sst 3.0.0 → 3.0.1-2

package/constructs/Auth.d.ts

@@ -1,100 +0,0 @@
-import { Construct } from "constructs";
-import { Api } from "./Api.js";
-import { FunctionDefinition } from "./Function.js";
-import { SSTConstruct } from "./Construct.js";
-import { FunctionBindingProps } from "./util/functionBinding.js";
-export interface AuthProps {
-    /**
-     * The function that will handle authentication
-     */
-    authenticator: FunctionDefinition;
-    cdk?: {
-        /**
-         * Allows you to override default id for this construct.
-         */
-        id?: string;
-    };
-}
-export interface ApiAttachmentProps {
-    /**
-     * The API to attach auth routes to
-     *
-     * @example
-     * ```js
-     * const api = new Api(stack, "Api", {});
-     * const auth = new Auth(stack, "Auth", {
-     *   authenticator: "functions/authenticator.handler"
-     * })
-     * auth.attach(stack, {
-     *   api
-     * })
-     * ```
-     */
-    api: Api;
-    /**
-     * Optionally specify the prefix to mount authentication routes
-     *
-     * @default "/auth"
-     *
-     * @example
-     * ```js
-     * const api = new Api(stack, "Api", {});
-     * const auth = new Auth(stack, "Auth", {
-     *   authenticator: "functions/authenticator.handler"
-     * })
-     * auth.attach(stack, {
-     *   api,
-     *   prefix: "/custom/prefix"
-     * })
-     * ```
-     */
-    prefix?: string;
-}
-/**
- * SST Auth is a lightweight authentication solution for your applications. With a simple set of configuration you can deploy a function attached to your API that can handle various authentication flows.  *
- * @example
- * ```
- * import { Auth } from "sst/constructs"
- *
- * new Auth(stack, "auth", {
- *   authenticator: "functions/authenticator.handler"
- * })
- */
-export declare class Auth extends Construct implements SSTConstruct {
-    readonly id: string;
-    private readonly authenticator;
-    private readonly apis;
-    /** @internal */
-    static list: Set<Auth>;
-    constructor(scope: Construct, id: string, props: AuthProps);
-    /** @internal */
-    getConstructMetadata(): {
-        type: "Auth";
-        data: {};
-    };
-    /** @internal */
-    getFunctionBinding(): FunctionBindingProps;
-    /**
-     * Attaches auth construct to an API
-     *
-     * @example
-     * ```js
-     * const api = new Api(stack, "Api", {});
-     * const auth = new Auth(stack, "Auth", {
-     *   authenticator: "functions/authenticator.handler"
-     * })
-     * auth.attach(stack, {
-     *   api
-     * })
-     * ```
-     */
-    attach(scope: Construct, props: ApiAttachmentProps): void;
-    /**
-     * @internal
-     */
-    injectConfig(): void;
-    /**
-     * @internal
-     */
-    static injectConfig(): void;
-}

package/constructs/Auth.js

@@ -1,177 +0,0 @@
-import * as ssm from "aws-cdk-lib/aws-ssm";
-import { Effect, Policy, PolicyStatement } from "aws-cdk-lib/aws-iam";
-import { Construct } from "constructs";
-import { Stack } from "./Stack.js";
-import { getEnvironmentKey, getParameterPath, placeholderSecretValue, } from "./util/functionBinding.js";
-import { CustomResource } from "aws-cdk-lib/core";
-const PUBLIC_KEY_PROP = "publicKey";
-const PRIVATE_KEY_PROP = "privateKey";
-const PREFIX_PROP = "prefix";
-/**
- * SST Auth is a lightweight authentication solution for your applications. With a simple set of configuration you can deploy a function attached to your API that can handle various authentication flows.  *
- * @example
- * ```
- * import { Auth } from "sst/constructs"
- *
- * new Auth(stack, "auth", {
- *   authenticator: "functions/authenticator.handler"
- * })
- */
-export class Auth extends Construct {
-    id;
-    authenticator;
-    apis = new Set();
-    /** @internal */
-    static list = new Set();
-    constructor(scope, id, props) {
-        super(scope, props.cdk?.id || id);
-        if (!props.authenticator ||
-            "defaults" in props ||
-            "login" in props ||
-            "triggers" in props ||
-            "identityPoolFederation" in props ||
-            "cdk" in props) {
-            throw new Error(`It looks like you may be passing in Cognito props to the Auth construct. The Auth construct was renamed to Cognito in version 1.10.0`);
-        }
-        Auth.list.add(this);
-        this.id = id;
-        const stack = Stack.of(scope);
-        this.authenticator = props.authenticator;
-        const policy = new Policy(this, "CloudFrontInvalidatorPolicy", {
-            statements: [
-                new PolicyStatement({
-                    actions: [
-                        "ssm:GetParameter",
-                        "ssm:PutParameter",
-                        "ssm:DeleteParameter",
-                    ],
-                    resources: [
-                        `arn:${stack.partition}:ssm:${stack.region}:${stack.account}:parameter/*`,
-                    ],
-                }),
-            ],
-        });
-        stack.customResourceHandler.role?.attachInlinePolicy(policy);
-        const resource = new CustomResource(this, "StackMetadata", {
-            serviceToken: stack.customResourceHandler.functionArn,
-            resourceType: "Custom::AuthKeys",
-            properties: {
-                publicPath: getParameterPath(this, PUBLIC_KEY_PROP),
-                privatePath: getParameterPath(this, PRIVATE_KEY_PROP),
-            },
-        });
-        resource.node.addDependency(policy);
-    }
-    /** @internal */
-    getConstructMetadata() {
-        return {
-            type: "Auth",
-            data: {},
-        };
-    }
-    /** @internal */
-    getFunctionBinding() {
-        const app = this.node.root;
-        return {
-            clientPackage: "auth",
-            variables: {
-                publicKey: {
-                    type: "secret",
-                },
-                // Example of referencing a secret
-                //publicKey2: {
-                //  type: "secret_reference",
-                //  secret: this.publicKey2,
-                //},
-            },
-            permissions: {
-                "ssm:GetParameters": [
-                    `arn:${Stack.of(this).partition}:ssm:${app.region}:${app.account}:parameter${getParameterPath(this, PUBLIC_KEY_PROP)}`,
-                ],
-            },
-        };
-    }
-    /**
-     * Attaches auth construct to an API
-     *
-     * @example
-     * ```js
-     * const api = new Api(stack, "Api", {});
-     * const auth = new Auth(stack, "Auth", {
-     *   authenticator: "functions/authenticator.handler"
-     * })
-     * auth.attach(stack, {
-     *   api
-     * })
-     * ```
-     */
-    attach(scope, props) {
-        const app = this.node.root;
-        // Validate: one Auth can only be attached to one Api
-        if (this.apis.has(props.api)) {
-            throw new Error("This Auth construct has already been attached to this Api construct.");
-        }
-        // Validate: one Api can only have one Auth attached to it
-        if (Array.from(Auth.list).some((auth) => auth.apis.has(props.api))) {
-            throw new Error("This Api construct already has an Auth construct attached.");
-        }
-        const prefix = props.prefix || "/auth";
-        for (let path of [`ANY ${prefix}/{proxy+}`, `GET ${prefix}`]) {
-            props.api.addRoutes(scope, {
-                [path]: {
-                    type: "function",
-                    function: this.authenticator,
-                    authorizer: "none",
-                },
-            });
-            // Auth construct has two types of Function bindinds:
-            // - Api routes: bindings defined in `getFunctionBinding()`
-            //     ie. calling `bind([auth])` will grant functions access to the public key
-            // - Auth authenticator: binds manually. Need to grant access to the prefix and private key
-            const fn = props.api.getFunction(path);
-            fn.addEnvironment(getEnvironmentKey(this, PREFIX_PROP), prefix);
-            fn.addEnvironment(getEnvironmentKey(this, PUBLIC_KEY_PROP), placeholderSecretValue());
-            fn.addEnvironment(getEnvironmentKey(this, PRIVATE_KEY_PROP), placeholderSecretValue());
-            fn.attachPermissions([
-                new PolicyStatement({
-                    actions: ["ssm:GetParameters"],
-                    effect: Effect.ALLOW,
-                    resources: [
-                        `arn:${Stack.of(this).partition}:ssm:${app.region}:${app.account}:parameter${getParameterPath(this, "*")}`,
-                    ],
-                }),
-            ]);
-        }
-        // Create a parameter for prefix
-        // note: currently if an Auth construct is attached to multiple Apis,
-        //       the prefix has to be the same for this to work.
-        if (this.apis.size === 0) {
-            new ssm.StringParameter(this, "prefix", {
-                parameterName: getParameterPath(this, PREFIX_PROP),
-                stringValue: prefix,
-            });
-        }
-        this.apis.add(props.api);
-    }
-    /**
-     * @internal
-     */
-    injectConfig() {
-        for (const api of this.apis) {
-            for (const route of api.routes) {
-                const fn = api.getFunction(route);
-                if (!fn)
-                    continue;
-                fn.bind([this]);
-            }
-        }
-    }
-    /**
-     * @internal
-     */
-    static injectConfig() {
-        for (const auth of Auth.list) {
-            auth.injectConfig();
-        }
-    }
-}

package/constructs/BaseSite.d.ts

@@ -1,29 +0,0 @@
-import { ErrorResponse, DistributionProps, BehaviorOptions, IOrigin } from "aws-cdk-lib/aws-cloudfront";
-export interface BaseSiteFileOptions {
-    exclude: string | string[];
-    include: string | string[];
-    cacheControl: string;
-    contentType?: string;
-}
-export interface BaseSiteEnvironmentOutputsInfo {
-    path: string;
-    stack: string;
-    environmentOutputs: {
-        [key: string]: string;
-    };
-}
-export interface BaseSiteReplaceProps {
-    files: string;
-    search: string;
-    replace: string;
-}
-export declare function buildErrorResponsesForRedirectToIndex(indexPage: string): ErrorResponse[];
-export declare function buildErrorResponsesFor404ErrorPage(errorPage: string): ErrorResponse[];
-export interface BaseSiteCdkDistributionProps extends Omit<DistributionProps, "defaultBehavior"> {
-    defaultBehavior?: Omit<BehaviorOptions, "origin"> & {
-        origin?: IOrigin;
-    };
-}
-export declare function getBuildCmdEnvironment(siteEnvironment?: {
-    [key: string]: string;
-}): Record<string, string>;

package/constructs/BaseSite.js

@@ -1,43 +0,0 @@
-import { Token } from "aws-cdk-lib/core";
-export function buildErrorResponsesForRedirectToIndex(indexPage) {
-    return [
-        {
-            httpStatus: 403,
-            responsePagePath: `/${indexPage}`,
-            responseHttpStatus: 200,
-        },
-        {
-            httpStatus: 404,
-            responsePagePath: `/${indexPage}`,
-            responseHttpStatus: 200,
-        },
-    ];
-}
-export function buildErrorResponsesFor404ErrorPage(errorPage) {
-    return [
-        {
-            httpStatus: 403,
-            responsePagePath: `/${errorPage}`,
-        },
-        {
-            httpStatus: 404,
-            responsePagePath: `/${errorPage}`,
-        },
-    ];
-}
-/////////////////////
-// Helper Functions
-/////////////////////
-export function getBuildCmdEnvironment(siteEnvironment) {
-    // Generate environment placeholders to be replaced
-    // ie. environment => { API_URL: api.url }
-    //     environment => API_URL="{{ API_URL }}"
-    //
-    const buildCmdEnvironment = {};
-    Object.entries(siteEnvironment || {}).forEach(([key, value]) => {
-        buildCmdEnvironment[key] = Token.isUnresolved(value)
-            ? `{{ ${key} }}`
-            : value;
-    });
-    return buildCmdEnvironment;
-}