Create basic sandbox application (#638)

* Add sandbox application

* Parameterize use of DOJ demo branding, so we can turn it off on the sandbox deployment.

* Update lockfile

Author: danielnaab

apps/sandbox/.gitignore

@@ -0,0 +1,2 @@
+dist/
+*.db

apps/sandbox/CHANGELOG.md

@@ -0,0 +1,48 @@
+# @gsa-tts/forms-server-doj
+
+## 0.1.4
+
+### Patch Changes
+
+- Updated dependencies
+  - @gsa-tts/forms-infra-core@0.1.4
+
+## 0.1.3
+
+### Patch Changes
+
+- Updated dependencies
+  - @gsa-tts/forms-infra-core@0.1.3
+
+## 0.1.2
+
+### Patch Changes
+
+- Initial prerelease
+- Updated dependencies
+  - @gsa-tts/forms-database@0.1.2
+  - @gsa-tts/forms-server@0.1.2
+  - @gsa-tts/forms-infra-core@0.1.2
+
+## 0.1.1
+
+### Patch Changes
+
+- Initial prerelease
+- Updated dependencies
+  - @gsa-tts/forms-database@0.1.1
+  - @gsa-tts/forms-server@0.1.1
+  - @gsa-tts/forms-infra-core@0.1.1
+
+## 0.1.0
+
+### Minor Changes
+
+- Initial prerelease
+
+### Patch Changes
+
+- Updated dependencies
+  - @gsa-tts/forms-database@0.1.0
+  - @gsa-tts/forms-server@0.1.0
+  - @gsa-tts/forms-infra-core@0.1.0

apps/sandbox/README.md

@@ -0,0 +1,3 @@
+# @gsa-tts/forms-sandbox
+
+Sandbox application to evaluate platform functionality.

apps/sandbox/build.js

@@ -0,0 +1,14 @@
+import esbuild from 'esbuild';
+
+esbuild
+  .build({
+    bundle: true,
+    entryPoints: ['./src/index.ts'],
+    format: 'esm',
+    minify: true,
+    outdir: './dist',
+    platform: 'node',
+    sourcemap: true,
+    target: 'esnext',
+  })
+  .catch(() => process.exit(1));

apps/sandbox/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "@gsa-tts/forms-sandbox",
+  "version": "0.1.4",
+  "description": "Form server sandbox for evaluating functionality.",
+  "type": "module",
+  "license": "CC0",
+  "main": "src/index.ts",
+  "private": true,
+  "scripts": {
+    "build": "tsup src/* --format esm",
+    "clean": "rimraf dist tsconfig.tsbuildinfo coverage",
+    "dev": "tsup src/* --watch  --format esm",
+    "start": "VCAP_SERVICES='{\"aws-rds\": [{ \"credentials\": { \"uri\": \"\" }}]}' node dist/index.js",
+    "test": "vitest run --coverage"
+  },
+  "dependencies": {
+    "@gsa-tts/forms-database": "workspace:*",
+    "@gsa-tts/forms-infra-core": "workspace:*",
+    "@gsa-tts/forms-server": "workspace:*"
+  },
+  "devDependencies": {
+    "@types/supertest": "^6.0.2",
+    "supertest": "^7.0.0"
+  }
+}

apps/sandbox/src/index.ts

@@ -0,0 +1,52 @@
+import { createPostgresDatabaseContext } from '@gsa-tts/forms-database/context';
+import { getAWSSecretsManagerVault } from '@gsa-tts/forms-infra-core';
+
+import { createCustomServer } from './server.js';
+
+const port = process.env.PORT || 4321;
+
+const getCloudGovServerSecrets = () => {
+  if (process.env.VCAP_SERVICES === undefined) {
+    return;
+  }
+  const services = JSON.parse(process.env.VCAP_SERVICES || '{}');
+  return {
+    //loginGovClientSecret: services['user-provided']?.credentials?.SECRET_LOGIN_GOV_PRIVATE_KEY,
+    dbUri: services['aws-rds'][0].credentials.uri as string,
+  };
+};
+
+const getAppRunnerSecrets = async () => {
+  const secrets = {
+    dbHost: process.env.DB_HOST,
+    dbPort: process.env.DB_PORT,
+    dbName: process.env.DB_NAME,
+    dbSecretArn: process.env.DB_SECRET_ARN,
+  }
+  if (secrets.dbHost === undefined || secrets.dbPort === undefined || secrets.dbName === undefined || secrets.dbSecretArn === undefined) {
+    return;
+  }
+
+  const vault = getAWSSecretsManagerVault();
+  const dbSecret = await vault.getSecret(secrets.dbSecretArn);
+  if (dbSecret === undefined) {
+    console.error('Error getting secret:', secrets.dbSecretArn);
+    return;
+  }
+  const secret = JSON.parse(dbSecret);
+  return {
+    dbUri: `postgresql://${secret.username}:${secret.password}@${secret.dbHost}:${secret.dbPort}/${secret.dbName}`
+  };
+};
+
+const secrets = getCloudGovServerSecrets() || (await getAppRunnerSecrets());
+if (secrets === undefined) {
+  console.error('Error getting secrets');
+  process.exit(1);
+}
+
+const db = await createPostgresDatabaseContext(secrets.dbUri, true);
+const server = await createCustomServer(db);
+server.listen(port, () => {
+  console.log(`Server running on http://localhost:${port}`);
+});

apps/sandbox/src/server.ts

@@ -0,0 +1,19 @@
+import { type DatabaseContext } from '@gsa-tts/forms-database';
+import { createServer } from '@gsa-tts/forms-server';
+
+export const createCustomServer = async (db: DatabaseContext): Promise<any> => {
+  return createServer({
+    agencyBranding: false,
+    title: 'Form Service Sandbox',
+    db,
+    loginGovOptions: {
+      loginGovUrl: 'https://idp.int.identitysandbox.gov',
+      clientId:
+        'urn:gov:gsa:openidconnect.profiles:sp:sso:gsa:tts-10x-atj-dev-server-doj',
+      //clientSecret: '', // secrets.loginGovClientSecret,
+    },
+    isUserAuthorized: async (email: string) => {
+      return email.endsWith('.gov');
+    },
+  });
+};

apps/sandbox/tests/integration.test.ts

@@ -0,0 +1,16 @@
+import request from 'supertest';
+import { describe, expect, test } from 'vitest';
+
+import { createInMemoryDatabaseContext } from '@gsa-tts/forms-database/context';
+
+import { createCustomServer } from '../src/server';
+
+describe('Form Service Sandbox', () => {
+  test('renders the home page', async () => {
+    const db = await createInMemoryDatabaseContext();
+    const app = await createCustomServer(db);
+    const response = await request(app).get('/');
+    expect(response.ok).toBe(true);
+    expect(response.text).toMatch(/Form Service Sandbox/);
+  });
+});

apps/sandbox/tsconfig.json

@@ -0,0 +1,11 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "outDir": "./dist",
+    "emitDeclarationOnly": true
+  },
+  "include": ["./src"],
+  "references": []
+}

apps/sandbox/vitest.config.ts

@@ -0,0 +1,10 @@
+import { defineConfig } from 'vitest/config';
+
+import sharedTestConfig from '../../vitest.shared';
+
+export default defineConfig({
+  ...sharedTestConfig,
+  test: {
+    ...sharedTestConfig.test,
+  },
+});