Ci secrets security fix

.github/workflows/ci.yml

@@ -49,6 +49,7 @@ jobs:
           node-version: 16
           architecture: ${{ matrix.arch }}
           cache: 'npm'
+      - run: echo '${{ secrets.CONFIG_JSON }}' > ${{ github.workspace }}/src/config.json
       - uses: ilammy/setup-nasm@v1
       - name: windows-specific
         shell: pwsh

.gitignore

@@ -23,3 +23,4 @@ dist
 node_modules
 *.vsix
 build/
+src/config.json

package.json

@@ -2,7 +2,7 @@
   "name": "vscode-couchbase",
   "displayName": "Couchbase",
   "description": "",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "engines": {
     "vscode": "^1.63.1"
   },
@@ -30,8 +30,8 @@
     "build:v3": "cd ../couchbase-cloud/cmd/cp-ui-v3; npm run build",
     "postbuild:v3": "cp -r ../couchbase-cloud/cmd/cp-ui-v3/dist/styles.css ./src/reactViews/app/styles.css && cp -r ../couchbase-cloud/cmd/cp-ui-v3/dist/types ./src/reactViews/app/",
     "compile-capella-v3": "npm run build:v3 && npm run postbuild:v3 && node scripts/fix_sharedComponent.js && npm-run-all compile:*",
-    "compile": "npm-run-all compile:*",
-    "watch": "npm-run-all -p watch:*",
+    "compile": "node scripts/copy_secrets.js && npm-run-all compile:*",
+    "watch": "node scripts/copy_secrets.js && npm-run-all -p watch:*",
     "compile:extension": "tsc -p ./",
     "compile:views": "webpack --mode development",
     "watch:extension": "tsc -watch -p ./",

scripts/copy_secrets.js

@@ -0,0 +1,14 @@
+const fsp = require('fs').promises;
+
+async function main() {
+    try {
+      // Copy binding file to local directory so it's included in VSCE package
+      console.log('Copying secrets to dist');
+      await fsp.copyFile('./src/config.json', './dist/config.json');
+    } catch (err) {
+      console.log(err);
+    }
+  }
+
+  main();
+

src/commands/iq/iqRestApiService.ts

@@ -5,7 +5,8 @@ import { feedbackLambdaMessageType, iqChatResult } from "./chat/types";
 
 
 export class iqRestApiService {
-    private static readonly CAPELLA_URL_DOMAIN = "https://api.dev.nonprod-project-avengers.com"; // TODO: change here before prod release
+    // Capella Prod domain
+    private static readonly CAPELLA_URL_DOMAIN = "https://api.cloud.couchbase.com";
     private static readonly SESSIONS_API_URL = `${this.CAPELLA_URL_DOMAIN}/sessions`;
     private static readonly FETCH_ORGANIZATIONS_URL = `${this.CAPELLA_URL_DOMAIN}/v2/organizations`;
 

src/config.json

@@ -0,0 +1 @@
+{}

src/reactViews/iq/pages/chatscreen/IqChat.tsx

@@ -255,20 +255,22 @@ const IqChat = ({ org, setIsLoading }) => {
     );
   };
 
-  const handlePaste = (event) => {
-    // Prevent the original paste action
-    event.preventDefault();
-    const text = event.clipboardData.getData("text/plain");
-    const selection = window.getSelection();
-
-    if (selection.rangeCount) {
-      selection.deleteFromDocument();
-      selection.getRangeAt(0).insertNode(document.createTextNode(text));
-    }
 
-    const inputEvent = new Event("input", { bubbles: true });
-    event.target.dispatchEvent(inputEvent);
-  };
+  // Keeping the handle paste function here if some paste issue arises later
+  // const handlePaste = (event) => {
+  //   // Prevent the original paste action
+  //   event.preventDefault();
+  //   const text = event.clipboardData.getData("text/plain");
+  //   const selection = window.getSelection();
+
+  //   if (selection.rangeCount) {
+  //     selection.deleteFromDocument();
+  //     selection.getRangeAt(0).insertNode(document.createTextNode(text));
+  //   }
+
+  //   const inputEvent = new Event("input", { bubbles: true });
+  //   event.target.dispatchEvent(inputEvent);
+  // };
 
   const openNewChat = () => {
     setMessages({

src/util/secretUpdater.ts

@@ -1,7 +1,10 @@
 import { ExtensionContext } from "vscode";
 
-// Before Building, Please update secrets else IQ Feedback service will not work
+import * as fs from 'fs';
+import * as path from 'path';
+
 export const secretUpdater = (context: ExtensionContext) => {
-    context.globalState.update("feedbackLambdaSecret", "c0uchbase_is_aw3some");
-    context.globalState.update("feedbackLambdaUrl", "https://nms548yy5b.execute-api.us-west-1.amazonaws.com/Prod/");
+    const config = JSON.parse(fs.readFileSync(path.join(__filename,"..", "config.json")).toString());
+    context.globalState.update("feedbackLambdaSecret", config.FEEDBACK_LAMBDA_SECRET);
+    context.globalState.update("feedbackLambdaUrl", config.FEEDBACK_LAMBDA_URL);
 };