level0 for PRs

Author: nhsd-david-wass

Makefile

@@ -53,9 +53,16 @@ set-access: guard-APIM_ENV
 	envsubst '$${ACCESS}' \
 	< specification/api/components/x-nhsd-apim/access-template.yml > specification/api/components/x-nhsd-apim/access.yml
 
+set-security: guard-APIM_ENV
+	@ SECURITY=security-$$APIM_ENV.yml \
+	envsubst '$${SECURITY}' \
+	< specification/api/components/security/security-template.yml > specification/api/components/security/security.yml
+
 construct-spec: guard-APIM_ENV
 	$(MAKE) set-target APIM_ENV=$$APIM_ENV
 	$(MAKE) set-access APIM_ENV=$$APIM_ENV
+	$(MAKE) set-security APIM_ENV=$$APIM_ENV
+
 
 build-json-oas-spec: guard-APIM_ENV
 	$(MAKE) construct-spec APIM_ENV=$$APIM_ENV

specification/api/components/security/security-dev-pr.yml

@@ -0,0 +1 @@
+app-level0: []

specification/api/components/security/security-dev.yml

@@ -0,0 +1 @@
+app-level3: [ ]

specification/api/components/security/security-sandbox.yml

@@ -0,0 +1 @@
+app-level0: []

specification/api/components/security/security-template.yml

@@ -0,0 +1 @@
+$ref: $SECURITY

specification/api/components/security/security.yml

@@ -0,0 +1 @@
+$ref: security-dev-pr.yml

specification/api/components/x-nhsd-apim/access-dev-pr.yml

@@ -1 +1,3 @@
-[]
+- title: Application Restricted
+  grants:
+    app-level0: []

specification/api/components/x-nhsd-apim/target-dev.yml

@@ -3,5 +3,5 @@ healthcheck: /_status
 url: https://suppliers.dev.nhsnotify.national.nhs.uk
 security:
   type: apikey
-  header: Authorization
+  header: nhsd-apim-apikey
   secret: nhs-notify-supplier-key

specification/api/notify-supplier-phase1.yml

@@ -8,7 +8,7 @@ info:
     This specification represents the in-development 'next' version of the API schema
     and should be treated as unstable.
 security:
-  - app-level3: [ ]
+  - $ref: 'components/security/security.yml'
 paths:
   /letters:
     parameters:
@@ -57,6 +57,9 @@ components:
   securitySchemes:
     app-level3:
       $ref: https://proxygen.ptl.api.platform.nhs.uk/components/securitySchemes/app-level3
+    app-level0:
+      $ref: https://proxygen.ptl.api.platform.nhs.uk/components/securitySchemes/app-level0
+
 tags:
   - name: letter
     description: ''