[OGUI-1788] Implementation of crucial services used to communicate with Vault REST API

.github/workflows/tokenization.yml

@@ -1,4 +1,5 @@
 name: Tokenization
+
 on:
   pull_request:
     paths:
@@ -19,7 +20,10 @@ jobs:
         uses: actions/setup-node@v6
         with:
           node-version: '22.x'
-      - run: (cd Tokenization/backend/central-system; npm i)
+
+      - name: Install backend dependencies
+        run: (cd Tokenization/backend/central-system; npm i)
+
   lint-check-webapp:
     name: Check eslint rules for webapp on ubuntu-latest
     runs-on: ubuntu-latest
@@ -30,32 +34,65 @@ jobs:
         uses: actions/setup-node@v6
         with:
           node-version: '22.x'
-      - run: (cd Tokenization/webapp; npm i )
-      - run: (cd Tokenization/webapp; npm run typecheck)
-      - run: (cd Tokenization/webapp; npm run lint)
+
+      - name: Install webapp dependencies
+        run: (cd Tokenization/webapp; npm i)
+
+      - name: Typecheck webapp
+        run: (cd Tokenization/webapp; npm run typecheck)
+
+      - name: Lint webapp
+        run: (cd Tokenization/webapp; npm run lint)
 
   ui-test:
-    needs: lint-check-webapp
+    needs:
+      - lint-check-webapp
     name: UI-tests for webapp application
     runs-on: ubuntu-latest
-    timeout-minutes: 6
+    timeout-minutes: 10
     steps:
       - uses: actions/checkout@v6
+
       - name: Setup node
         uses: actions/setup-node@v6
         with:
           node-version: '22.x'
-      - run: (cd Tokenization/webapp; npm run docker:test)
+
+      - name: Generate test Vault certificates for UI docker:test
+        run: |
+          bash Tokenization/scripts/actions-certificates-creation.sh
+
+      - name: Run webapp UI tests (docker)
+        run: (cd Tokenization/webapp; npm run docker:test)
 
   central-system-test:
-    needs: lint-check-backend
+    needs:
+      - lint-check-backend
     name: Central System backend tests
     runs-on: ubuntu-latest
-    timeout-minutes: 6
+    timeout-minutes: 20
     steps:
       - uses: actions/checkout@v6
+
       - name: Setup node
         uses: actions/setup-node@v6
         with:
           node-version: '22.x'
-      - run: (cd Tokenization/backend/central-system; npm i; npm run test)
+
+      - name: Generate test Vault certificates
+        run: |
+          bash Tokenization/scripts/actions-certificates-creation.sh
+
+          echo "VAULT_ADDR=https://vault.local:9300" >> $GITHUB_ENV
+          echo "VAULT_AUTH_METHOD=cert" >> $GITHUB_ENV
+          echo "VAULT_ROLE=central-system" >> $GITHUB_ENV
+
+          echo "VAULT_CACERT_B64=$(base64 -w0 Tokenization/docker/vault/ca.crt)" >> $GITHUB_ENV
+          echo "VAULT_CENTRAL_SYSTEM_CERT_B64=$(base64 -w0 Tokenization/docker/vault/central-system.crt)" >> $GITHUB_ENV
+          echo "VAULT_CENTRAL_SYSTEM_KEY_B64=$(base64 -w0 Tokenization/docker/vault/central-system.key)" >> $GITHUB_ENV
+
+      - name: Install backend dependencies
+        run: (cd Tokenization/backend/central-system; npm i)
+
+      - name: Run all backend tests (unit + Vault integration via docker)
+        run: (cd Tokenization/backend/central-system; npm run test:all)

Tokenization/.gitignore

@@ -6,6 +6,18 @@ backend/wrapper/dist/
 backend/wrapper/node_modules/
 backend/wrapper/src/run_tests/
 backend/node_modules
-backend/certs
 backend/central-system/dist
 backend/central-system/node_modules
+backend/certs
+backend/central-system/ca
+backend/central-system/vault/vault*
+backend/central-system/crt
+backend/central-system/policies
+central-system.hcl
+backend/central-system/.env
+database/*
+banner.js
+.env
+*.crt
+*.key
+*.pem

Tokenization/Dockerfile

@@ -51,3 +51,9 @@ FROM nginx:1.27 AS reverse-proxy
 COPY ./docker/provisioning/nginx/conf.d/default.conf /etc/nginx/conf.d
 EXPOSE 8080
 
+# ---- Vault ----
+FROM hashicorp/vault:1.20
+COPY ./docker/vault/vault.crt ./docker/vault/vault.key ./docker/vault/ca.crt /vault/config/
+COPY ./docker/vault/central-system-client.crt /vault/config/central-system-client.crt
+COPY ./docker/vault/vault-init.sh /usr/local/bin/vault-init.sh
+RUN chmod +x /usr/local/bin/vault-init.sh

Tokenization/backend/central-system/banner.js

@@ -0,0 +1,73 @@
+/**
+ * @license
+ * Copyright 2019-2020 CERN and copyright holders of ALICE O2.
+ * See http://alice-o2.web.cern.ch/copyright for details of the copyright holders.
+ * All rights not expressly granted are reserved.
+ *
+ * This software is distributed under the terms of the GNU General Public
+ * License v3 (GPL Version 3), copied verbatim in the file "COPYING".
+ *
+ * In applying this license CERN does not waive the privileges and immunities
+ * granted to it by virtue of its status as an Intergovernmental Organization
+ * or submit itself to any jurisdiction.
+ */
+
+import fs from "fs";
+import path from "path";
+
+const banner = `/**
+ * @license
+ * Copyright 2019-2020 CERN and copyright holders of ALICE O2.
+ * See http://alice-o2.web.cern.ch/copyright for details of the copyright holders.
+ * All rights not expressly granted are reserved.
+ *
+ * This software is distributed under the terms of the GNU General Public
+ * License v3 (GPL Version 3), copied verbatim in the file "COPYING".
+ *
+ * In applying this license CERN does not waive the privileges and immunities
+ * granted to it by virtue of its status as an Intergovernmental Organization
+ * or submit itself to any jurisdiction.
+ */
+`;
+
+const processFile = (filePath) => {
+  try {
+    const content = fs.readFileSync(filePath, "utf8");
+
+    if (
+      content.includes(`@license`) &&
+      content.includes(
+        `Copyright 2019-2020 CERN and copyright holders of ALICE O2.`
+      )
+    ) {
+      return;
+    }
+
+    const newContent = banner + "\n" + content;
+    fs.writeFileSync(filePath, newContent, "utf8");
+    console.log(`Added banner to: ${filePath}`);
+  } catch (err) {
+    console.error(`Error with file ${filePath}:`, err);
+  }
+};
+
+const excludedDirs = ["node_modules", "dist"];
+const walkDir = (dir) => {
+  const files = fs.readdirSync(dir, { withFileTypes: true });
+
+  for (const file of files) {
+    const fullPath = path.join(dir, file.name);
+
+    if (file.isDirectory() && !excludedDirs.includes(fullPath)) {
+      walkDir(fullPath);
+    } else if (file.isFile()) {
+      if (/\.(js|ts|jsx|tsx|mjs|cjs|proto)$/.test(file.name)) {
+        processFile(fullPath);
+      }
+    }
+  }
+};
+
+const startDir = "./src/";
+walkDir(startDir);
+console.log("Banners processed.");

Tokenization/backend/central-system/index.js

@@ -29,8 +29,8 @@ http.get(
 const centralSystemModel = new CentralSystem(4041);
 http.get(
   '/tokens/get',
-  centralSystemModel.tokenController.getTokensHandler.bind(
-    centralSystemModel.tokenController
+  centralSystemModel.connectionController.getTokensHandler.bind(
+    centralSystemModel.connectionController
   ),
   {
     public: true,
@@ -39,16 +39,16 @@ http.get(
 
 http.post(
   '/tokens/create',
-  centralSystemModel.tokenController.createTokenHandler.bind(
-    centralSystemModel.tokenController
+  centralSystemModel.connectionController.createTokenHandler.bind(
+    centralSystemModel.connectionController
   ),
   { public: true }
 );
 
 http.post(
   '/tokens/revoke',
-  centralSystemModel.tokenController.revokeTokenHandler.bind(
-    centralSystemModel.tokenController
+  centralSystemModel.connectionController.revokeTokenHandler.bind(
+    centralSystemModel.connectionController
   ),
   { public: true }
 );
@@ -156,11 +156,9 @@ http.get(
 
     // Artificially add an error
     if (tokenId === 3) {
-      res
-        .status(500)
-        .json({
-          error: `An error occurred when trying to load logs for token ${tokenId}`,
-        });
+      res.status(500).json({
+        error: `An error occurred when trying to load logs for token ${tokenId}`,
+      });
       return;
     }