tooling updates

Author: devksingh4

cloudformation/iam.yml

@@ -10,6 +10,8 @@ Parameters:
   LambdaFunctionName:
     Type: String
     AllowedPattern: ^[a-zA-Z0-9]+[a-zA-Z0-9-]+[a-zA-Z0-9]+$
+  SesEmailDomain:
+    Type: String
 Resources:
   ApiLambdaIAMRole:
     Type: AWS::IAM::Role
@@ -24,6 +26,21 @@ Resources:
             Service:
             - lambda.amazonaws.com
       Policies:
+      - PolicyDocument:
+          Version: '2012-10-17'
+          Statement:
+          - Action:
+            - ses:SendEmail
+            - ses:SendRawEmail
+            Effect: Allow
+            Resource: "*"
+            Condition:
+              StringEquals:
+                ses:FromAddress: !Sub "membership@${SesEmailDomain}"
+              ForAllValues:StringLike:
+                ses:Recipients:
+                  - "*@illinois.edu"
+        PolicyName: ses-membership
       - PolicyDocument:
           Version: '2012-10-17'
           Statement:
@@ -85,4 +102,4 @@ Outputs:
     Value:
       Fn::GetAtt:
       - ApiLambdaIAMRole
-      - Arn
+      - Arn

cloudformation/main.yml

@@ -32,8 +32,10 @@ Mappings:
   General:
     dev:
       LogRetentionDays: 7
+      SesDomain: "aws.qa.acmuiuc.org"
     prod:
       LogRetentionDays: 365
+      SesDomain: "acm.illinois.edu"
   ApiGwConfig:
     dev:
       ApiCertificateArn: arn:aws:acm:us-east-1:427040638965:certificate/63ccdf0b-d2b5-44f0-b589-eceffb935c23
@@ -71,6 +73,7 @@ Resources:
       Parameters:
         RunEnvironment: !Ref RunEnvironment
         LambdaFunctionName: !Sub ${ApplicationPrefix}-lambda
+        SesEmailDomain: !FindInMap [General, !Ref RunEnvironment, SesDomain]
 
   AppLogGroups:
     Type: AWS::Serverless::Application
@@ -127,6 +130,10 @@ Resources:
         Minify: true
         OutExtension:
           - .js=.mjs
+        Loader:
+          - .png=file
+          - .pkpass=file
+          - .json=file
         Target: "es2022"
         Sourcemap: false
         EntryPoints:

generate_jwt.js

@@ -18,7 +18,7 @@ const payload = {
     groups: ["0"],
     idp: "https://login.microsoftonline.com",
     ipaddr: "192.168.1.1",
-    name: "John Doe",
+    name: "Doe, John",
     oid: "00000000-0000-0000-0000-000000000000",
     rh: "rh-value",
     scp: "user_impersonation",

src/api/esbuild.config.js

@@ -0,0 +1,34 @@
+import { build, context } from 'esbuild';
+import { readFileSync } from 'fs';
+import { resolve } from 'path';
+
+const isWatching = !!process.argv.includes('--watch')
+const nodePackage = JSON.parse(readFileSync(resolve(process.cwd(), 'package.json'), 'utf8'));
+
+const buildOptions = {
+  entryPoints: [resolve(process.cwd(), 'index.ts')],
+  outfile: resolve(process.cwd(), '../', '../', 'dist_devel', 'index.js'),
+  bundle: true,
+  platform: 'node',
+  format: 'esm',
+  external: [
+    Object.keys(nodePackage.dependencies ?? {}),
+    Object.keys(nodePackage.peerDependencies ?? {}),
+    Object.keys(nodePackage.devDependencies ?? {}),
+  ].flat(),
+  loader: {
+    '.png': 'file', // Add this line to specify a loader for .png files
+  },
+};
+
+if (isWatching) {
+  context(buildOptions).then(ctx => {
+    if (isWatching) {
+      ctx.watch();
+    } else {
+      ctx.rebuild();
+    }
+  });
+} else {
+  build(buildOptions)
+}

src/api/package.json

@@ -8,7 +8,7 @@
   "type": "module",
   "scripts": {
     "build": "tsc",
-    "dev": "cross-env LOG_LEVEL=debug tsx watch index.ts",
+    "dev": "cross-env LOG_LEVEL=debug concurrently --names 'esbuild,server' 'node esbuild.config.js --watch' 'cd ../../dist_devel && nodemon index.js'",
     "typecheck": "tsc --noEmit",
     "lint": "eslint . --ext .ts --cache",
     "prettier": "prettier --check *.ts **/*.ts",