feat(csi-48): create ispa functionality

.env

@@ -0,0 +1,28 @@
+# --- .env is used in tests and during local development --- #
+PROXY_ID=proxy1
+LOG_LEVEL=debug
+
+INBOUND_LISTEN_PORT_A=4000
+INBOUND_LISTEN_PORT_B=4100
+
+OAUTH_TOKEN_ENDPOINT_A=http://localhost:8080/openid-connect/token
+OAUTH_CLIENT_KEY_A=dfsp-jwt
+OAUTH_CLIENT_SECRET_A=secretA
+
+OAUTH_TOKEN_ENDPOINT_B=http://localhost:8080/openid-connect/token
+OAUTH_CLIENT_KEY_B=dfsp-jwt
+OAUTH_CLIENT_SECRET_B=secretB
+
+#PEER_ENDPOINT_A=extapi.dev.devbaremetal.moja-onprem.net
+#PEER_ENDPOINT_B=extapi.uat.devbaremetal.moja-onprem.net
+PEER_ENDPOINT_A=localhost:6443
+PEER_ENDPOINT_B=localhost:6443
+
+MGMT_API_WS_URL_A=localhost
+MGMT_API_WS_URL_B=localhost
+MGMT_API_WS_PORT_A=4005
+MGMT_API_WS_PORT_B=4005
+
+INCOMING_HEADERS_REMOVAL=xxx,yyy,zzz
+
+HUB_HEADERS=h1,v1;h2,v2;h3,v3

.eslintrc.js

@@ -20,6 +20,7 @@ module.exports = {
     quotes: ['error', 'single', { allowTemplateLiterals: false }],
     indent: ['error', 2, { SwitchCase: 1 }],
     semi: ['error'],
+    'object-curly-spacing': ['error', 'always']
   },
   env: {
     node: true,

.github/workflows/docker-publish.yml

@@ -0,0 +1,63 @@
+name: Docker Publish
+
+on:
+  push:
+    tags: [ 'v*' ] # todo: clarify, why it doesn't work with release (only snapshot)
+
+jobs:
+  lint-and-test:
+    uses: infitx-org/inter-scheme-proxy-adapter/.github/workflows/main.yml@main
+
+  build-and-push-image:
+    needs: lint-and-test
+    # todo: clarify why lint-and-test job runs twice!
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 20
+          cache: 'npm'
+
+      - name: Setup Git
+        run: |
+          git config user.name "GitHub Actions"
+          git config user.email "[email protected]"
+
+      - run: npm ci
+
+      - name: Build
+        shell: bash
+        run: npm run build
+
+      - name: Build image
+        run: docker build . --file Dockerfile --tag ${GITHUB_REPOSITORY#*/}
+
+      - name: Log into GitHub Container Registry
+        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login https://ghcr.io -u ${{ github.actor }} --password-stdin
+
+      - name: Push image to GitHub Container Registry
+        run: |
+          IMAGE_ID=ghcr.io/${{ github.repository_owner }}/${GITHUB_REPOSITORY#*/}
+
+          # Change all uppercase to lowercase
+          IMAGE_ID=$(echo $IMAGE_ID | tr '[A-Z]' '[a-z]')
+
+          # Strip git ref prefix from version
+          VERSION=$(echo "${{ github.ref }}" | sed -e 's,.*/\(.*\),\1,')
+
+          # Strip "v" prefix from tag name
+          [[ "${{ github.ref }}" == "refs/tags/"* ]] && VERSION=$(echo $VERSION | sed -e 's/^v//')
+
+          # Use Docker `latest` tag convention
+          [ "$VERSION" == "master" ] && VERSION=latest
+
+          echo IMAGE_ID=$IMAGE_ID
+          echo VERSION=$VERSION
+
+          docker tag ${GITHUB_REPOSITORY#*/} $IMAGE_ID:$VERSION
+          docker push $IMAGE_ID:$VERSION

.github/workflows/main.yml

@@ -46,3 +46,11 @@ jobs:
       - run: npm run build
       - run: npm run lint
       - run: npm run test
+
+      - name: Run integration tests
+        run: |
+          docker compose build
+          docker compose up -d
+          echo "waiting for 15sec before tests run..." && sleep 15
+          npm run test:int
+          docker compose down -v  

.gitignore

@@ -57,8 +57,8 @@ dist/
 # Yarn Integrity file
 .yarn-integrity
 
-# dotenv environment variables file
-.env
+# used in tests and local development
+# .env
 
 # next.js build output
 .next

.husky/pre-push

@@ -1,6 +1,7 @@
 #!/bin/sh
 . "$(dirname "$0")/_/husky.sh"
 
+npm run lint
 npm run dep:check
 npm run audit:check
 npm run test:unit

CHANGELOG.md

@@ -0,0 +1,12 @@
+# Changelog
+
+All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
+
+## [0.5.0](https://github.com/infitx-org/inter-scheme-proxy-adapter/compare/v0.5.0-snapshot.1...v0.5.0) (2024-06-26)
+
+### [0.4.4](https://github.com/infitx-org/inter-scheme-proxy-adapter/compare/main...feat/csi-48) (2024-06-20)
+
+
+### Features
+
+* **csi-12:** created ISPA ([e487b1d](https://github.com/infitx-org/inter-scheme-proxy-adapter/commit/e487b1dbd7cc400f629c6afe22352997e8702b69))

Dockerfile

@@ -1,32 +1,25 @@
 ARG NODE_VERSION=lts-alpine
-
 # NOTE: Ensure you set NODE_VERSION Build Argument as follows...
 #
 #  export NODE_VERSION="$(cat .nvmrc)-alpine" \
 #  docker build \
 #    --build-arg NODE_VERSION=$NODE_VERSION \
 #    -t infitx-org/inter-scheme-proxy-adapter:local \
 #    . \
-#
 
 FROM node:${NODE_VERSION} as builder
-#RUN apk add --no-cache git python3 build-base
-WORKDIR /opt/app
 
-## Copy basic files for installing dependencies
+WORKDIR /opt/app
 COPY tsconfig.json package*.json ./
 COPY src ./src
 
 RUN npm ci
-
-## Build the app
 RUN npm run build
 
 ## *Application*
 FROM node:${NODE_VERSION}
-#RUN apk add --no-cache git python3 g++ make
-WORKDIR /opt/app
 
+WORKDIR /opt/app
 COPY package*.json ./
 RUN npm ci --omit=dev
 
@@ -37,7 +30,4 @@ USER ml-user
 ## Copy of dist directory from builder
 COPY --chown=ml-user --from=builder /opt/app/dist ./dist
 
-## Expose any application ports
-# EXPOSE <PORT>
-
 CMD [ "node" , "./dist/index.js" ]

commitlint.config.js

@@ -1,3 +1,3 @@
 module.exports = {
-  extends: ['@commitlint/config-conventional']
-}
+  extends: ['@commitlint/config-conventional'],
+};

docker-compose.yml

@@ -0,0 +1,87 @@
+version: '3.8'
+
+x-mock-server: &MOCK_SERVER
+  build:
+    context: ./docker/mock-servers
+    dockerfile: Dockerfile
+  restart: always
+  env_file: .env
+  volumes:
+    - ./docker/mock-servers/certs/:/opt/app/certs/
+
+x-hub: &HUB
+  <<: *MOCK_SERVER
+  command: npm run start:hub
+
+x-men-api: &MEN_API
+  <<: *MOCK_SERVER
+  command: npm run start:ws
+
+x-oidc-server: &OIDC_SERVER
+  <<: *MOCK_SERVER
+  command: npm run start:oidc
+
+
+services:
+  proxy:
+    build:
+      context: ./
+      dockerfile: Dockerfile
+    command: /bin/sh -c "sleep 15 && npm start" # todo: use better approach instead of sleep 15
+    restart: on-failure
+    env_file: .env
+    environment:
+      - PEER_ENDPOINT_A=hub-a:6443
+      - PEER_ENDPOINT_B=hub-b:6443
+      - MGMT_API_WS_URL_A=men-api-a
+      - MGMT_API_WS_URL_B=men-api-b
+      - OAUTH_TOKEN_ENDPOINT_A=http://oidc-server-a:8080/openid-connect/token
+      - OAUTH_TOKEN_ENDPOINT_B=http://oidc-server-b:8080/openid-connect/token
+    ports:
+      - "${INBOUND_LISTEN_PORT_A}:${INBOUND_LISTEN_PORT_A}"
+      - "${INBOUND_LISTEN_PORT_B}:${INBOUND_LISTEN_PORT_B}"
+    depends_on:
+      - hub-a
+      - hub-b
+      - men-api-a
+      - men-api-b
+      - oidc-server-a
+      - oidc-server-b
+
+  hub-a:
+    <<: *HUB
+    environment:
+      - SERVER_CERTS_FIELD=server-hub-a
+    ports:
+      - "6443:6443"
+
+  hub-b:
+    <<: *HUB
+    environment:
+      - SERVER_CERTS_FIELD=server-hub-b
+    ports:
+      - "26443:6443"
+
+  men-api-a:
+    <<: *MEN_API
+    environment:
+      - CLIENT_CERTS_FIELD=client-hub-a
+    ports:
+      - "${MGMT_API_WS_PORT_A}:4005"
+
+  men-api-b:
+    <<: *MEN_API
+    environment:
+      - CLIENT_CERTS_FIELD=client-hub-b
+    ports:
+      - "24005:4005"
+
+  oidc-server-a:
+    <<: *OIDC_SERVER
+    ports:
+      - "8080:8080"
+
+  oidc-server-b:
+    <<: *OIDC_SERVER
+    ports:
+      - "28080:8080"

docker/mock-servers/Dockerfile

@@ -0,0 +1,15 @@
+ARG NODE_VERSION=lts-alpine
+ARG USERNAME=ml-user
+
+FROM node:${NODE_VERSION}
+ARG USERNAME
+
+WORKDIR /opt/app
+COPY tsconfig.json package*.json ./
+COPY src ./src
+RUN npm ci
+
+RUN adduser -D ${USERNAME}
+USER ${USERNAME}
+
+CMD [ "npm" , "start" ]

docker/mock-servers/certs/ca-cert.pem

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----