feat: Extract Credential from 'authorization' header and set it as 'A… (#94)

Author: dmaizel

charts/internal-gateway/files/conf.d/s3-gateway.conf

@@ -32,6 +32,10 @@ server {
         proxy_read_timeout 60s;
         proxy_send_timeout 60s;
 
+        js_set $auth_header auth.setAuthHeader;
+
+        proxy_set_header Authorization $auth_header;
+
         proxy_pass http://{{ index $vals "codefresh" "serviceEndpoints" "cfapi-auth" "svc" }}:{{ index $vals "codefresh" "serviceEndpoints" "cfapi-auth" "port" }};
     }
 }

charts/internal-gateway/files/njs/auth.js

@@ -1,10 +1,52 @@
 function account_name(r) {
+    // Get the variable "auth_entity"
     const auth_entity = r.variables["auth_entity"];
-    const b64decoded = Buffer.from(auth_entity, 'base64');
-    const json = JSON.parse(b64decoded);
-    const account_name = json.authenticatedEntity.activeAccount.name;
+    if (!auth_entity) {
+        r.error("account_name: auth_entity variable is missing");
+        return "default";
+    }
+    r.error("account_name: auth_entity = " + auth_entity);
 
-    return account_name;
+    // Attempt to base64-decode it
+    var decoded;
+    try {
+        decoded = Buffer.from(auth_entity, 'base64').toString('utf8');
+        r.error("account_name: decoded auth_entity = " + decoded);
+    } catch (e) {
+        r.error("account_name: error decoding auth_entity: " + e);
+        return "default";
+    }
+
+    // Try to parse the decoded value as JSON
+    var json;
+    try {
+        json = JSON.parse(decoded);
+        r.error("account_name: parsed JSON = " + JSON.stringify(json));
+    } catch (e) {
+        r.error("account_name: JSON parse error: " + e);
+        return "default";
+    }
+
+    // Extract the account name
+    if (json.activeAccount && json.activeAccount.name) {
+        r.error("account_name: extracted account name = " + json.activeAccount.name);
+        return json.activeAccount.name;
+    } else {
+        r.error("account_name: activeAccount.name not found in JSON");
+        return "default";
+    }
+}
+
+function setAuthHeader(r) {
+    let auth = r.headersIn['authorization'];
+    if (auth) {
+        // Look for the pattern: Credential=<value>/...
+        let matches = auth.match(/Credential=([^\/]+)\//);
+        if (matches && matches.length > 1) {
+            return matches[1];
+        }
+    }
+    return "";
 }
 
-export default {account_name};
+export default { account_name, setAuthHeader };