first commit
This commit is contained in:
Zakaria
@@ -0,0 +1,910 @@
|
||||
import {Hono} from 'hono'
|
||||
import type {Context} from 'hono'
|
||||
import type {
|
||||
CloudProvider,
|
||||
CloudServiceType,
|
||||
CreateDatabaseSnapshotInput,
|
||||
KmsEncryptionAlgorithm,
|
||||
SqlConnectionInput,
|
||||
} from '../cloud-spi/types'
|
||||
import {clampLimit, type PageQuery} from '../cloud-spi/childCollections'
|
||||
import {CloudError, toHttpError, ValidationError} from '../cloud-spi/errors'
|
||||
import {isServiceType} from '../cloud-spi/serviceCatalog'
|
||||
import {mapAwsSdkError} from '../adapter-aws/awsErrors'
|
||||
import {serviceForAccount} from '../cloudProxy'
|
||||
import {CloudProxyService} from '../service/CloudProxyService'
|
||||
|
||||
// Header (and query-param fallback for direct links such as object downloads)
|
||||
// used by the frontend to scope every request to an AWS account.
|
||||
export const ACCOUNT_HEADER = 'x-floci-account-id'
|
||||
|
||||
interface KmsEncryptRequest {
|
||||
plaintextBase64?: unknown
|
||||
encryptionAlgorithm?: unknown
|
||||
encryptionContext?: unknown
|
||||
}
|
||||
|
||||
interface KmsDecryptRequest {
|
||||
ciphertextBlobBase64?: unknown
|
||||
encryptionAlgorithm?: unknown
|
||||
encryptionContext?: unknown
|
||||
}
|
||||
|
||||
const KMS_ENCRYPTION_ALGORITHMS = new Set<KmsEncryptionAlgorithm>([
|
||||
'SYMMETRIC_DEFAULT',
|
||||
'RSAES_OAEP_SHA_1',
|
||||
'RSAES_OAEP_SHA_256',
|
||||
])
|
||||
const MAX_PLAINTEXT_BASE64_LENGTH = 5_464
|
||||
const MAX_CIPHERTEXT_BASE64_LENGTH = 8_192
|
||||
|
||||
export function createCloudRoutes(injectedService?: CloudProxyService) {
|
||||
const app = new Hono()
|
||||
|
||||
// Resolve the account-scoped service per request. An explicitly injected
|
||||
// service (used by tests) always wins and ignores the account header.
|
||||
const svc = (c: Context): CloudProxyService =>
|
||||
injectedService ?? serviceForAccount(c.req.header(ACCOUNT_HEADER) ?? c.req.query('account'))
|
||||
|
||||
app.get('/', (c) => c.json(svc(c).clouds()))
|
||||
|
||||
app.get('/:cloud/services', (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
return c.json(svc(c).services(cloud))
|
||||
})
|
||||
|
||||
app.get('/:cloud/status', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
// Per-service detail is opt-in; the connection indicator polls this often.
|
||||
const includeServices = c.req.query('services') === 'all'
|
||||
return c.json(await svc(c).status(cloud, {includeServices}))
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/:service/status', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const serviceType = c.req.param('service') as CloudServiceType
|
||||
if (!isCloudProvider(cloud) || !isServiceType(serviceType)) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
return c.json(await svc(c).serviceStatus(cloud, serviceType))
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/:service/schema', (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const serviceType = c.req.param('service') as CloudServiceType
|
||||
if (!isCloudProvider(cloud) || !isServiceType(serviceType)) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
const schema = svc(c).schema(cloud, serviceType)
|
||||
if (!schema) {
|
||||
return c.json({error: 'Schema not available'}, 404)
|
||||
}
|
||||
|
||||
return c.json(schema)
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/database/snapshots', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const snapshots = await svc(c).listDatabaseSnapshots(cloud, c.req.query('instanceIdentifier'))
|
||||
return c.json(snapshots)
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/database/snapshots', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const input = await c.req.json<CreateDatabaseSnapshotInput>()
|
||||
const snapshot = await svc(c).createDatabaseSnapshot(cloud, input)
|
||||
return c.json(snapshot, 201)
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/database/orderable-classes', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const classes = await svc(c).listDatabaseOrderableInstanceClasses(cloud, c.req.query('engine'))
|
||||
return c.json(classes)
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/:service/resources', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const serviceType = c.req.param('service') as CloudServiceType
|
||||
if (!isCloudProvider(cloud) || !isServiceType(serviceType)) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const resources = await svc(c).listResources(cloud, serviceType, {search: c.req.query('search')})
|
||||
return c.json(resources)
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/nosql/resources/:id/containers', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const containers = await svc(c).listCosmosContainers(cloud, c.req.param('id'))
|
||||
return c.json(containers)
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/nosql/resources/:id/containers', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const values = await c.req.json<Record<string, unknown>>()
|
||||
const container = await svc(c).createCosmosContainer(cloud, c.req.param('id'), {values})
|
||||
return c.json(container, 201)
|
||||
})
|
||||
})
|
||||
|
||||
app.delete('/:cloud/services/nosql/resources/:id/containers/:containerId', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).deleteCosmosContainer(cloud, c.req.param('id'), c.req.param('containerId'))
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/nosql/resources/:id/containers/:containerId/items', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const items = await svc(c).listCosmosItems(cloud, c.req.param('id'), c.req.param('containerId'))
|
||||
return c.json(items)
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/nosql/resources/:id/containers/:containerId/items', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const document = await c.req.json<Record<string, unknown>>()
|
||||
const item = await svc(c).upsertCosmosItem(cloud, c.req.param('id'), c.req.param('containerId'), document)
|
||||
return c.json(item, 201)
|
||||
})
|
||||
})
|
||||
|
||||
app.delete('/:cloud/services/nosql/resources/:id/containers/:containerId/items/:itemId', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).deleteCosmosItem(cloud, c.req.param('id'), c.req.param('containerId'), c.req.param('itemId'), c.req.query('partitionKey') ?? null)
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/nosql/resources/:id/containers/:containerId/query', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const body = await c.req.json<{query?: string}>()
|
||||
const result = await svc(c).queryCosmosItems(cloud, c.req.param('id'), c.req.param('containerId'), body.query ?? '')
|
||||
return c.json(result)
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/database/resources/:id/sql/databases', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const connection = await c.req.json<SqlConnectionInput>()
|
||||
const databases = await svc(c).listSqlDatabases(cloud, c.req.param('id'), connection)
|
||||
return c.json(databases)
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/database/resources/:id/sql/tables', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const connection = await c.req.json<SqlConnectionInput>()
|
||||
const tables = await svc(c).listSqlTables(cloud, c.req.param('id'), connection)
|
||||
return c.json(tables)
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/database/resources/:id/sql/query', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const body = await c.req.json<SqlConnectionInput & {query?: string}>()
|
||||
const {query = '', ...connection} = body
|
||||
const result = await svc(c).querySql(cloud, c.req.param('id'), connection, query)
|
||||
return c.json(result)
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/logs/resources/:id/query', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const body = await c.req.json<{queryString?: unknown; startTime?: unknown; endTime?: unknown; limit?: unknown}>()
|
||||
if (typeof body.queryString !== 'string') throw new ValidationError('queryString must be a string.')
|
||||
if (typeof body.startTime !== 'number') throw new ValidationError('startTime must be a number (epoch seconds).')
|
||||
if (typeof body.endTime !== 'number') throw new ValidationError('endTime must be a number (epoch seconds).')
|
||||
if (body.limit !== undefined && typeof body.limit !== 'number') throw new ValidationError('limit must be a number.')
|
||||
|
||||
const result = await svc(c).queryLogs(cloud, c.req.param('id'), {
|
||||
queryString: body.queryString,
|
||||
startTime: body.startTime,
|
||||
endTime: body.endTime,
|
||||
limit: body.limit,
|
||||
})
|
||||
return c.json(result)
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/nosql/resources/:id/items', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const items = await svc(c).listNoSqlItems(cloud, c.req.param('id'))
|
||||
return c.json(items)
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/nosql/resources/:id/items', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const document = await c.req.json<Record<string, unknown>>()
|
||||
const item = await svc(c).putNoSqlItem(cloud, c.req.param('id'), document)
|
||||
return c.json(item, 201)
|
||||
})
|
||||
})
|
||||
|
||||
app.delete('/:cloud/services/email/inbox', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).clearEmailInbox(cloud)
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/k8s/resources/:id/nodegroups', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const nodegroups = await svc(c).listKubernetesNodegroups(cloud, c.req.param('id'))
|
||||
return c.json(nodegroups)
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/k8s/resources/:id/nodegroups', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const nodegroup = await svc(c).createKubernetesNodegroup(cloud, c.req.param('id'), await c.req.json())
|
||||
return c.json(nodegroup, 201)
|
||||
})
|
||||
})
|
||||
|
||||
app.delete('/:cloud/services/k8s/resources/:id/nodegroups/:nodegroupId', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).deleteKubernetesNodegroup(cloud, c.req.param('id'), c.req.param('nodegroupId'))
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/k8s/resources/:id/fargate-profiles', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const profiles = await svc(c).listKubernetesFargateProfiles(cloud, c.req.param('id'))
|
||||
return c.json(profiles)
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/k8s/resources/:id/fargate-profiles', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const profile = await svc(c).createKubernetesFargateProfile(cloud, c.req.param('id'), await c.req.json())
|
||||
return c.json(profile, 201)
|
||||
})
|
||||
})
|
||||
|
||||
app.delete('/:cloud/services/k8s/resources/:id/fargate-profiles/:profileId', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).deleteKubernetesFargateProfile(cloud, c.req.param('id'), c.req.param('profileId'))
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/configuration/resources/:id/environments', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
return c.json(await svc(c).listAppConfigEnvironments(cloud, c.req.param('id')))
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/configuration/resources/:id/environments', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const values = await c.req.json<Record<string, unknown>>()
|
||||
return c.json(await svc(c).createAppConfigEnvironment(cloud, c.req.param('id'), {values}), 201)
|
||||
})
|
||||
})
|
||||
|
||||
app.delete('/:cloud/services/configuration/resources/:id/environments/:environmentId', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).deleteAppConfigEnvironment(cloud, c.req.param('id'), c.req.param('environmentId'))
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/configuration/resources/:id/configuration-profiles', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
return c.json(await svc(c).listAppConfigConfigurationProfiles(cloud, c.req.param('id')))
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/configuration/resources/:id/configuration-profiles', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const values = await c.req.json<Record<string, unknown>>()
|
||||
return c.json(await svc(c).createAppConfigConfigurationProfile(cloud, c.req.param('id'), {values}), 201)
|
||||
})
|
||||
})
|
||||
|
||||
app.delete('/:cloud/services/configuration/resources/:id/configuration-profiles/:profileId', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).deleteAppConfigConfigurationProfile(cloud, c.req.param('id'), c.req.param('profileId'))
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/configuration/resources/:id/configuration-profiles/:profileId/hosted-configuration-versions', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
return c.json(await svc(c).listAppConfigHostedConfigurationVersions(cloud, c.req.param('id'), c.req.param('profileId')))
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/configuration/resources/:id/configuration-profiles/:profileId/hosted-configuration-versions', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const values = await c.req.json<Record<string, unknown>>()
|
||||
return c.json(await svc(c).createAppConfigHostedConfigurationVersion(cloud, c.req.param('id'), c.req.param('profileId'), {values}), 201)
|
||||
})
|
||||
})
|
||||
|
||||
const hostedVersionNumber = (raw: string): number | null => {
|
||||
const value = Number(raw)
|
||||
return Number.isInteger(value) && value > 0 ? value : null
|
||||
}
|
||||
|
||||
app.get('/:cloud/services/configuration/resources/:id/configuration-profiles/:profileId/hosted-configuration-versions/:versionNumber', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const versionNumber = hostedVersionNumber(c.req.param('versionNumber'))
|
||||
if (!isCloudProvider(cloud) || versionNumber === null) return c.json({error: 'Unknown cloud or version'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const version = await svc(c).getAppConfigHostedConfigurationVersion(cloud, c.req.param('id'), c.req.param('profileId'), versionNumber)
|
||||
if (!version) return c.json({error: 'Hosted configuration version not found'}, 404)
|
||||
return c.json(version)
|
||||
})
|
||||
})
|
||||
|
||||
app.delete('/:cloud/services/configuration/resources/:id/configuration-profiles/:profileId/hosted-configuration-versions/:versionNumber', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const versionNumber = hostedVersionNumber(c.req.param('versionNumber'))
|
||||
if (!isCloudProvider(cloud) || versionNumber === null) return c.json({error: 'Unknown cloud or version'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).deleteAppConfigHostedConfigurationVersion(cloud, c.req.param('id'), c.req.param('profileId'), versionNumber)
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/configuration/deployment-strategies', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
return c.json(await svc(c).listAppConfigDeploymentStrategies(cloud))
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/configuration/deployment-strategies', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const values = await c.req.json<Record<string, unknown>>()
|
||||
return c.json(await svc(c).createAppConfigDeploymentStrategy(cloud, {values}), 201)
|
||||
})
|
||||
})
|
||||
|
||||
app.delete('/:cloud/services/configuration/deployment-strategies/:strategyId', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).deleteAppConfigDeploymentStrategy(cloud, c.req.param('strategyId'))
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/configuration/resources/:id/environments/:environmentId/deployments', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const values = await c.req.json<Record<string, unknown>>()
|
||||
return c.json(await svc(c).startAppConfigDeployment(cloud, c.req.param('id'), c.req.param('environmentId'), {values}), 201)
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/configuration/resources/:id/environments/:environmentId/deployments/:deploymentNumber', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const deploymentNumber = Number(c.req.param('deploymentNumber'))
|
||||
if (!isCloudProvider(cloud) || !Number.isInteger(deploymentNumber) || deploymentNumber <= 0) {
|
||||
return c.json({error: 'Unknown cloud or deployment'}, 404)
|
||||
}
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const deployment = await svc(c).getAppConfigDeployment(cloud, c.req.param('id'), c.req.param('environmentId'), deploymentNumber)
|
||||
if (!deployment) return c.json({error: 'Deployment not found'}, 404)
|
||||
return c.json(deployment)
|
||||
})
|
||||
})
|
||||
|
||||
// Child collections, parameterised by service. All the literal-segment
|
||||
// routes above (Cosmos containers, SQL, NoSQL items, email inbox, k8s
|
||||
// nodegroups/fargate profiles) must stay registered before these, or the
|
||||
// `:service` param below would swallow their requests first.
|
||||
|
||||
app.post('/:cloud/services/apigateway/resources/:id/routes', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (cloud !== 'aws') return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const input = await c.req.json<Record<string, unknown>>()
|
||||
const route = await svc(c).createApiGatewayLambdaRoute(cloud, c.req.param('id'), {
|
||||
path: typeof input.path === 'string' ? input.path : '',
|
||||
method: typeof input.method === 'string' ? input.method : '',
|
||||
stage: typeof input.stage === 'string' ? input.stage : '',
|
||||
functionName: typeof input.functionName === 'string' ? input.functionName : '',
|
||||
})
|
||||
return c.json(route, 201)
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/:service/resources/:id/collections', async (c) => {
|
||||
const target = childTarget(c)
|
||||
if (!target) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const page = await svc(c).listChildCollections(target.cloud, target.service, c.req.param('id'), pageQuery(c))
|
||||
return c.json(page)
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/:service/resources/:id/collections', async (c) => {
|
||||
const target = childTarget(c)
|
||||
if (!target) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const values = await c.req.json<Record<string, unknown>>()
|
||||
const collection = await svc(c).createChildCollection(target.cloud, target.service, c.req.param('id'), {values})
|
||||
return c.json(collection, 201)
|
||||
})
|
||||
})
|
||||
|
||||
app.delete('/:cloud/services/:service/resources/:id/collections/:cid', async (c) => {
|
||||
const target = childTarget(c)
|
||||
if (!target) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).deleteChildCollection(target.cloud, target.service, c.req.param('id'), c.req.param('cid'))
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/:service/resources/:id/collections/:cid/items', async (c) => {
|
||||
const target = childTarget(c)
|
||||
if (!target) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const page = await svc(c).listCollectionItems(target.cloud, target.service, c.req.param('id'), c.req.param('cid'), pageQuery(c))
|
||||
return c.json(page)
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/:service/resources/:id/collections/:cid/items', async (c) => {
|
||||
const target = childTarget(c)
|
||||
if (!target) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const body = await c.req.json<Record<string, unknown>>()
|
||||
const item = await svc(c).putCollectionItem(target.cloud, target.service, c.req.param('id'), c.req.param('cid'), body)
|
||||
return c.json(item, 201)
|
||||
})
|
||||
})
|
||||
|
||||
app.delete('/:cloud/services/:service/resources/:id/collections/:cid/items/:itemId', async (c) => {
|
||||
const target = childTarget(c)
|
||||
if (!target) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).deleteCollectionItem(target.cloud, target.service, c.req.param('id'), c.req.param('cid'), c.req.param('itemId'), c.req.query('partitionKey') ?? null)
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/:service/resources/:id/collections/:cid/query', async (c) => {
|
||||
const target = childTarget(c)
|
||||
if (!target) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const body = await c.req.json<{query?: string}>()
|
||||
const page = await svc(c).queryCollectionItems(target.cloud, target.service, c.req.param('id'), c.req.param('cid'), body.query ?? '')
|
||||
return c.json(page)
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/:service/resources/:id/items', async (c) => {
|
||||
const target = childTarget(c)
|
||||
if (!target) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const page = await svc(c).listFlatItems(target.cloud, target.service, c.req.param('id'), pageQuery(c))
|
||||
return c.json(page)
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/:service/resources/:id/items', async (c) => {
|
||||
const target = childTarget(c)
|
||||
if (!target) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const body = await c.req.json<Record<string, unknown>>()
|
||||
const item = await svc(c).putFlatItem(target.cloud, target.service, c.req.param('id'), body)
|
||||
return c.json(item, 201)
|
||||
})
|
||||
})
|
||||
|
||||
app.delete('/:cloud/services/:service/resources/:id/items/:itemId', async (c) => {
|
||||
const target = childTarget(c)
|
||||
if (!target) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).deleteFlatItem(target.cloud, target.service, c.req.param('id'), c.req.param('itemId'), c.req.query('partitionKey') ?? null)
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/:service/resources/:id/query', async (c) => {
|
||||
const target = childTarget(c)
|
||||
if (!target) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const body = await c.req.json<{query?: string}>()
|
||||
const page = await svc(c).queryFlatItems(target.cloud, target.service, c.req.param('id'), body.query ?? '')
|
||||
return c.json(page)
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/:service/resources/:id', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const serviceType = c.req.param('service') as CloudServiceType
|
||||
if (!isCloudProvider(cloud) || !isServiceType(serviceType)) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const resource = await svc(c).getResource(cloud, serviceType, c.req.param('id'))
|
||||
if (!resource) return c.json({error: 'Resource not found'}, 404)
|
||||
return c.json(resource)
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/:service/resources/:id/objects', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const serviceType = c.req.param('service') as CloudServiceType
|
||||
if (!isCloudProvider(cloud) || !isServiceType(serviceType)) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const objects = await svc(c).listObjects(cloud, serviceType, c.req.param('id'), c.req.query('prefix') ?? '')
|
||||
return c.json(objects)
|
||||
})
|
||||
})
|
||||
|
||||
app.put('/:cloud/services/:service/resources/:id/object', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const serviceType = c.req.param('service') as CloudServiceType
|
||||
if (!isCloudProvider(cloud) || !isServiceType(serviceType)) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
const key = c.req.query('key') ?? ''
|
||||
if (!key) return c.json({error: 'Object key is required'}, 400)
|
||||
const body = new Uint8Array(await c.req.arrayBuffer())
|
||||
const contentType = c.req.header('content-type') ?? 'application/octet-stream'
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).putObject(cloud, serviceType, c.req.param('id'), key, body, contentType)
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
app.get('/:cloud/services/:service/resources/:id/object', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const serviceType = c.req.param('service') as CloudServiceType
|
||||
if (!isCloudProvider(cloud) || !isServiceType(serviceType)) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
const key = c.req.query('key') ?? ''
|
||||
if (!key) return c.json({error: 'Object key is required'}, 400)
|
||||
return withRuntime(c, async () => {
|
||||
const object = await svc(c).getObject(cloud, serviceType, c.req.param('id'), key)
|
||||
return new Response(object.body, {
|
||||
headers: {
|
||||
'content-type': object.contentType,
|
||||
...(object.contentLength === null ? {} : {'content-length': String(object.contentLength)}),
|
||||
'content-disposition': `attachment; filename="${key.split('/').pop() ?? key}"`,
|
||||
},
|
||||
})
|
||||
})
|
||||
})
|
||||
|
||||
app.delete('/:cloud/services/:service/resources/:id/object', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const serviceType = c.req.param('service') as CloudServiceType
|
||||
if (!isCloudProvider(cloud) || !isServiceType(serviceType)) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
const key = c.req.query('key') ?? ''
|
||||
if (!key) return c.json({error: 'Object key is required'}, 400)
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).deleteObject(cloud, serviceType, c.req.param('id'), key)
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/:service/resources/:id/object/copy', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const serviceType = c.req.param('service') as CloudServiceType
|
||||
if (!isCloudProvider(cloud) || !isServiceType(serviceType)) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
const {srcKey, destKey, destResourceId} = await c.req.json<{srcKey: string; destKey: string; destResourceId?: string}>()
|
||||
if (!srcKey || !destKey) return c.json({error: 'srcKey and destKey are required'}, 400)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).copyObject(cloud, serviceType, c.req.param('id'), srcKey, destKey, destResourceId)
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/:service/resources/:id/invoke', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const serviceType = c.req.param('service') as CloudServiceType
|
||||
if (!isCloudProvider(cloud) || !isServiceType(serviceType)) {
|
||||
return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
}
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const body: {payload?: string} = await c.req.json<{payload?: string}>().catch(() => ({}))
|
||||
const result = await svc(c).invokeResource(
|
||||
cloud,
|
||||
serviceType,
|
||||
c.req.param('id'),
|
||||
body.payload ?? '{}',
|
||||
)
|
||||
return c.json(result)
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/kms/resources/:id/encrypt', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withSensitiveRuntime(c, async () => {
|
||||
const body = await jsonBody<KmsEncryptRequest>(c)
|
||||
const result = await svc(c).encryptKms(cloud, c.req.param('id'), {
|
||||
plaintext: decodeBase64(body.plaintextBase64, 'plaintextBase64', MAX_PLAINTEXT_BASE64_LENGTH),
|
||||
encryptionAlgorithm: encryptionAlgorithm(body.encryptionAlgorithm),
|
||||
encryptionContext: encryptionContext(body.encryptionContext),
|
||||
})
|
||||
return c.json({
|
||||
ciphertextBlobBase64: Buffer.from(result.ciphertextBlob).toString('base64'),
|
||||
keyId: result.keyId,
|
||||
encryptionAlgorithm: result.encryptionAlgorithm,
|
||||
})
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/kms/resources/:id/decrypt', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
if (!isCloudProvider(cloud)) return c.json({error: 'Unknown cloud'}, 404)
|
||||
|
||||
return withSensitiveRuntime(c, async () => {
|
||||
const body = await jsonBody<KmsDecryptRequest>(c)
|
||||
const result = await svc(c).decryptKms(cloud, c.req.param('id'), {
|
||||
ciphertextBlob: decodeBase64(
|
||||
body.ciphertextBlobBase64,
|
||||
'ciphertextBlobBase64',
|
||||
MAX_CIPHERTEXT_BASE64_LENGTH,
|
||||
),
|
||||
encryptionAlgorithm: encryptionAlgorithm(body.encryptionAlgorithm),
|
||||
encryptionContext: encryptionContext(body.encryptionContext),
|
||||
})
|
||||
return c.json({
|
||||
plaintextBase64: Buffer.from(result.plaintext).toString('base64'),
|
||||
keyId: result.keyId,
|
||||
encryptionAlgorithm: result.encryptionAlgorithm,
|
||||
})
|
||||
})
|
||||
})
|
||||
|
||||
app.post('/:cloud/services/:service/resources', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const serviceType = c.req.param('service') as CloudServiceType
|
||||
if (!isCloudProvider(cloud) || !isServiceType(serviceType)) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const values = await c.req.json<Record<string, unknown>>()
|
||||
const resource = await svc(c).createResource(cloud, serviceType, {values})
|
||||
return c.json(resource, 201)
|
||||
})
|
||||
})
|
||||
|
||||
app.patch('/:cloud/services/:service/resources/:id', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const serviceType = c.req.param('service') as CloudServiceType
|
||||
if (!isCloudProvider(cloud) || !isServiceType(serviceType)) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
const values = await c.req.json<Record<string, unknown>>()
|
||||
const resource = await svc(c).updateResource(cloud, serviceType, c.req.param('id'), {values})
|
||||
return c.json(resource, 200)
|
||||
})
|
||||
})
|
||||
|
||||
app.delete('/:cloud/services/:service/resources/:id', async (c) => {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const serviceType = c.req.param('service') as CloudServiceType
|
||||
if (!isCloudProvider(cloud) || !isServiceType(serviceType)) return c.json({error: 'Unknown cloud or service'}, 404)
|
||||
|
||||
return withRuntime(c, async () => {
|
||||
await svc(c).deleteResource(cloud, serviceType, c.req.param('id'))
|
||||
return c.json({ok: true})
|
||||
})
|
||||
})
|
||||
|
||||
return app
|
||||
}
|
||||
|
||||
function isCloudProvider(value: string): value is CloudProvider {
|
||||
return value === 'aws' || value === 'azure' || value === 'gcp'
|
||||
}
|
||||
|
||||
async function jsonBody<T>(c: Context): Promise<T> {
|
||||
try {
|
||||
const body = await c.req.json<unknown>()
|
||||
if (!body || typeof body !== 'object' || Array.isArray(body)) {
|
||||
throw new ValidationError('Request body must be a JSON object')
|
||||
}
|
||||
return body as T
|
||||
} catch (error) {
|
||||
if (error instanceof ValidationError) throw error
|
||||
throw new ValidationError('Request body must be valid JSON')
|
||||
}
|
||||
}
|
||||
|
||||
function encryptionAlgorithm(value: unknown): KmsEncryptionAlgorithm {
|
||||
if (typeof value !== 'string' || !KMS_ENCRYPTION_ALGORITHMS.has(value as KmsEncryptionAlgorithm)) {
|
||||
throw new ValidationError('encryptionAlgorithm must be a supported KMS encryption algorithm')
|
||||
}
|
||||
return value as KmsEncryptionAlgorithm
|
||||
}
|
||||
|
||||
function encryptionContext(value: unknown): Record<string, string> | undefined {
|
||||
if (value === undefined) return undefined
|
||||
if (!value || typeof value !== 'object' || Array.isArray(value)) {
|
||||
throw new ValidationError('encryptionContext must be an object of string values')
|
||||
}
|
||||
|
||||
const entries = Object.entries(value)
|
||||
if (entries.some(([, entryValue]) => typeof entryValue !== 'string')) {
|
||||
throw new ValidationError('encryptionContext must be an object of string values')
|
||||
}
|
||||
return entries.length === 0 ? undefined : Object.fromEntries(entries) as Record<string, string>
|
||||
}
|
||||
|
||||
function decodeBase64(value: unknown, field: string, maxLength: number): Uint8Array {
|
||||
if (typeof value !== 'string') throw new ValidationError(`${field} must be a base64 string`)
|
||||
if (value.length > maxLength) throw new ValidationError(`${field} is too large`)
|
||||
if (value.length % 4 !== 0 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value)) {
|
||||
throw new ValidationError(`${field} must be canonical base64`)
|
||||
}
|
||||
|
||||
const decoded = Buffer.from(value, 'base64')
|
||||
if (decoded.toString('base64') !== value) throw new ValidationError(`${field} must be canonical base64`)
|
||||
return decoded
|
||||
}
|
||||
|
||||
/**
|
||||
* Resolve and validate the cloud/service pair for a child-collection route.
|
||||
* Returns null when either is unknown, which the caller turns into a 404.
|
||||
*/
|
||||
function childTarget(c: Context): {cloud: CloudProvider; service: CloudServiceType} | null {
|
||||
const cloud = c.req.param('cloud') as CloudProvider
|
||||
const service = c.req.param('service') as CloudServiceType
|
||||
if (!isCloudProvider(cloud) || !isServiceType(service)) return null
|
||||
return {cloud, service}
|
||||
}
|
||||
|
||||
/** Parse paging params. An out-of-range limit raises and becomes a 400. */
|
||||
function pageQuery(c: Context): PageQuery {
|
||||
return {cursor: c.req.query('cursor'), limit: clampLimit(c.req.query('limit'))}
|
||||
}
|
||||
|
||||
async function withRuntime(c: Context, handler: () => Promise<Response>): Promise<Response> {
|
||||
try {
|
||||
return await handler()
|
||||
} catch (err) {
|
||||
const {status, body} = toHttpError(err, mapAwsSdkError)
|
||||
return c.json(body, status)
|
||||
}
|
||||
}
|
||||
|
||||
async function withSensitiveRuntime(c: Context, handler: () => Promise<Response>): Promise<Response> {
|
||||
c.header('cache-control', 'no-store')
|
||||
try {
|
||||
return await handler()
|
||||
} catch (err) {
|
||||
const {status, body} = toHttpError(err, mapAwsSdkError)
|
||||
if (err instanceof CloudError) return c.json(body, status)
|
||||
|
||||
const message = body.code === 'invalid_request' ? 'KMS rejected the request' : body.error
|
||||
return c.json({error: message, code: body.code, message}, status)
|
||||
}
|
||||
}
|
||||
|
||||
export default createCloudRoutes()
|
||||
Reference in New Issue
Block a user