feat: add packages api (CM-1334) (#4349)

Signed-off-by: Umberto Sgueglia <usgueglia@contractor.linuxfoundation.org>

Author: ulemons

backend/src/api/public/v1/akrites-external/index.ts

@@ -0,0 +1,27 @@
+import { Router } from 'express'
+
+import { createRateLimiter } from '@/api/apiRateLimiter'
+import { requireScopes } from '@/api/public/middlewares/requireScopes'
+import { safeWrap } from '@/middlewares/errorMiddleware'
+import { SCOPES } from '@/security/scopes'
+
+import { getAkritesExternalPackageDetail } from '../packages/getAkritesExternalPackageDetail'
+import { getAkritesExternalPackageDetailBatch } from '../packages/getAkritesExternalPackageDetailBatch'
+
+const rateLimiter = createRateLimiter({ max: 60, windowMs: 60 * 1000 })
+
+export function akritesExternalRouter(): Router {
+  const router = Router()
+
+  // TODO: swap for a dedicated cdp:packages:read scope once Akrites gets its own
+  // Auth0 M2M scopes (per the akrites-external draft contract) — reusing the
+  // internal CDP UI scopes for now since that's what's actually issued today.
+  const packagesSubRouter = Router()
+  packagesSubRouter.use(rateLimiter)
+  packagesSubRouter.use(requireScopes([SCOPES.READ_PACKAGES, SCOPES.READ_STEWARDSHIPS], 'all'))
+  packagesSubRouter.get('/detail', safeWrap(getAkritesExternalPackageDetail))
+  packagesSubRouter.post(/^\/detail:batch\/?$/, safeWrap(getAkritesExternalPackageDetailBatch))
+  router.use('/packages', packagesSubRouter)
+
+  return router
+}