issue/234 - Add edge function for signing and Host header replacement

configs/microapps-edge-to-origin/config.yml

@@ -0,0 +1,4 @@
+awsRegion: us-east-2
+originRegion: us-east-2
+signingMode: sign
+replaceHostHeader: true

jest.config.js

@@ -42,7 +42,7 @@ module.exports = {
   //   "lcov",
   //   "clover"
   // ],
-  coverageReporters: ['html', 'text'],
+  coverageReporters: ['html', 'text', 'clover'],
 
   // An object that configures minimum threshold enforcement for coverage results
   // coverageThreshold: undefined,
@@ -67,6 +67,8 @@ module.exports = {
   globals: {
     'ts-jest': {
       tsconfig: 'tsconfig.packages.json',
+      // Reduces test time from 85 seconds to 20-25 seconds on a 2018 MacBook Pro 13" Core i7
+      isolatedModules: true
     },
   },
 
@@ -130,9 +132,7 @@ module.exports = {
   // roots: [
   //   "<rootDir>"
   // ],
-  roots: [
-    '<rootDir>packages/',
-  ],
+  roots: ['<rootDir>packages/'],
 
   // Allows you to use a custom runner instead of Jest's default test runner
   // runner: "jest-runner",

package.json

@@ -29,10 +29,12 @@
     "format": "prettier --write \"packages/**/*.{js,ts}\"",
     "start:publish": "node packages/microapps-publish/dist/src/index.js",
     "start:publish:debug": "ts-node --inspect=5858 --debug-brk --ignore false packages/microapps-publish/src/index.ts",
-    "build": "tsc --build tsconfig.json",
+    "build": "yarn build:tsc && yarn esbuild:edge-to-origin",
+    "build:tsc": "tsc --build tsconfig.json",
     "build:publish": "tsc --build tsconfig.publish.json",
     "esbuild:deployer": "esbuild packages/microapps-deployer/src/index.ts --bundle --minify --sourcemap --platform=node --target=node14 --external:aws-sdk --outfile=packages/cdk/dist/microapps-deployer/index.js",
     "esbuild:router": "esbuild packages/microapps-router/src/index.ts --bundle --minify --sourcemap --platform=node --target=node14 --external:aws-sdk --outfile=packages/cdk/dist/microapps-router/index.js",
+    "esbuild:edge-to-origin": "esbuild packages/microapps-edge-to-origin/src/index.ts --bundle --minify --sourcemap --platform=node --target=node14 --external:aws-sdk --outfile=packages/microapps-edge-to-origin/dist/index.js",
     "build:deployer": "rollup --config rollup.deployer.js",
     "build:router": "rollup --config rollup.router.js && cp packages/microapps-router/appFrame.html distb/microapps-router/",
     "test": "AWS_PROFILE= AWS_EMF_ENVIRONMENT=Local jest",
@@ -45,7 +47,7 @@
     "@rollup/plugin-json": "^4.1.0",
     "@rollup/plugin-node-resolve": "^10.0.0",
     "@tsconfig/node14": "^1.0.0",
-    "@types/jest": "^26.0.0",
+    "@types/jest": "^27.0.0",
     "@types/node": "^16.9.2",
     "@typescript-eslint/eslint-plugin": "^4.9.0",
     "@typescript-eslint/parser": "^4.9.0",
@@ -61,11 +63,11 @@
     "eslint-plugin-import": "^2.25.3",
     "eslint-plugin-prettier": "^3.2.0",
     "husky": "^4.2.5",
-    "jest": "^26.6.3",
+    "jest": "^27.0.0",
     "jest-dynalite": "^3.4.4",
     "lint-staged": "^10.2.11",
     "patch-package": "^6.4.7",
-    "prettier": "^2.2.1",
+    "prettier": "^2.6.2",
     "projen": "~0.56.19",
     "replace-in-file": "^6.3.2",
     "rimraf": "^3.0.2",
@@ -74,9 +76,9 @@
     "rollup-plugin-terser": "^7.0.2",
     "rollup-plugin-typescript2": "^0.30.0",
     "start-server-and-test": "^1.14.0",
-    "ts-jest": "^26.5.6",
-    "ts-node": "^9.1.1",
-    "typescript": "4.3.5"
+    "ts-jest": "^27.0.0",
+    "ts-node": "^10.7.0",
+    "typescript": "^4.6.0"
   },
   "husky": {
     "hooks": {

packages/cdk/bin/cdk.ts

@@ -37,6 +37,9 @@ new MicroAppsStack(app, 'microapps-core', {
   deployDemoApp: shared.deployDemoApp,
   deployNextjsDemoApp: shared.deployNextjsDemoApp,
   deployReleaseApp: shared.deployReleaseApp,
+  // We need to know the origin region for signing requests
+  // Accessing Aws.REGION will end up writing a Token into the config file
+  originRegion: shared.region,
 });
 
 new MicroAppsStack(app, 'microapps-basic', {
@@ -47,6 +50,9 @@ new MicroAppsStack(app, 'microapps-basic', {
   deployDemoApp: shared.deployDemoApp,
   deployNextjsDemoApp: shared.deployNextjsDemoApp,
   deployReleaseApp: shared.deployReleaseApp,
+  // We need to know the origin region for signing requests
+  // Accessing Aws.REGION will end up writing a Token into the config file
+  originRegion: shared.region,
 });
 
 new MicroAppsStack(app, 'microapps-basic-prefix', {
@@ -58,6 +64,9 @@ new MicroAppsStack(app, 'microapps-basic-prefix', {
   deployNextjsDemoApp: shared.deployNextjsDemoApp,
   deployReleaseApp: shared.deployReleaseApp,
   rootPathPrefix: 'prefix',
+  // We need to know the origin region for signing requests
+  // Accessing Aws.REGION will end up writing a Token into the config file
+  originRegion: shared.region,
 });
 
 // Note: This is only run manually once per env to create build user

packages/cdk/lib/MicroApps.ts

@@ -126,6 +126,15 @@ export interface MicroAppsStackProps extends StackProps {
    * @example dev/
    */
   readonly rootPathPrefix?: string;
+
+  /**
+   * Origin region that API Gateway will be deployed to, used
+   * for the config.yml on the Edge function to sign requests for
+   * the correct region
+   *
+   * @default undefined
+   */
+  readonly originRegion?: string;
 }
 
 export class MicroAppsStack extends Stack {
@@ -155,6 +164,7 @@ export class MicroAppsStack extends Stack {
       certARNEdge,
       certARNOrigin,
       rootPathPrefix,
+      originRegion,
     } = props;
 
     let removalPolicy: RemovalPolicy | undefined = undefined;
@@ -228,6 +238,7 @@ export class MicroAppsStack extends Stack {
       removalPolicy,
       appEnv: nodeEnv,
       rootPathPrefix,
+      originRegion,
       ...optionalAssetNameOpts,
       ...optionals3PolicyOpts,
       ...optionalCustomDomainOpts,

packages/cdk/package.json

@@ -24,6 +24,6 @@
     "constructs": "10.0.5",
     "ts-node": "^9.0.0",
     "tslib": "^2.1.0",
-    "typescript": "~4.0.0"
+    "typescript": "^4.6.0"
   }
 }

packages/cdk/test/MicroApps.spec.ts

@@ -6,12 +6,16 @@ import { MicroAppsStack } from '../lib/MicroApps';
 describe('MicroAppsStack', () => {
   it('works with no params', () => {
     const app = new App({});
-    const stackName = 'construct';
-    const stack = new MicroAppsStack(app, stackName, {});
+    const stackName = 'stack';
+    const stack = new MicroAppsStack(app, stackName, {
+      env: {
+        region: 'us-east-1',
+      },
+    });
 
     expect(stack).toBeDefined();
     Template.fromStack(stack).hasResourceProperties('AWS::Lambda::Function', {});
-    Template.fromStack(stack).resourceCountIs('AWS::Lambda::Function', 3);
+    Template.fromStack(stack).resourceCountIs('AWS::Lambda::Function', 4);
     Template.fromStack(stack).hasOutput('edgedomainname', {
       Value: { 'Fn::GetAtt': ['microappscft5FDF8AB8', 'DomainName'] },
       Export: { Name: `${stackName}-edge-domain-name` },
@@ -24,7 +28,10 @@ describe('MicroAppsStack', () => {
   it('stable names with params', () => {
     const app = new App({});
     const stackName = 'microapps-stack-name';
-    const stack = new MicroAppsStack(app, 'construct', {
+    const stack = new MicroAppsStack(app, 'stack', {
+      env: {
+        region: 'us-east-1',
+      },
       stackName,
       domainNameEdge: 'appz.pwrdrvr.com',
       domainNameOrigin: 'appz-origin.pwrdrvr.com',
@@ -38,7 +45,7 @@ describe('MicroAppsStack', () => {
 
     expect(stack).toBeDefined();
     Template.fromStack(stack).hasResourceProperties('AWS::Lambda::Function', {});
-    Template.fromStack(stack).resourceCountIs('AWS::Lambda::Function', 3);
+    Template.fromStack(stack).resourceCountIs('AWS::Lambda::Function', 4);
     Template.fromStack(stack).hasOutput('edgedomainname', {
       Value: 'appz.pwrdrvr.com',
       Export: { Name: `${stackName}-edge-domain-name` },

packages/microapps-cdk/.projenrc.js

@@ -38,7 +38,11 @@ const project = new awscdk.AwsCdkConstructLibrary({
 
   // cdkTestDependencies: undefined,    /* AWS CDK modules required for testing. */
   // deps: [],                          /* Runtime dependencies of this module. */
-  deps: ['@aws-cdk/aws-apigatewayv2-alpha', '@aws-cdk/aws-apigatewayv2-integrations-alpha'],
+  deps: [
+    '@aws-cdk/aws-apigatewayv2-alpha',
+    '@aws-cdk/aws-apigatewayv2-authorizers-alpha',
+    '@aws-cdk/aws-apigatewayv2-integrations-alpha',
+  ],
 
   // description: undefined,            /* The description is just a string that helps people understand the purpose of the package. */
   // devDeps: [],                       /* Build dependencies for this module. */
@@ -49,7 +53,11 @@ const project = new awscdk.AwsCdkConstructLibrary({
     // '@aws-cdk/[email protected]',
     // 'patch-package@^6.4.7',
   ],
-  peerDeps: ['@aws-cdk/aws-apigatewayv2-alpha', '@aws-cdk/aws-apigatewayv2-integrations-alpha'],
+  peerDeps: [
+    '@aws-cdk/aws-apigatewayv2-alpha',
+    '@aws-cdk/aws-apigatewayv2-authorizers-alpha',
+    '@aws-cdk/aws-apigatewayv2-integrations-alpha',
+  ],
 
   // packageName: undefined,            /* The "name" in package.json. */
   // projectType: ProjectType.UNKNOWN,  /* Which type of project this is (library/app). */