios';
+
+const updateManualQueue = async (
+  manualQueue: any[] | null,
+  appId: string,
+) => {
+  if (manualQueue) {
+    try {
+      await api.patch(`applications/${appId}`, { data: { manual_queue: manualQueue } });
+      manualQueue = null;
+    } catch (err) {
+      logger.error(err);
+    }
+  }
+};
+
+const sendWebhook = async (
+  options: { [x: string]: any },
+  doc: Record<string, any>,
+  urls: any[],
+  manualQueue: any[] | null,
+  appId: string,
+  customer?: Customers,
+  docId?: string,
+  isCart?: boolean,
+) => {
+  const url = options && options.webhook_uri;
+  if (url && !urls.includes(url) && (!isCart || options.send_carts)) {
+    urls.push(url);
+    logger.log(`Event ${isCart ? 'cart' : 'order'} => ${url}`);
+
+    if (
+      options.skip_pending === true
+      && (!doc.financial_status || doc.financial_status.current === 'pending')
+    ) {
+      return null;
+    }
+
+    logger.log(`> Sending ${isCart ? 'cart' : 'order'} notification`);
+
+    const token = options.webhook_token;
+    let headers: { Authorization: string; } | undefined;
+
+    if (token) {
+      headers = {
+        Authorization: `Bearer ${token}`,
+      };
+    }
+    const body = {
+      [isCart ? 'cart' : 'order']: doc,
+      customer,
+    };
+
+    try {
+      const { status } = await axios.post(url, body, { headers });
+      if (status) {
+        await updateManualQueue(manualQueue, appId);
+        // logger.log(`> ${status}`);
+        return status;
+      }
+    } catch (error: any) {
+      if (error.response && error.config) {
+        const err: { [x: string]: any } = { name: `#${docId} POST to ${error.config.url} failed` };
+        const { status, data } = error.response;
+        err.response = {
+          status,
+          data: JSON.stringify(data),
+        };
+        err.data = JSON.stringify(error.config.data);
+        logger.error(err);
+      } else {
+        logger.error(error);
+      }
+    }
+  }
+  return null;
+};
+
+const handleApiEvent: ApiEventHandler = async ({
+  evName,
+  apiEvent,
+  apiDoc,
+  app,
+}) => {
+  const appData = { ...app.data, ...app.hidden_data };
+  const resourceId = apiEvent.resource_id;
+  const key = `${evName}_${resourceId}`;
+
+  if (
+    Array.isArray(appData.ignore_events)
+    && appData.ignore_events.includes(evName)
+  ) {
+    logger.info('>> ', key, ' - Ignored event');
+    return null;
+  }
+
+  try {
+    if (appData.webhooks) {
+      let docId: string | undefined;
+      let manualQueue: any[] | null = null;
+      let isCart: boolean | undefined;
+
+      if (evName === 'applications-dataSet') {
+        const body = appData;
+        if (body && Array.isArray(body.manual_queue) && body.manual_queue.length) {
+          manualQueue = body.manual_queue;
+          const nextId = manualQueue[0];
+          if (typeof nextId === 'string' && /[a-f0-9]{24}/.test(nextId)) {
+            docId = nextId.trim();
+          }
+          manualQueue.shift();
+        }
+      } else {
+        isCart = evName === 'carts-delayed';
+        docId = apiDoc._id;
+      }
+
+      if (docId) {
+        let customer: Customers | undefined;
+        let doc: Carts | Orders;
+        if (isCart) {
+          doc = apiDoc as Carts;
+          if (doc.completed || doc.available === false) {
+            return null;
+          }
+          const customerId = doc.customers && apiDoc.customers[0];
+          if (customerId) {
+            customer = (await api.get(`customers/${customerId}`)).data;
+          }
+        } else {
+          doc = (await api.get(`orders/${docId}`)).data;
+        }
+
+        if (doc) {
+          const urls: string[] = [];
+          const { webhooks } = appData;
+          if (Array.isArray(webhooks)) {
+            webhooks.forEach(async (webhook) => {
+              await sendWebhook(
+                webhook,
+                doc,
+                urls,
+                manualQueue,
+                app._id,
+                customer,
+                docId,
+                isCart,
+              );
+            });
+          }
+          await sendWebhook(
+            appData,
+            doc,
+            urls,
+            manualQueue,
+            app._id,
+            customer,
+            docId,
+            isCart,
+          );
+          return null;
+        }
+
+        await updateManualQueue(manualQueue, app._id);
+      }
+    }
+    return null;
+  } catch (err) {
+    logger.error(err);
+    return null;
+  }
+};
+
+export default handleApiEvent;

package/packages/apps/webhooks/src/index.ts

@@ -0,0 +1 @@
+export * from './app-webhooks';

package/packages/apps/webhooks/tsconfig.json

@@ -0,0 +1,3 @@
+{
+  "extends": "../../../tsconfig.json",
+}

package/packages/cli/lib/setup-gcloud.js

@@ -1,25 +1,112 @@
 import path from 'node:path';
-import { $, fs } from 'zx';
+import {
+  $, fs, question, echo,
+} from 'zx';
 
+let gcpAccessToken;
 const serviceAccountId = 'cloud-commerce-gh-actions';
 const getAccountEmail = (projectId) => {
   return `${serviceAccountId}@${projectId}.iam.gserviceaccount.com`;
 };
+const requestApi = async (projectId, options) => {
+  const body = options?.body;
+  let url = options?.baseURL
+        || `https://iam.googleapis.com/v1/projects/${projectId}/serviceAccounts`;
+  url += options?.url || '';
+  const data = await (await fetch(url, {
+    method: options?.method || 'GET',
+    headers: {
+      Authorization: `Bearer ${gcpAccessToken}`,
+      'Content-Type': 'application/json; charset=utf-8',
+    },
+    body,
+  })).json();
+  const { error } = data;
+  if (error) {
+    let msgErr = 'Unexpected error in request';
+    msgErr = error.message ? `Code: ${error.code} - ${error.message}` : msgErr;
+    const err = new Error(msgErr);
+    throw err;
+  }
+  return data;
+};
+const getGcpAccessToken = async () => {
+  await echo`-- Get the Google Cloud account credentials:
+  1. Access https://shell.cloud.google.com/?fromcloudshell=true&show=terminal
+  2. Execute \`gcloud auth application-default print-access-token\` in Cloud Shell
+`;
+  return question('Google Cloud access token: ');
+};
 const checkServiceAccountExists = async (projectId) => {
   let hasServiceAccount;
   try {
-    const { stderr } = await $`gcloud iam service-accounts describe ${getAccountEmail(projectId)}`;
-    hasServiceAccount = !/not_?found/i.test(stderr);
-  } catch (e) {
+    if (!gcpAccessToken) {
+      const { stderr } = await $`gcloud iam service-accounts describe ${getAccountEmail(projectId)}`;
+      hasServiceAccount = !/not_?found/i.test(stderr);
+    } else {
+      // https://cloud.google.com/iam/docs/creating-managing-service-accounts?hl=pt-br#listing
+      const { accounts: listAccounts } = await requestApi(projectId);
+      const accountFound = listAccounts
+                && listAccounts.find(({ email }) => email === getAccountEmail(projectId));
+      hasServiceAccount = Boolean(accountFound);
+    }
+  } catch {
     return null;
   }
   return hasServiceAccount;
 };
 const siginGcloudAndSetIAM = async (projectId, pwd) => {
-  if (/no credential/i.test((await $`gcloud auth list`).stderr)) {
-    await $`gcloud auth login`;
+  let hasGcloud;
+  try {
+    hasGcloud = Boolean(await $`command -v gcloud`);
+  } catch {
+    hasGcloud = false;
+  }
+  if (hasGcloud) {
+    if (/no credential/i.test((await $`gcloud auth list`).stderr)) {
+      await $`gcloud auth login`;
+    }
+    await $`gcloud config set project ${projectId}`;
+  } else {
+    gcpAccessToken = await getGcpAccessToken();
+  }
+  const serviceAccount = await checkServiceAccountExists(projectId);
+  if (!serviceAccount) {
+    const description = 'A service account with permission to deploy Cloud Commerce'
+            + ' from the GitHub repository to Firebase';
+    const displayName = 'Cloud Commerce GH Actions';
+    if (hasGcloud) {
+      await $`gcloud iam service-accounts create ${serviceAccountId} \
+        --description=${description} --display-name=${displayName}`;
+    } else if (gcpAccessToken) {
+      const body = JSON.stringify({
+        accountId: serviceAccountId,
+        serviceAccount: {
+          description,
+          displayName,
+        },
+      });
+      await requestApi(projectId, { method: 'POST', body });
+    }
+  }
+  await fs.ensureDir(path.join(pwd, '.cloudcommerce'));
+  const pathPolicyIAM = path.join(pwd, '.cloudcommerce', 'policyIAM.json');
+  let policyIAM = {};
+  const version = 3; // most recent
+  const baseURL = `https://cloudresourcemanager.googleapis.com/v1/projects/${projectId}`;
+  if (hasGcloud) {
+    await $`gcloud projects get-iam-policy ${projectId} --format json > ${pathPolicyIAM}`;
+    policyIAM = fs.readJSONSync(pathPolicyIAM);
+  } else if (gcpAccessToken) {
+    // https://cloud.google.com/iam/docs/granting-changing-revoking-access?hl=pt-br#view-access
+    // POST https://cloudresourcemanager.googleapis.com/API_VERSION/RESOURCE_TYPE/RESOURCE_ID:getIamPolicy
+    policyIAM = await requestApi(projectId, {
+      baseURL,
+      url: ':getIamPolicy',
+      method: 'POST',
+      body: JSON.stringify({ options: { requestedPolicyVersion: version } }),
+    });
   }
-  await $`gcloud config set project ${projectId}`;
   const roles = [
     'roles/firebase.admin',
     'roles/appengine.appAdmin',
@@ -32,17 +119,10 @@ const siginGcloudAndSetIAM = async (projectId, pwd) => {
     'roles/serviceusage.apiKeysViewer',
     'roles/serviceusage.serviceUsageAdmin',
   ];
-  const serviceAccount = await checkServiceAccountExists(projectId);
-  if (!serviceAccount) {
-    await $`gcloud iam service-accounts create ${serviceAccountId} \
-      --description="A service account with permission to deploy Cloud Commerce from the GitHub repository to Firebase" \
-      --display-name="Cloud Commerce GH Actions"`;
+  let { bindings } = policyIAM;
+  if (!bindings) {
+    bindings = [];
   }
-  await fs.ensureDir(path.join(pwd, '.cloudcommerce'));
-  const pathPolicyIAM = path.join(pwd, '.cloudcommerce', 'policyIAM.json');
-  await $`gcloud projects get-iam-policy ${projectId} --format json > ${pathPolicyIAM}`;
-  const policyIAM = fs.readJSONSync(pathPolicyIAM);
-  const { bindings } = policyIAM;
   let mustUpdatePolicy = false;
   roles.forEach((role) => {
     const roleFound = bindings.find((binding) => binding.role === role);
@@ -73,16 +153,36 @@ const siginGcloudAndSetIAM = async (projectId, pwd) => {
     }
   });
   if (mustUpdatePolicy) {
-    fs.writeJSONSync(pathPolicyIAM, policyIAM);
-    return $`gcloud projects set-iam-policy ${projectId} ${pathPolicyIAM}`;
+    if (hasGcloud) {
+      fs.writeJSONSync(pathPolicyIAM, policyIAM);
+      return $`gcloud projects set-iam-policy ${projectId} ${pathPolicyIAM}`;
+    }
+    if (gcpAccessToken) {
+      Object.assign(policyIAM, { version, bindings });
+      // POST https://cloudresourcemanager.googleapis.com/API_VERSION/RESOURCE_TYPE/RESOURCE_ID:setIamPolicy
+      return requestApi(projectId, {
+        baseURL,
+        url: ':setIamPolicy',
+        method: 'POST',
+        body: JSON.stringify({ policy: policyIAM }),
+      });
+    }
   }
   return null;
 };
 const createServiceAccountKey = async (projectId, pwd) => {
   try {
     const pathFileKey = path.join(pwd, '.cloudcommerce', 'serviceAccountKey.json');
-    await $`gcloud iam service-accounts keys create ${pathFileKey} \
+    if (!gcpAccessToken) {
+      await $`gcloud iam service-accounts keys create ${pathFileKey} \
       --iam-account=${getAccountEmail(projectId)}`;
+    } else {
+      const { privateKeyData } = await requestApi(projectId, {
+        url: `/${getAccountEmail(projectId)}/keys`,
+        method: 'POST',
+      });
+      await $`echo '${privateKeyData}' | base64 --decode > ${pathFileKey}`;
+    }
     return JSON.stringify(fs.readJSONSync(pathFileKey));
   } catch (e) {
     return null;

package/packages/cli/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cloudcommerce/cli",
   "type": "module",
-  "version": "0.3.0",
+  "version": "0.4.1",
   "description": "E-Com Plus Cloud Commerce CLI tools",
   "bin": {
     "cloudcommerce": "./bin/run.mjs"

package/packages/cli/src/cli.ts

@@ -124,7 +124,7 @@ ECOM_STORE_ID=${storeId}
         //
       }
     }
-    let serviceAccountJSON : string | null = null;
+    let serviceAccountJSON: string | null = null;
     if (argv.gcloud !== false) {
       try {
         await siginGcloudAndSetIAM(projectId as string, pwd);