feat(identity): phase 2

.env-example

@@ -1,16 +1,20 @@
 export CLIENT_ID=""
 export CLIENT_SECRET=""
-export REDIRECT_URI="http://localhost:8081/auth"
+export REDIRECT_URI="http://localhost:8081/v1/auth"
 export NODE_ENV="LOCAL_DEV"
 export COOKIE_DOMAIN="localhost"
 export AUTH_TOKEN_EXPIRY_DURATION_IN_MILLISECONDS=3600000
+export SESSION_SECRET=mysessionsecretblah
 export JWT_SECRET=mysecretblah
 export ENCRYPTION_SECRET=anothersecretblah
 export FRONTEND_URL='http://localhost:8081'
 export GITHUB_ORG_NAME="isomerpages"
 export GITHUB_BUILD_ORG_NAME="opengovsg"
 export GITHUB_BUILD_REPO_NAME="isomer-build"
 export MUTEX_TABLE_NAME=""
+export MAX_NUM_OTP_ATTEMPTS=5
+export OTP_EXPIRY=900000
+export MUTEX_TABLE_NAME="mutex-table"
 
 # GitHub access token to create repo
 export SYSTEM_GITHUB_TOKEN=""
@@ -36,7 +40,6 @@ export DB_ENABLE_LOGGING=""
 
 export LOCAL_SITE_ACCESS_TOKEN=""
 export OTP_SECRET="dummysecret"
-export DOMAIN_WHITELIST=".gov.sg"
 
 # Email
 export POSTMAN_API_KEY=""
@@ -48,3 +51,14 @@ export POSTMAN_SMS_CRED_NAME=""
 export DD_ENV="local"
 export DD_SERVICE="isomer"
 export DD_TAGS="service:isomer"
+
+# Cloudmersive
+export CLOUDMERSIVE_API_KEY=""
+
+# GitGuardian
+export GITGUARDIAN_API_KEY=""
+
+# SQS Queue
+export INCOMING_QUEUE_URL="incoming"
+export OUTGOING_QUEUE_URL="outgoing"
+export SITE_LAUNCH_QUEUE_URL="site_launch"

.env.test

@@ -10,20 +10,58 @@ export FRONTEND_URL="http://localhost:3000"
 export GITHUB_ORG_NAME="isomerpages"
 export GITHUB_BUILD_ORG_NAME="opengovsg"
 export GITHUB_BUILD_REPO_NAME="isomer-build"
+export MUTEX_TABLE_NAME="mutex-table"
 export ISOMERPAGES_REPO_PAGE_COUNT=3
+export MAX_NUM_OTP_ATTEMPTS=5
+export OTP_EXPIRY=900000
+export SESSION_SECRET=blahblah
+
+# GitHub access token to create repo
+export SYSTEM_GITHUB_TOKEN="github_token"
+
+# FormSG keys
+export SITE_CREATE_FORM_KEY="site_form_key"
+
+# Required to connect to DynamoDB
+export AWS_ACCESS_KEY_ID="abc123"
+export AWS_SECRET_ACCESS_KEY="xyz123"
+
+# Required to run end-to-end tests
+export E2E_TEST_REPO="e2e-test-repo"
+export E2E_TEST_SECRET="test"
+export E2E_TEST_GH_TOKEN="test"
 
 # Database
 export DB_URI="postgres://isomer:password@localhost:54321/isomercms_test"
 export DB_MIN_POOL="1"
 export DB_MAX_POOL="10"
-export DB_ENABLE_LOGGING=""
+export DB_ENABLE_LOGGING="true"
 
-export LOCAL_SITE_ACCESS_TOKEN=""
+export LOCAL_SITE_ACCESS_TOKEN="dummy"
 export OTP_SECRET="dummysecret"
-export DOMAIN_WHITELIST=".gov.sg"
 
 # Email
 export POSTMAN_API_KEY="some api key"
 
 # SMS
 export POSTMAN_SMS_CRED_NAME="isomer"
+
+# Amplify
+export AWS_REGION="ap-southeast-1"
+export AWS_ACCOUNT_NUMBER="random"
+
+# DataDog
+export DD_ENV="local"
+export DD_SERVICE="isomer"
+export DD_TAGS="service:isomer"
+
+# Cloudmersive
+export CLOUDMERSIVE_API_KEY="cloudmersive"
+
+# GitGuardian
+export GITGUARDIAN_API_KEY="gitguardian"
+
+# SQS Queue
+export INCOMING_QUEUE_URL="incoming"
+export OUTGOING_QUEUE_URL="outgoing"
+export SITE_LAUNCH_QUEUE_URL="site_launch"

.eslintrc.json

@@ -1,118 +1,129 @@
 {
-    "env": {
-        "browser": true,
-        "commonjs": true,
-        "es2021": true,
-        "jest": true,
-        "jest/globals": true
-    },
-    "extends": [
-        "airbnb-base",
-        "prettier",
-        "plugin:import/typescript"
-    ],
-    "plugins": ["only-warn", "import", "jest"],
-    "parserOptions": {
-        "ecmaVersion": 12
-    },
-    "rules": {
-        "no-underscore-dangle": "off",
-        "class-methods-use-this": "off",
-        "import/no-unresolved": "error",
-        "import/extensions": ["warn", "never"],
-        "import/order": [
-            "error",
-            {
-                "alphabetize": {
-                    "order": "asc",
-                    "caseInsensitive": true
-                },
-                "newlines-between": "always",
-                "groups": ["builtin", "external", "internal", "parent", "sibling", "index", "object"],
-                "pathGroups": [{
-                        "pattern": "@logger/**",
-                        "group": "internal",
-                        "position": "before"
-                    },
-                    {
-                        "pattern": "@errors/**",
-                        "group": "internal",
-                        "position": "before"
-                    },
-                    {
-                        "pattern": "@middleware/**",
-                        "group": "internal",
-                        "position": "before"
-                    },
-                    {
-                        "pattern": "@classes/**",
-                        "group": "internal",
-                        "position": "before"
-                    },
-                    {
-                        "pattern": "@routes/**",
-                        "group": "internal",
-                        "position": "before"
-                    },
-                    {
-                        "pattern": "@utils/**",
-                        "group": "internal",
-                        "position": "before"
-                    },
-                    {
-                        "pattern": "@validators/**",
-                        "group": "internal",
-                        "position": "before"
-                    },
-                    {
-                      "pattern": "@constants/**",
-                      "group": "internal",
-                      "position": "before"
-                  }
-                ]
-            }
+  "env": {
+    "browser": true,
+    "commonjs": true,
+    "es2021": true,
+    "jest": true,
+    "jest/globals": true
+  },
+  "extends": ["airbnb-base", "prettier", "plugin:import/typescript"],
+  "plugins": ["only-warn", "import", "jest"],
+  "parserOptions": {
+    "ecmaVersion": 12
+  },
+  "rules": {
+    "no-underscore-dangle": "off",
+    "class-methods-use-this": "off",
+    "import/no-unresolved": "error",
+    "import/extensions": ["warn", "never"],
+    "import/order": [
+      "error",
+      {
+        "alphabetize": {
+          "order": "asc",
+          "caseInsensitive": true
+        },
+        "newlines-between": "always",
+        "groups": [
+          "builtin",
+          "external",
+          "internal",
+          "parent",
+          "sibling",
+          "index",
+          "object"
         ],
-        "jest/no-identical-title": "error"
-    },
-    "overrides": [
-        {
-          "files": ["*.ts", "*.tsx"],
-          "parser": "@typescript-eslint/parser",
-          "extends": ["plugin:@typescript-eslint/recommended"]
-        }
-      ],
-    "settings": {
-        "import/parsers": {
-            "@typescript-eslint/parser": [".ts", ".tsx"]
-          },      
-        "import/resolver": {
-            "typescript": {
-                // always try to resolve types under `<root>@types` directory even it doesn't contain any source code, like `@types/unist`
-                "alwaysTryTypes": true 
-            },        
-            "node": {
-                "paths": ["src"],
-                "extensions": [".js", ".jsx", ".ts", ".tsx"]
-            },
-            "alias": [
-                ["@root", "."],
-                ["@classes", "./classes"],
-                ["@errors", "./errors"],
-                ["@logger", "./logger"],
-                ["@middleware", "./middleware"],
-                ["@routes", "./routes"],
-                ["@utils", "./utils"],
-                ["@loaders", "./loaders"],
-                ["@database", "./database"],
-                ["@services", "./services"],
-                ["@validators", "./validators"],
-                ["@fixtures", "./fixtures"],
-                ["@database", "./database"],
-                ["@constants", "./constants"]
-            ]
-        }
+        "pathGroups": [
+          {
+            "pattern": "@config/**",
+            "group": "internal",
+            "position": "before"
+          },
+          {
+            "pattern": "@logger/**",
+            "group": "internal",
+            "position": "before"
+          },
+          {
+            "pattern": "@errors/**",
+            "group": "internal",
+            "position": "before"
+          },
+          {
+            "pattern": "@middleware/**",
+            "group": "internal",
+            "position": "before"
+          },
+          {
+            "pattern": "@classes/**",
+            "group": "internal",
+            "position": "before"
+          },
+          {
+            "pattern": "@routes/**",
+            "group": "internal",
+            "position": "before"
+          },
+          {
+            "pattern": "@utils/**",
+            "group": "internal",
+            "position": "before"
+          },
+          {
+            "pattern": "@validators/**",
+            "group": "internal",
+            "position": "before"
+          },
+          {
+            "pattern": "@constants/**",
+            "group": "internal",
+            "position": "before"
+          }
+        ]
+      }
+    ],
+    "jest/no-identical-title": "error"
+  },
+  "overrides": [
+    {
+      "files": ["*.ts", "*.tsx"],
+      "parser": "@typescript-eslint/parser",
+      "extends": ["plugin:@typescript-eslint/recommended"]
+    }
+  ],
+  "settings": {
+    "import/parsers": {
+      "@typescript-eslint/parser": [".ts", ".tsx"]
     },
-    "globals": {
-        "Base64": true
+    "import/resolver": {
+      "typescript": {
+        // always try to resolve types under `<root>@types` directory even it doesn't contain any source code, like `@types/unist`
+        "alwaysTryTypes": true
+      },
+      "node": {
+        "paths": ["src"],
+        "extensions": [".js", ".jsx", ".ts", ".tsx"]
+      },
+      "alias": [
+        ["@root", "."],
+        ["@config", "./config"],
+        ["@classes", "./classes"],
+        ["@errors", "./errors"],
+        ["@logger", "./logger"],
+        ["@middleware", "./middleware"],
+        ["@routes", "./routes"],
+        ["@utils", "./utils"],
+        ["@loaders", "./loaders"],
+        ["@database", "./database"],
+        ["@services", "./services"],
+        ["@validators", "./validators"],
+        ["@fixtures", "./fixtures"],
+        ["@database", "./database"],
+        ["@constants", "./constants"]
+      ]
     }
-}
+  },
+  "globals": {
+    "Base64": true
+  }
+}

.github/workflows/ci.yml

@@ -71,7 +71,7 @@ jobs:
           key: ${{ runner.OS }}-node-${{ hashFiles('**/package-lock.json') }}
       - run: npm ci
       - run: npm run dev:services
-      - run: . .env.test && npx jest
+      - run: . .env.test && npx jest --runInBand
       - run: docker compose down
 
   gatekeep:

.gitignore

@@ -10,3 +10,4 @@ build/
 .DS_Store
 .step-functions-local/
 .serverless/
+.cache_ggshield

.husky/pre-commit

@@ -2,3 +2,4 @@
 . "$(dirname "$0")/_/husky.sh"
 
 npx lint-staged
+source .env && ggshield secret scan pre-commit