Fix api-gateway-lambda-token-authorizer

Author: Michael Kaiser

typescript/api-gateway-lambda-token-authorizer/test/stack/__snapshots__/gateway-lambda-auth-stack.test.ts.snap

@@ -198,7 +198,7 @@ exports[`Snapshot Stack 1`] = `
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-\${AWS::AccountId}-\${AWS::Region}",
           },
-          "S3Key": "2819175352ad1ce0dae768e83fc328fb70fb5f10b4a8ff0ccbcb791f02b0716d.zip",
+          "S3Key": "NORMALIZED_ASSET_HASH.zip",
         },
         "Handler": "index.handler",
         "Role": {
@@ -322,7 +322,7 @@ exports[`Snapshot Stack 1`] = `
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-\${AWS::AccountId}-\${AWS::Region}",
           },
-          "S3Key": "2ad282c80ed8bef2dc8a20da8b07e92dd5259826cca0b685f8cc11f808eca9bb.zip",
+          "S3Key": "NORMALIZED_ASSET_HASH.zip",
         },
         "Description": "Lambda Authorizer",
         "Environment": {
@@ -507,7 +507,7 @@ exports[`Snapshot Stack 1`] = `
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-\${AWS::AccountId}-\${AWS::Region}",
           },
-          "S3Key": "dc8dcb7f07403837f3ff1672cbf17e30ee3eaa1a3a058c5397b9db8b9e964b6b.zip",
+          "S3Key": "NORMALIZED_ASSET_HASH.zip",
         },
         "Description": "Operational Lambda",
         "Environment": {

typescript/api-gateway-lambda-token-authorizer/test/stack/gateway-lambda-auth-stack.test.ts

@@ -2,14 +2,43 @@ import { App } from "aws-cdk-lib";
 import { GatewayLambdaAuth } from "../../lib/stack/gateway-lambda-auth-stack";
 import { Template } from "aws-cdk-lib/assertions";
 
-describe('Snapshot', () => {
+/**
+ * Normalizes asset hashes in CloudFormation templates to ensure consistent snapshots
+ * across different environments (local vs CI/CD).
+ */
+function normalizeAssetHashes(template: any): any {
+  // Create a deep copy of the template to avoid modifying the original
+  const templateCopy = JSON.parse(JSON.stringify(template));
+  
+  // Function to recursively traverse the template and replace asset hashes
+  function replaceAssetHashes(obj: any) {
+    if (!obj || typeof obj !== 'object') return;
+    
+    // Process object properties
+    for (const key in obj) {
+      if (key === 'S3Key' && typeof obj[key] === 'string' && /^[a-f0-9]{64}\.zip$/.test(obj[key])) {
+        // Replace asset hash with a constant placeholder
+        obj[key] = 'NORMALIZED_ASSET_HASH.zip';
+      } else if (typeof obj[key] === 'object') {
+        // Recursively process nested objects and arrays
+        replaceAssetHashes(obj[key]);
+      }
+    }
+  }
+  
+  replaceAssetHashes(templateCopy);
+  return templateCopy;
+}
 
+describe('Snapshot', () => {
     it('Stack', () => {
         const app = new App();
         const stack = new GatewayLambdaAuth(app, 'test-api-gateway-lambda-auth');
         const template = Template.fromStack(stack);
-        expect(template.toJSON()).toMatchSnapshot();
+        
+        // Normalize asset hashes before snapshot comparison
+        const normalizedTemplate = normalizeAssetHashes(template.toJSON());
+        expect(normalizedTemplate).toMatchSnapshot();
     });
-
 })