k2hr3-api 1.0.42 → 2.0.1

package/ChangeLog

@@ -1,378 +0,0 @@
-k2hr3-api (1.0.42) unstable; urgency=low
-
-  * Updated the version of the dependent packages - #135
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Thu, 27 Mar 2025 10:34:44 +0900
-
-k2hr3-api (1.0.41) unstable; urgency=low
-
-  * Changed the PID file name to avoid collisions - #133
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Fri, 28 Feb 2025 19:44:20 +0900
-
-k2hr3-api (1.0.40) unstable; urgency=low
-
-  * Fixed the options as the npm audit issue was fixed - #131
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Thu, 20 Feb 2025 09:28:41 +0900
-
-k2hr3-api (1.0.39) unstable; urgency=low
-
-  * Changed publish NodeJS versions to v22 and Fixed scripts, etc - #129
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 17 Feb 2025 17:12:05 +0900
-
-k2hr3-api (1.0.38) unstable; urgency=low
-
-  * Updated nodejs_helper for forked repositories - #127
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 20 Jan 2025 11:11:35 +0900
-
-k2hr3-api (1.0.37) unstable; urgency=low
-
-  * Changed timeout value for checking openstack keystone - #125
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Tue, 10 Dec 2024 10:22:08 +0900
-
-k2hr3-api (1.0.36) unstable; urgency=low
-
-  * Updated k2hr3-init.sh.templ - #123
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 09 Dec 2024 12:52:55 +0900
-
-k2hr3-api (1.0.35) unstable; urgency=low
-
-  * Fixed bugs about defunct processes and mis-coding - #121
-  * Changed supported NodeJS/OS version and fixed code - #120
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Fri, 06 Dec 2024 16:16:54 +0900
-
-k2hr3-api (1.0.34) unstable; urgency=low
-
-  * Updated github actions tools and dependencies - #118
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Wed, 13 Mar 2024 20:17:16 +0900
-
-k2hr3-api (1.0.33) unstable; urgency=low
-
-  * Updated versions of dependent packages - #116
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Tue, 21 Nov 2023 17:56:38 +0900
-
-k2hr3-api (1.0.32) unstable; urgency=low
-
-  * Changed CI Runner OS and updated dependencies - #114
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Wed, 01 Nov 2023 12:58:03 +0900
-
-k2hr3-api (1.0.31) unstable; urgency=low
-
-  * Added procps for docker image and Updated dependencies - #112
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Wed, 11 Oct 2023 10:01:23 +0900
-
-k2hr3-api (1.0.30) unstable; urgency=low
-
-  * Updated versions of dependent packages - #110
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Tue, 03 Oct 2023 14:42:07 +0900
-
-k2hr3-api (1.0.29) unstable; urgency=low
-
-  * Fixed bugs about publishing packages and images - #108
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Wed, 06 Sep 2023 16:58:40 +0900
-
-k2hr3-api (1.0.28) unstable; urgency=low
-
-  * Updated support NodeJS version - #106
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Wed, 06 Sep 2023 15:25:25 +0900
-
-k2hr3-api (1.0.27) unstable; urgency=low
-
-  * Updated TENANT API and fixed bugs in TENANT API - #104
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Tue, 25 Jul 2023 16:16:10 +0900
-
-k2hr3-api (1.0.26) unstable; urgency=low
-
-  * Added response object members in userToken GET API - #102
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Thu, 13 Jul 2023 09:11:09 +0900
-
-k2hr3-api (1.0.25) unstable; urgency=low
-
-  * Added TENANT API for Local Tenant and updated etc - #100
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Fri, 07 Jul 2023 17:33:33 +0900
-
-k2hr3-api (1.0.24) unstable; urgency=low
-
-  * Updated dependencies and test code for new chai version - #98
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 19 Jun 2023 21:09:01 +0900
-
-k2hr3-api (1.0.23) unstable; urgency=low
-
-  * Re-fixed a bug about stopping processes in run.sh - #96
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Thu, 01 Jun 2023 19:58:08 +0900
-
-k2hr3-api (1.0.22) unstable; urgency=low
-
-  * Fixed a bug about stopping processes in run.sh - #94
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Thu, 01 Jun 2023 15:37:41 +0900
-
-k2hr3-api (1.0.21) unstable; urgency=low
-
-  * Changed partially scripts(command) in package.json - #92
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 29 May 2023 10:36:24 +0900
-
-k2hr3-api (1.0.20) unstable; urgency=low
-
-  * Fixed a bug in OS determination processing - #90
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Fri, 19 May 2023 19:17:33 +0900
-
-k2hr3-api (1.0.19) unstable; urgency=low
-
-  * Bumped up the version number to update the Docker image
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 15 May 2023 13:49:31 +0900
-
-k2hr3-api (1.0.18) unstable; urgency=low
-
-  * Fixed require line about jose package, and updated dependencies - #87
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Tue, 09 May 2023 19:06:12 +0900
-
-k2hr3-api (1.0.17) unstable; urgency=low
-
-  * Fixed a bug in imagetypevars.sh script - #85
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 08 May 2023 14:46:57 +0900
-
-k2hr3-api (1.0.16) unstable; urgency=low
-
-  * Updated imagetypevars.sh for specifying npm pkg version - #83
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Wed, 26 Apr 2023 20:55:14 +0900
-
-k2hr3-api (1.0.15) unstable; urgency=low
-
-  * Fixed about launching node process in run.sh - #81
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Tue, 25 Apr 2023 14:35:06 +0900
-
-k2hr3-api (1.0.14) unstable; urgency=low
-
-  * Updated dependency and Temporary audit avoidance - #79
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 24 Apr 2023 16:36:49 +0900
-
-k2hr3-api (1.0.13) unstable; urgency=low
-
-  * Updated building/packaging scripts - #76
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 06 Mar 2023 22:04:36 +0900
-
-k2hr3-api (1.0.12) unstable; urgency=low
-
-  * Changed flows for packaging and bulding docker image - #74
-  * Updated header and footer in comment lines - #73
-  * Updated issue/pullrequest templates - #72
-  * Reviewed ShellCheck processing again - #71
-  * Reviewed ShellCheck processing and fixed bugs - #70
-  * Eliminated unnecessary copies in nodejs_helper.sh - #69
-  * Fixed a bug in docker_helper.sh - #68
-  * Fixed docker_helper.sh and imagetypevars.sh - #67
-  * Shared Docker image build logic with other products - #66
-  * Updated github actions and nodejs version, and fixed bugs - #65
-  * Unified OS judgment to /etc/os-release - #64
-  * Renamed the test directory to tests and auto_test.sh to test.sh - #63
-  * Cleaned up package.json and updated related package versions - #62
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 20 Feb 2023 20:21:38 +0900
-
-k2hr3-api (1.0.11) unstable; urgency=low
-
-  * Added config value as unscopedtoken expire for oidc - #60
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Tue, 05 Jul 2022 16:54:16 +0900
-
-k2hr3-api (1.0.10) unstable; urgency=low
-
-  * Bumpup version number for npm package
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 13 Jun 2022 15:36:23 +0900
-
-k2hr3-api (1.0.9) unstable; urgency=low
-
-  * Bumpup version number for npm package
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 13 Jun 2022 13:58:05 +0900
-
-k2hr3-api (1.0.8) unstable; urgency=low
-
-  * Added some host information for adding to Role member - #56
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 13 Jun 2022 09:52:47 +0900
-
-k2hr3-api (1.0.7) unstable; urgency=low
-
-  * Bumpup version number for npm package
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Fri, 29 Oct 2021 14:32:17 +0900
-
-k2hr3-api (1.0.6) unstable; urgency=low
-
-  * Uses OpenID Connect Discovery to set jwks_uri - #53
-  * Changed the workaround for the publish-please audit error - #52
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Fri, 29 Oct 2021 13:33:54 +0900
-
-k2hr3-api (1.0.5) unstable; urgency=low
-
-  * Updated dependencies - #49
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 27 Sep 2021 15:42:39 +0900
-
-k2hr3-api (1.0.4) unstable; urgency=low
-
-  * Enhanced the automatic registration for containers on Kubernetes - #47
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Tue, 07 Sep 2021 11:59:42 +0900
-
-k2hr3-api (1.0.3) unstable; urgency=low
-
-  * Fixed a bug in k2hr3tokens.js - #45
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Thu, 02 Sep 2021 16:01:08 +0900
-
-k2hr3-api (1.0.2) unstable; urgency=low
-
-  * Updated README.md for docker image - #43
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Fri, 27 Aug 2021 23:44:32 +0900
-
-k2hr3-api (1.0.1) unstable; urgency=low
-
-  * Added docker build and push in Github Actions - #41
-  * Updated to accept authentication token by Open id connect - #40
-  * Updated packages and fixed bugs - #39
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Fri, 27 Aug 2021 23:00:23 +0900
-
-k2hr3-api (1.0.0) unstable; urgency=low
-
-  * Updated README.md for adding k2hr3 cli - #36
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Fri, 26 Mar 2021 12:41:56 +0900
-
-k2hr3-api (0.9.16) unstable; urgency=low
-
-  * Implemented proper use of sudo command - #34
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Wed, 03 Feb 2021 22:06:53 +0900
-
-k2hr3-api (0.9.15) unstable; urgency=low
-
-  * Fixed a bug in k2hr3-init.sh.templ(2) - #32
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Wed, 03 Feb 2021 14:23:44 +0900
-
-k2hr3-api (0.9.14) unstable; urgency=low
-
-  * Fixed a bug in k2hr3-init.sh.templ - #30
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Wed, 03 Feb 2021 08:12:04 +0900
-
-k2hr3-api (0.9.13) unstable; urgency=low
-
-  * Fixed bugs in k2hr3-init.sh.templ - #28
-  * Updated README.md for K2HR3 Get Resource - #27
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Tue, 02 Feb 2021 19:57:24 +0900
-
-k2hr3-api (0.9.12) unstable; urgency=low
-
-  * Updated k2hr3-init.sh template for installing packages - #25
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Wed, 27 Jan 2021 13:34:33 +0900
-
-k2hr3-api (0.9.11) unstable; urgency=low
-
-  * Switched Travis CI to Github actions - #23
-  * Supported Node.js 12 and 14 - #22
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Tue, 24 Nov 2020 15:33:45 +0900
-
-k2hr3-api (0.9.10) unstable; urgency=low
-
-  * Added authorization using Token from external authentication system - #20
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 31 Aug 2020 15:15:26 +0900
-
-k2hr3-api (0.9.9) unstable; urgency=low
-
-  * Added tag key for each role member host - #18
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Wed, 29 Jul 2020 18:23:31 +0900
-
-k2hr3-api (0.9.8) unstable; urgency=low
-
-  * Added template keyword for role tenant yrn path - #16
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Tue, 26 May 2020 14:24:32 +0900
-
-k2hr3-api (0.9.7) unstable; urgency=low
-
-  * Added extdata rest api - #14
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Tue, 19 May 2020 13:26:59 +0900
-
-k2hr3-api (0.9.6) unstable; urgency=low
-
-  * Updated dependency and codes for k2hdkc nodejs update - #12
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Thu, 26 Dec 2019 17:07:56 +0900
-
-k2hr3-api (0.9.5) unstable; urgency=low
-
-  * Improved template engine about mainly role member host information - #10
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Mon, 11 Nov 2019 13:13:19 +0900
-
-k2hr3-api (0.9.4) unstable; urgency=low
-
-  * Updated template engine, deprecated functions, and dependencies - #8
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Thu, 31 Oct 2019 14:18:55 +0900
-
-k2hr3-api (0.9.3) unstable; urgency=low
-
-  * Updated package dependency and support nodejs version - #6
-  * Fixed a bug about service resource expire key in k2hdkc - #5
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Fri, 11 Oct 2019 09:40:23 +0900
-
-k2hr3-api (0.9.2) unstable; urgency=low
-
-  * Supports kubernetes pod and container for role member - #3
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Thu, 26 Sep 2019 14:45:43 +0900
-
-k2hr3-api (0.9.1) unstable; urgency=low
-
-  * Moved publish-please package from dependencies to devDependencies - #1
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Tue, 12 Mar 2019 09:09:09 +0900
-
-k2hr3-api (0.9.0) unstable; urgency=low
-
-  * Beta version.
-
- -- Takeshi Nakatani <ggtakec@gmail.com>  Wed, 06 Mar 2019 12:00:00 +0900

package/app.js

@@ -1,292 +0,0 @@
-/*
- * K2HR3 REST API
- *
- * Copyright 2017 Yahoo Japan Corporation.
- *
- * K2HR3 is K2hdkc based Resource and Roles and policy Rules, gathers 
- * common management information for the cloud.
- * K2HR3 can dynamically manage information as "who", "what", "operate".
- * These are stored as roles, resources, policies in K2hdkc, and the
- * client system can dynamically read and modify these information.
- *
- * For the full copyright and license information, please view
- * the license file that was distributed with this source code.
- *
- * AUTHOR:   Takeshi Nakatani
- * CREATE:   Wed Jun 8 2017
- * REVISION:
- *
- */
-
-'use strict';
-
-var express		= require('express');
-var path		= require('path');
-var logger		= require('morgan');
-var cookieParser= require('cookie-parser');
-var bodyParser	= require('body-parser');
-
-//---------------------------------------------------------
-// Utilities
-//---------------------------------------------------------
-var	apiutil		= require('./lib/k2hr3apiutil');
-var	resutil		= require('./lib/k2hr3resutil');
-
-//---------------------------------------------------------
-// Load Configuration
-//---------------------------------------------------------
-var	r3Conf		= require('./lib/k2hr3config').r3ApiConfig;
-var	apiConf		= new r3Conf();
-
-//
-// Load variables
-//
-// - Local Tenants
-// - Load CORS(Cross-Origin Resource Sharing) Setting
-//
-// [NOTE][TODO]
-// It specifies a web development machine for temporary debugging.
-// In future we plan to specify with K2HR3 role.
-//
-var	is_localtenants		= true;
-var	cors_ips			= [];
-
-(function()
-{
-	var	k2hr3config		= require('config');
-
-	is_localtenants		= apiConf.isLocalTenants();
-
-	if(apiutil.isSafeEntity(k2hr3config) && !apiutil.isEmptyArray(k2hr3config.corsips)){
-		apiutil.mergeArray(cors_ips, k2hr3config.corsips);
-	}
-}());
-
-//---------------------------------------------------------
-// Debug logging objects
-//---------------------------------------------------------
-var r3logger	= require('./lib/dbglogging');			// eslint-disable-line no-unused-vars
-
-//---------------------------------------------------------
-// Environments
-//---------------------------------------------------------
-// NODE_ENV(development or production)
-// NODE_LOGGER(if 'no', not logging by morgan)
-//
-var	is_product	= apiutil.compareCaseString(apiutil.getSafeString(process.env.NODE_ENV), 'production');
-var	is_logging	= !apiutil.compareCaseString(apiutil.getSafeString(process.env.NODE_LOGGER), 'no');
-
-//---------------------------------------------------------
-// Routes
-//---------------------------------------------------------
-var version		= require('./routes/version');
-var userTokens	= require('./routes/userTokens');
-var policy		= require('./routes/policy');
-var resource	= require('./routes/resource');
-var role		= require('./routes/role');
-var service		= require('./routes/service');
-var acr			= require('./routes/acr');
-var list		= require('./routes/list');
-var userdata	= require('./routes/userdata');
-var extdata		= require('./routes/extdata');
-var tenant		= null;
-if(is_localtenants){
-	tenant		= require('./routes/tenant');
-}
-var verify		= null;
-if(!is_product){
-	verify		= require('./routes/debugVerify');
-}
-
-//
-// Express objects
-//
-var app			= express();
-var userExp		= express();
-var policyExp	= express();
-var resourceExp	= express();
-var roleExp		= express();
-var serviceExp	= express();
-var acrExp		= express();
-var listExp		= express();
-var userdataExp	= express();
-var extdataExp	= express();
-var tenantExp	= null;
-if(is_localtenants){
-	tenantExp	= express();
-}
-var verifyExp	= null;
-if(!is_product){
-	verifyExp	= express();
-}
-
-//---------------------------------------------------------
-// Trusted proxy
-//---------------------------------------------------------
-// [NOTE][TODO]
-// We set trusted proxy as only loopback now.
-// Here, we need to add CDN/Proxy for our NW, but pending now.
-//
-app.set('trust proxy',			'loopback');
-userExp.set('trust proxy',		'loopback');
-policyExp.set('trust proxy',	'loopback');
-resourceExp.set('trust proxy',	'loopback');
-roleExp.set('trust proxy',		'loopback');
-serviceExp.set('trust proxy',	'loopback');
-acrExp.set('trust proxy',		'loopback');
-listExp.set('trust proxy',		'loopback');
-userdataExp.set('trust proxy',	'loopback');
-extdataExp.set('trust proxy',	'loopback');
-if(is_localtenants){
-	tenantExp.set('trust proxy','loopback');
-}
-if(!is_product){
-	verifyExp.set('trust proxy','loopback');
-}
-
-//
-// CORS(Cross-Origin Resource Sharing) Controller
-//
-app.use(function(req, res, next)
-{
-	//
-	// Do not allow CORS for userToken without tenant name(=put/post unscoped token)
-	//
-	var userTokenUrlExp = new RegExp('^/v1/user/tokens(.*)');
-	if(req.client.localAddress !== req.client.remoteAddress && !apiutil.isEmptyArray(apiutil.getSafeString(req.url).match(userTokenUrlExp))){
-		//
-		// case of POST/PUT userToken
-		//
-		if(!apiutil.findStringInArray(apiConf.getCORSIPs(), req.client.remoteAddress) && !apiutil.findStringInArray(apiConf.getCORSIPs(), '*')){
-			// [NOTE]
-			// If allowcredauth is true in configuration and password is specified on PUT method,
-			// it allows authorization by credential(username/password).
-			// This case is used for accessing keystone directly.
-			// (The password is empty is allowed.)
-			//
-			if(	(apiutil.compareCaseString(req.method, 'PUT') && apiutil.isSafeEntity(req.query) && apiutil.isSafeString(req.query.username) && !(apiConf.isAllowedCredentialAccess() && apiutil.isSafeEntity(req.query.password)))	||
-				(apiutil.compareCaseString(req.method, 'POST') && apiutil.isSafeEntity(req.body) && apiutil.isSafeEntity(req.body.auth) && apiutil.isSafeEntity(req.body.auth.passwordCredentials))									)
-			{
-				//
-				// case of specified user credentials(except specified unscoped token)
-				//
-				var result = {
-					result:		false,
-					message:	'not allow CORS(cross-origin resource sharing) to /v1/user/tokens'
-				 };
-
-				resutil.errResponse(req, res, 405, result, 'application/json; charset=utf-8');
-				return;
-			}
-		}
-	}
-	//
-	// Origin is specified, allow it.
-	//
-	if(apiutil.isSafeString(req.headers.origin)){
-		res.header('Access-Control-Allow-Origin',		req.headers.origin);
-		res.header('Access-Control-Allow-Headers',		'Origin,X-Requested-With,X-HTTP-Method-Override,Content-Type,Accept,X-Auth-Token,x-k2hr3-debug');
-		res.header('Access-Control-Allow-Methods',		'HEAD,POST,GET,PUT,DELETE,OPTIONS');
-		res.header('Access-Control-Expose-Headers',		'X-Auth-Token,x-k2hr3-error');
-		res.header('Access-Control-Allow-Credentials',	true);
-		res.header('Access-Control-Max-Age',			'86400');
-	}
-	next();
-});
-
-//---------------------------------------------------------
-// Express
-//---------------------------------------------------------
-//
-// Setting for express
-//
-if(is_logging){
-	//
-	// Setup Log
-	//
-	app.use(logger(apiConf.getAccessLogFormat(), apiConf.getMorganLoggerOption(__dirname)));
-}
-app.use(bodyParser.json());
-app.use(bodyParser.urlencoded({ extended: false }));
-app.use(cookieParser());
-app.use(express.static(path.join(__dirname, 'public')));
-app.use('/status.html',	express.static(__dirname + '/public/status.html'));
-
-//
-// Route mapping
-//
-app.use('/',					version);		// '/'
-app.use('/v1',					version);		// '/v1'
-userExp.use('/', 				userTokens);	// '/v1/user/tokens'
-policyExp.use('/*', 			policy);		// '/v1/policy'
-resourceExp.use('/*', 			resource);		// '/v1/resource'
-roleExp.use('/*', 				role);			// '/v1/role'
-serviceExp.use('/*', 			service);		// '/v1/service'
-acrExp.use('/*', 				acr);			// '/v1/acr'
-listExp.use('/*', 				list);			// '/v1/list'
-userdataExp.use('/*', 			userdata);		// '/v1/userdata'
-extdataExp.use('/*', 			extdata);		// '/v1/extdata'
-if(is_localtenants){
-	tenantExp.use('/*', 		tenant);		// '/v1/tenant'
-}
-if(!is_product){
-	verifyExp.use('/*',			verify);		// '/v1/debug/verify*'
-}
-
-app.use('/v1/user/tokens',		userExp);		// mountpath:	'/v1/user/tokens*'
-app.use('/v1/policy',			policyExp);		// mountpath:	'/v1/policy*'
-app.use('/v1/resource',			resourceExp);	// mountpath:	'/v1/resource*'
-app.use('/v1/role',				roleExp);		// mountpath:	'/v1/role*'
-app.use('/v1/service',			serviceExp);	// mountpath:	'/v1/service*'
-app.use('/v1/acr',				acrExp);		// mountpath:	'/v1/acr*'
-app.use('/v1/list',				listExp);		// mountpath:	'/v1/list*'
-app.use('/v1/userdata',			userdataExp);	// mountpath:	'/v1/userdata*'
-app.use('/v1/extdata',			extdataExp);	// mountpath:	'/v1/extdata*'
-if(is_localtenants){
-	app.use('/v1/tenant',		tenantExp);		// mountpath:	'/v1/tenant*'
-}
-if(!is_product){
-	app.use('/v1/debug/verify',	verifyExp);		// mountpath:	'/v1/debug/verify*'
-}
-
-//---------------------------------------------------------
-// Error handler
-//---------------------------------------------------------
-//
-// catch 404 and forward to error handler
-//
-app.use(function(req, res, next)
-{
-	var err = new Error('Not Found');
-
-	err.status = 404;
-	next(err);
-});
-
-//
-// error handler
-//
-app.use(function(err, req, res, next)		// eslint-disable-line no-unused-vars
-{
-	// set locals, only providing error in development
-	res.locals.message = err.message;
-	res.locals.error = req.app.get('env') === 'development' ? err : {};
-
-	var result = {
-		result:		false,
-		message:	'Internal server error'
-	};
-
-	resutil.errResponse(req, res, (err.status || 500), result, 'application/json; charset=utf-8');
-});
-
-module.exports = app;
-
-/*
- * Local variables:
- * tab-width: 4
- * c-basic-offset: 4
- * End:
- * vim600: noexpandtab sw=4 ts=4 fdm=marker
- * vim<600: noexpandtab sw=4 ts=4
- */