Hmi 1042 feature (#561)

* HMIS-1042: Adding logic to fetch OAuth credentials from KeyVault * HMIS-1042: Adding logic to fetch OAuth credentials from KeyVault for various clients. * HMIS-1042: Adding logic to fetch OAuth credentials from KeyVault for various clients. * HMIS-1042: Adding logic to fetch OAuth credentials from KeyVault for various clients. * HMIS-1042: Adding logic to fetch OAuth credentials from KeyVault for various clients. * HMIS-1042: Adding logic to fetch OAuth credentials from KeyVault for various clients. * HMIS-1042: Adding logic to fetch OAuth credentials from KeyVault for various clients. * Add Access for Logic Apps * Add Access for Logic Apps * correct connections tagging * correct connections tagging * install required extension * correct permissions * Add renovate.json * Hmi cpp data exp (#539) * Hmis 1032 dev (#525) * added cft auth * using quotes for cft var * moved cache update * HMI payload updated * req body to 500 and headers * updated payload * HMIS-1017 Added acceptance tests to test URL parameters for the new API endpoint GET Reservation which is added in McGirr API spec v1.11.8 and implemented in v1.11.8 release. * initial version * added cpp la deployment * added tags * updated tag name for businessArea * removed unused vars * updated dependsOn * updated tags * tags * removed loging of tags * updated LA app name * updated LA core name * fixed name * added hearing check * sacred deployment * fixed workflow name * added eventGrid * added nkeyvault connection * added missing env * HMIS-1039: Adding logic to create connectivity with CFT * removed sacred LA * updated Snow and HMI calls * introduced params * added keyvault connector * added KV connection * updated params * added delete csv Co-authored-by: Milan Jotic <[email protected]> Co-authored-by: ShufenZ <[email protected]> Co-authored-by: Shufen Zhang <[email protected]> Co-authored-by: 463952 <[email protected]> Co-authored-by: Subroto Mukherjee <[email protected]> * Hmis 1032 dev (#529) * added cft auth * using quotes for cft var * moved cache update * HMI payload updated * req body to 500 and headers * updated payload * HMIS-1017 Added acceptance tests to test URL parameters for the new API endpoint GET Reservation which is added in McGirr API spec v1.11.8 and implemented in v1.11.8 release. * initial version * added cpp la deployment * added tags * updated tag name for businessArea * removed unused vars * updated dependsOn * updated tags * tags * removed loging of tags * updated LA app name * updated LA core name * fixed name * added hearing check * sacred deployment * fixed workflow name * added eventGrid * added nkeyvault connection * added missing env * HMIS-1039: Adding logic to create connectivity with CFT * removed sacred LA * updated Snow and HMI calls * introduced params * added keyvault connector * added KV connection * updated params * added delete csv * removed unused params Co-authored-by: Milan Jotic <[email protected]> Co-authored-by: ShufenZ <[email protected]> Co-authored-by: Shufen Zhang <[email protected]> Co-authored-by: 463952 <[email protected]> Co-authored-by: Subroto Mukherjee <[email protected]> * Hmis 1032 dev (#533) * added cft auth * using quotes for cft var * moved cache update * HMI payload updated * req body to 500 and headers * HMIS-1022 Added acceptance and functional tests to McGirr API spec v1.11.8 for those new URL parameters which can be allocated with valid values. * updated payload * HMIS-1017 Added acceptance tests to test URL parameters for the new API endpoint GET Reservation which is added in McGirr API spec v1.11.8 and implemented in v1.11.8 release. * initial version * added cpp la deployment * added tags * updated tag name for businessArea * removed unused vars * updated dependsOn * updated tags * tags * removed loging of tags * updated LA app name * updated LA core name * fixed name * added hearing check * sacred deployment * fixed workflow name * added eventGrid * added nkeyvault connection * added missing env * HMIS-1039: Adding logic to create connectivity with CFT * HMIS-1022 Added functional tests for URL params for GET Sessions and enabled disabled test on receipt of information from McGirr. Added overload method in SessionsLookUpSteps for testing speficied Status codes in addition to 200. * HMIS-1039: Adding logic to create connectivity with CFT * removed sacred LA * updated Snow and HMI calls * introduced params * added keyvault connector * added KV connection * updated params * added delete csv * HMIS-1001: Adding logic to create connectivity with CFT * HMIS-1031: Adding logic to create connectivity with CFT * HMIS-1022 Added functional tests for more URL params for GET Sessions with one test disabled due to bug and needs enabled when it is fixed by McGirr. * HMIS-1022 Added acceptance tests for more URL params for GET Sessions * removed unused params * Update resource tags * add built from tags Co-authored-by: Milan Jotic <[email protected]> Co-authored-by: ShufenZ <[email protected]> Co-authored-by: Shufen Zhang <[email protected]> Co-authored-by: 463952 <[email protected]> Co-authored-by: Subroto Mukherjee <[email protected]> Co-authored-by: Adam Todd <[email protected]> Co-authored-by: adamtodd0 <[email protected]> * master meerge * Hmis 1032 dev (#534) * added cft auth * using quotes for cft var * moved cache update * HMI payload updated * req body to 500 and headers * updated payload * initial version * added cpp la deployment * added tags * updated tag name for businessArea * removed unused vars * updated dependsOn * updated tags * tags * removed loging of tags * updated LA app name * updated LA core name * fixed name * added hearing check * sacred deployment * fixed workflow name * added eventGrid * added nkeyvault connection * added missing env * removed sacred LA * updated Snow and HMI calls * introduced params * added keyvault connector * added KV connection * updated params * added delete csv * removed unused params * updated hmi url param Co-authored-by: Milan Jotic <[email protected]> * removed unused params * removed unused params * removed param hmiScopeUrl Co-authored-by: mjotichmcts <[email protected]> Co-authored-by: Milan Jotic <[email protected]> Co-authored-by: 463952 <[email protected]> Co-authored-by: Subroto Mukherjee <[email protected]> Co-authored-by: Adam Todd <[email protected]> Co-authored-by: adamtodd0 <[email protected]> * skip P&I tests (#552) Co-authored-by: Milan Jotic <[email protected]> * HMIS-1017: Adding new end point for reservations (#554) Co-authored-by: 463952 <[email protected]> * Hmis 1052 feature (#555) * Update E-HR API end point * api end point added Co-authored-by: mjotichmcts <[email protected]> * Publication health check policy added * Publication policy added * format script * updated secret values * SNL uses idToken * removed first cache lookup * fixed test * added resource * removed extra '&' * no cache * no cache * cache with default * removed first cache lookup * cache added * added key vault retrival * removed service url * removed service_url * added service url * formatted * added service-url * auth header set * added KV retrival * updated reservations * fixed rewrite-url Co-authored-by: 463952 <[email protected]> Co-authored-by: Christopher Pateman <[email protected]> Co-authored-by: Renovate Bot <[email protected]> Co-authored-by: Shufen Zhang <[email protected]> Co-authored-by: Milan Jotic <[email protected]> Co-authored-by: Subroto Mukherjee <[email protected]> Co-authored-by: Adam Todd <[email protected]> Co-authored-by: adamtodd0 <[email protected]> Co-authored-by: Ravipati89 <[email protected]> Co-authored-by: Manoj Ravipati <[email protected]>
hmcts · Jun 1, 2022 · 913e201 · 913e201
1 parent 3b14750
commit 913e201
Show file tree

Hide file tree

Showing 33 changed files with 814 additions and 283 deletions.
diff --git a/infrastructure/template/api-op-add-participant-policy.xml b/infrastructure/template/api-op-add-participant-policy.xml
@@ -3,20 +3,37 @@
         <base />
         <choose>
             <when condition="@(context.Request.Headers.GetValueOrDefault("Destination-System","") == "VH")">
-            <cache-lookup-value key="vhAuth" variable-name="vhAuthToken" />
             <choose>
                 <when condition="@(context.Variables.GetValueOrDefault("vhAuthToken","") == "")">
-                    <send-request ignore-error="true" timeout="20" response-variable-name="bearerToken" mode="new">
+                    <send-request ignore-error="false" timeout="20" response-variable-name="vhClientResponse" mode="new">
+                        <set-url>https://#{keyVaultHost}#/secrets/vh-client-app-client/?api-version=7.0</set-url>
+                        <set-method>GET</set-method>
+                        <authentication-managed-identity resource="https://vault.azure.net" />
+                    </send-request>
+                    <set-variable name="vhClient" value="@{
+                        var secret = ((IResponse)context.Variables["vhClientResponse"]).Body.As<JObject>();
+                        return secret["value"].ToString();
+                    }" />
+                    <send-request ignore-error="false" timeout="20" response-variable-name="vhSecretResponse" mode="new">
+                        <set-url>https://#{keyVaultHost}#/secrets/vh-client-app-secret/?api-version=7.0</set-url>
+                        <set-method>GET</set-method>
+                        <authentication-managed-identity resource="https://vault.azure.net" />
+                    </send-request>
+                    <set-variable name="vhSecret" value="@{
+                        var secret = ((IResponse)context.Variables["vhSecretResponse"]).Body.As<JObject>();
+                        return secret["value"].ToString();
+                    }" />
+                    <send-request ignore-error="true" timeout="20" response-variable-name="vhBearerToken" mode="new">
                         <set-url>https://login.microsoftonline.com/fb6e0e22-0da3-4c35-972a-9d61eb256508/oauth2/token</set-url>
                         <set-method>POST</set-method>
                         <set-header name="Content-Type" exists-action="override">
                             <value>application/x-www-form-urlencoded</value>
                         </set-header>
                         <set-body>@{
-                            return "client_id=#{vhAuthClient}#&resource=#{vhAuthResource}#&client_secret=#{vhAuthSecret}#&grant_type=client_credentials";
-                        }</set-body>
+                            return "client_id=" + (string)context.Variables["vhClient"] + "&client_secret=" + (string)context.Variables["vhSecret"] + "&grant_type=client_credentials&resource=https://vh-bookings-api-test1.azurewebsites.net";}</set-body>
                     </send-request>
-                    <cache-store-value key="vhAuth" value="@("Bearer " + (String)((IResponse)context.Variables["bearerToken"]).Body.As<JObject>()["access_token"])" duration="2700" />
+                    <cache-store-value key="vhAuth" value="@("Bearer " + (String)((IResponse)context.Variables["vhBearerToken"]).Body.As<JObject>()["access_token"])" duration="2700" />
+                    <cache-lookup-value key="vhAuth" variable-name="vhAuthToken" default-value=""/>
                 </when>
             </choose>
             <set-header name="Authorization" exists-action="override">

diff --git a/infrastructure/template/api-op-create-hearing-sched-policy.xml b/infrastructure/template/api-op-create-hearing-sched-policy.xml
@@ -7,19 +7,37 @@
 				<set-backend-service base-url="http://#{emulatorHost}#/schedules/" />
 			</when>
 			<when condition="@(context.Request.Headers.GetValueOrDefault("Destination-System","") == "SNL")">
-				<cache-lookup-value key="snlAuth" variable-name="snlAuthToken" />
                 <choose>
                     <when condition="@(context.Variables.GetValueOrDefault("snlAuthToken","") == "")">
-                        <send-request ignore-error="true" timeout="20" response-variable-name="bearerToken" mode="new">
+                        <send-request ignore-error="false" timeout="20" response-variable-name="snlClientResponse" mode="new">
+                            <set-url>https://#{keyVaultHost}#/secrets/snl-user-id/?api-version=7.0</set-url>
+                            <set-method>GET</set-method>
+                            <authentication-managed-identity resource="https://vault.azure.net" />
+                        </send-request>
+                        <set-variable name="snlClient" value="@{
+                            var secret = ((IResponse)context.Variables["snlClientResponse"]).Body.As<JObject>();
+                            return secret["value"].ToString();
+                        }" />
+                        <send-request ignore-error="false" timeout="20" response-variable-name="snlSecretResponse" mode="new">
+                            <set-url>https://#{keyVaultHost}#/secrets/snl-user-pwd/?api-version=7.0</set-url>
+                            <set-method>GET</set-method>
+                            <authentication-managed-identity resource="https://vault.azure.net" />
+                        </send-request>
+                        <set-variable name="snlSecret" value="@{
+                            var secret = ((IResponse)context.Variables["snlSecretResponse"]).Body.As<JObject>();
+                            return secret["value"].ToString();
+                        }" />
+                        <send-request ignore-error="true" timeout="20" response-variable-name="snlBearerToken" mode="new">
                             <set-url>#{sAndLOauthUrl}#</set-url>
                             <set-method>POST</set-method>
                             <set-header name="Content-Type" exists-action="override">
                                 <value>application/x-www-form-urlencoded</value>
                             </set-header>
                             <set-body>@{
-                                return "username=#{sAndLAuthClient}#&password=#{sAndLAuthSecret}#&grant_type=password_credentials";}</set-body>
+                                return "username=" + (string)context.Variables["snlClient"] + "&password=" + (string)context.Variables["snlSecret"] + "&grant_type=password_credentials";}</set-body>
                         </send-request>
-                        <cache-store-value key="snlAuth" value="@("Bearer " + (String)((IResponse)context.Variables["bearerToken"]).Body.As<JObject>()["idToken"])" duration="2700" />
+                        <cache-store-value key="snlAuth" value="@("Bearer " + (String)((IResponse)context.Variables["snlBearerToken"]).Body.As<JObject>()["idToken"])" duration="2700" />
+                        <cache-lookup-value key="snlAuth" variable-name="snlAuthToken" />
                     </when>
                 </choose>
                 <set-header name="Authorization" exists-action="override">

diff --git a/infrastructure/template/api-op-create-linked-hearing-group-policy.xml b/infrastructure/template/api-op-create-linked-hearing-group-policy.xml
@@ -7,19 +7,37 @@
                 <set-backend-service base-url="http://#{emulatorHost}#/resources/" />
             </when>
             <when condition="@(context.Request.Headers.GetValueOrDefault("Destination-System","") == "SNL")">
-                <cache-lookup-value key="snlAuth" variable-name="snlAuthToken" />
                     <choose>
                         <when condition="@(context.Variables.GetValueOrDefault("snlAuthToken","") == "")">
-                            <send-request ignore-error="true" timeout="20" response-variable-name="bearerToken" mode="new">
+                            <send-request ignore-error="false" timeout="20" response-variable-name="snlClientResponse" mode="new">
+                                <set-url>https://#{keyVaultHost}#/secrets/snl-user-id/?api-version=7.0</set-url>
+                                <set-method>GET</set-method>
+                                <authentication-managed-identity resource="https://vault.azure.net" />
+                            </send-request>
+                            <set-variable name="snlClient" value="@{
+                                var secret = ((IResponse)context.Variables["snlClientResponse"]).Body.As<JObject>();
+                                return secret["value"].ToString();
+                            }" />
+                            <send-request ignore-error="false" timeout="20" response-variable-name="snlSecretResponse" mode="new">
+                                <set-url>https://#{keyVaultHost}#/secrets/snl-user-pwd/?api-version=7.0</set-url>
+                                <set-method>GET</set-method>
+                                <authentication-managed-identity resource="https://vault.azure.net" />
+                            </send-request>
+                            <set-variable name="snlSecret" value="@{
+                                var secret = ((IResponse)context.Variables["snlSecretResponse"]).Body.As<JObject>();
+                                return secret["value"].ToString();
+                            }" />
+                            <send-request ignore-error="true" timeout="20" response-variable-name="snlBearerToken" mode="new">
                                 <set-url>#{sAndLOauthUrl}#</set-url>
                                 <set-method>POST</set-method>
                                 <set-header name="Content-Type" exists-action="override">
                                     <value>application/x-www-form-urlencoded</value>
                                 </set-header>
                                 <set-body>@{
-                                    return "username=#{sAndLAuthClient}#&password=#{sAndLAuthSecret}#&grant_type=password_credentials";}</set-body>
+                                    return "username=" + (string)context.Variables["snlClient"] + "&password=" + (string)context.Variables["snlSecret"] + "&grant_type=password_credentials";}</set-body>
                             </send-request>
-                            <cache-store-value key="snlAuth" value="@("Bearer " + (String)((IResponse)context.Variables["bearerToken"]).Body.As<JObject>()["idToken"])" duration="2700" />
+                            <cache-store-value key="snlAuth" value="@("Bearer " + (String)((IResponse)context.Variables["snlBearerToken"]).Body.As<JObject>()["idToken"])" duration="2700" />
+                            <cache-lookup-value key="snlAuth" variable-name="snlAuthToken" />
                         </when>
                     </choose>
                     <set-header name="Authorization" exists-action="override">

diff --git a/infrastructure/template/api-op-create-resource-location-policy.xml b/infrastructure/template/api-op-create-resource-location-policy.xml
@@ -11,19 +11,37 @@
                 <set-backend-service base-url="http://#{emulatorHost}#/resources/" />
             </when>
             <when condition="@(context.Request.Headers.GetValueOrDefault("Destination-System","") == "SNL")">
-                <cache-lookup-value key="snlAuth" variable-name="snlAuthToken" />
                 <choose>
                     <when condition="@(context.Variables.GetValueOrDefault("snlAuthToken","") == "")">
-                        <send-request ignore-error="true" timeout="20" response-variable-name="bearerToken" mode="new">
+                        <send-request ignore-error="false" timeout="20" response-variable-name="snlClientResponse" mode="new">
+                            <set-url>https://#{keyVaultHost}#/secrets/snl-user-id/?api-version=7.0</set-url>
+                            <set-method>GET</set-method>
+                            <authentication-managed-identity resource="https://vault.azure.net" />
+                        </send-request>
+                        <set-variable name="snlClient" value="@{
+                            var secret = ((IResponse)context.Variables["snlClientResponse"]).Body.As<JObject>();
+                            return secret["value"].ToString();
+                        }" />
+                        <send-request ignore-error="false" timeout="20" response-variable-name="snlSecretResponse" mode="new">
+                            <set-url>https://#{keyVaultHost}#/secrets/snl-user-pwd/?api-version=7.0</set-url>
+                            <set-method>GET</set-method>
+                            <authentication-managed-identity resource="https://vault.azure.net" />
+                        </send-request>
+                        <set-variable name="snlSecret" value="@{
+                            var secret = ((IResponse)context.Variables["snlSecretResponse"]).Body.As<JObject>();
+                            return secret["value"].ToString();
+                        }" />
+                        <send-request ignore-error="true" timeout="20" response-variable-name="snlBearerToken" mode="new">
                             <set-url>#{sAndLOauthUrl}#</set-url>
                             <set-method>POST</set-method>
                             <set-header name="Content-Type" exists-action="override">
                                 <value>application/x-www-form-urlencoded</value>
                             </set-header>
                             <set-body>@{
-                                return "username=#{sAndLAuthClient}#&password=#{sAndLAuthSecret}#&grant_type=password_credentials";}</set-body>
+                                return "username=" + (string)context.Variables["snlClient"] + "&password=" + (string)context.Variables["snlSecret"] + "&grant_type=password_credentials";}</set-body>
                         </send-request>
-                        <cache-store-value key="snlAuth" value="@("Bearer " + (String)((IResponse)context.Variables["bearerToken"]).Body.As<JObject>()["idToken"])" duration="2700" />
+                        <cache-store-value key="snlAuth" value="@("Bearer " + (String)((IResponse)context.Variables["snlBearerToken"]).Body.As<JObject>()["idToken"])" duration="2700" />
+                        <cache-lookup-value key="snlAuth" variable-name="snlAuthToken" />
                     </when>
                 </choose>
                 <set-header name="Authorization" exists-action="override">

diff --git a/infrastructure/template/api-op-create-resource-user-policy.xml b/infrastructure/template/api-op-create-resource-user-policy.xml
@@ -11,19 +11,37 @@
                 <set-backend-service base-url="http://#{emulatorHost}#/resources/" />
             </when>
             <when condition="@(context.Request.Headers.GetValueOrDefault("Destination-System","") == "SNL")">
-                <cache-lookup-value key="snlAuth" variable-name="snlAuthToken" />
                 <choose>
                     <when condition="@(context.Variables.GetValueOrDefault("snlAuthToken","") == "")">
-                        <send-request ignore-error="true" timeout="20" response-variable-name="bearerToken" mode="new">
+                        <send-request ignore-error="false" timeout="20" response-variable-name="snlClientResponse" mode="new">
+                            <set-url>https://#{keyVaultHost}#/secrets/snl-user-id/?api-version=7.0</set-url>
+                            <set-method>GET</set-method>
+                            <authentication-managed-identity resource="https://vault.azure.net" />
+                        </send-request>
+                        <set-variable name="snlClient" value="@{
+                            var secret = ((IResponse)context.Variables["snlClientResponse"]).Body.As<JObject>();
+                            return secret["value"].ToString();
+                        }" />
+                        <send-request ignore-error="false" timeout="20" response-variable-name="snlSecretResponse" mode="new">
+                            <set-url>https://#{keyVaultHost}#/secrets/snl-user-pwd/?api-version=7.0</set-url>
+                            <set-method>GET</set-method>
+                            <authentication-managed-identity resource="https://vault.azure.net" />
+                        </send-request>
+                        <set-variable name="snlSecret" value="@{
+                            var secret = ((IResponse)context.Variables["snlSecretResponse"]).Body.As<JObject>();
+                            return secret["value"].ToString();
+                        }" />
+                        <send-request ignore-error="true" timeout="20" response-variable-name="snlBearerToken" mode="new">
                             <set-url>#{sAndLOauthUrl}#</set-url>
                             <set-method>POST</set-method>
                             <set-header name="Content-Type" exists-action="override">
                                 <value>application/x-www-form-urlencoded</value>
                             </set-header>
                             <set-body>@{
-                                return "username=#{sAndLAuthClient}#&password=#{sAndLAuthSecret}#&grant_type=password_credentials";}</set-body>
+                                return "username=" + (string)context.Variables["snlClient"] + "&password=" + (string)context.Variables["snlSecret"] + "&grant_type=password_credentials";}</set-body>
                         </send-request>
-                        <cache-store-value key="snlAuth" value="@("Bearer " + (String)((IResponse)context.Variables["bearerToken"]).Body.As<JObject>()["idToken"])" duration="2700" />
+                        <cache-store-value key="snlAuth" value="@("Bearer " + (String)((IResponse)context.Variables["snlBearerToken"]).Body.As<JObject>()["idToken"])" duration="2700" />
+                        <cache-lookup-value key="snlAuth" variable-name="snlAuthToken" />
                     </when>
                 </choose>
                 <set-header name="Authorization" exists-action="override">