From 57574bafd709c429d930d0c04dfc14569ee231a4 Mon Sep 17 00:00:00 2001
From: root <pudong@gitpod.io>
Date: Wed, 5 Mar 2025 07:58:49 +0000
Subject: [PATCH] [flex-oidc] Simplify ID token retrieval using gitpod CLI

---
 dev/flex-oidc/oidc.js | 53 ++++++-------------------------------------
 1 file changed, 7 insertions(+), 46 deletions(-)

diff --git a/dev/flex-oidc/oidc.js b/dev/flex-oidc/oidc.js
index 6dd77e354e512b..37d591d796d037 100644
--- a/dev/flex-oidc/oidc.js
+++ b/dev/flex-oidc/oidc.js
@@ -1,53 +1,14 @@
-const fs = require("fs");
-const http2 = require("http2");
+const { execSync } = require("child_process");
 
 const getIDToken = async () => {
     return new Promise((resolve, reject) => {
         try {
-            const configPath = "/usr/local/gitpod/config/initial-spec.json";
-            const config = JSON.parse(fs.readFileSync(configPath, "utf8"));
-
-            const controlPlaneApiEndpoint = config.controlPlaneApiEndpoint;
-            const environmentToken = config.environmentToken;
-
-            const url = new URL(controlPlaneApiEndpoint);
-            const client = http2.connect(url.origin);
-
-            const req = client.request({
-                ":method": "POST",
-                "content-type": "application/json",
-                authorization: `Bearer ${environmentToken}`,
-                ":path": `${url.pathname}/gitpod.v1.IdentityService/GetIDToken`,
-            });
-
-            let responseData = "";
-
-            req.on("data", (chunk) => {
-                responseData += chunk;
-            });
-
-            req.on("end", () => {
-                try {
-                    const result = JSON.parse(responseData);
-                    const token = result.token;
-                    resolve(token);
-                } catch (error) {
-                    reject(new Error("Error parsing response: " + error.message));
-                } finally {
-                    client.close();
-                }
-            });
-
-            req.on("error", (error) => {
-                reject(new Error(error.message));
-                client.close();
-            });
-
-            req.end(
-                JSON.stringify({
-                    audience: ["accounts.google.com"],
-                }),
-            );
+            try {
+                const token = execSync("gitpod idp token --audience accounts.google.com", { encoding: "utf8" }).trim();
+                resolve(token);
+            } catch (error) {
+                reject(new Error("Error getting token: " + error.message));
+            }
         } catch (e) {
             reject(new Error(e.message));
         }