Ona custom changes

.github/workflows/docker-image-build.yaml

@@ -0,0 +1,37 @@
+name: build and push image to dockerhub
+on:
+  push:
+    tags:
+      - '[0-9]+\.[0-9]+\.[0-9]+'
+jobs:
+  main:
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Get the version
+        id: get-version-release
+        run: echo "version=${GITHUB_REF_NAME#refs/heads}" >> $GITHUB_ENV
+
+      - name: Checkout to version
+        uses: actions/checkout@v3
+        with:
+          ref: ${{ env.version }}
+
+      - name: Login to DockerHub
+        uses: docker/login-action@v2
+        with:
+          username: ${{ secrets.DOCKER_HUB_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
+
+      - name: Build and push
+        id: docker-build
+        uses: docker/build-push-action@v3
+        with:
+          context: .
+          file: Dockerfile
+          platforms: linux/amd64
+          push: true
+          tags: |
+            onaio/dirt-tile-server:${{ env.version }}
+
+      - name: Image digest
+        run: echo ${{ steps.docker-build.outputs.digest }}

Dockerfile

@@ -1,8 +1,10 @@
 # adapted from https://nodejs.org/en/docs/guides/nodejs-docker-webapp/
-FROM node:20-slim
+FROM node:20.18.3-alpine3.21
+RUN apk update && apk upgrade
 WORKDIR /usr/src/app
 COPY package*.json ./
 RUN npm ci --only=production
 COPY . .
+RUN npm install
 EXPOSE 3000
 CMD [ "npm", "run", "start" ]

index.js

@@ -11,98 +11,136 @@ if ("SERVER_LOGGER" in process.env) {
   }
 }
 
-const fastify = require("fastify")({ logger: logger })
+const axios = require("axios");
 
-// EXIT IF POSTGRES_CONNECTION ENV VARIABLE NOT SET
-if (!("POSTGRES_CONNECTION" in process.env)) {
-  throw new Error("Required ENV variable POSTGRES_CONNECTION is not set. Please see README.md for more information.");
-}
-
-// POSTGRES CONNECTION
-const postgresConfig = { connectionString: process.env.POSTGRES_CONNECTION }
+async function build() {
+  const fastify = require("fastify")({ logger: logger });
+  const queryString = require("query-string");
+  fastify.addHook('onRequest', async (req, reply) => {
+    reqParams = req.url.split("?")[1];
+    const parsedReqParams = queryString.parse(reqParams);
+    const formId = parsedReqParams.form_id;
+    const tempToken = parsedReqParams.temp_token;
+    if (formId) {
+      axios
+        .get(`${process.env.FORMS_ENDPOINT}${formId}.json`, {
+          headers: tempToken && tempToken.length > 0 ? {
+            Authorization: `TempToken ${tempToken}`,
+          } : {},
+        })
+        .then((res) => {
+          if (res && res.status === 200) {
+            return;
+          } else {
+            reply.code(403).send("Forbidden");
+          }
+        })
+        .catch((error) => {
+          req.log.error(error)
+          reply.code((error?.status || 500)).send(error.message);
+        });
+    } else if ("/health-check" == req.url) {
+      return;
+    } else {
+      reply.code(401).send("Authentication Failure");
+    }
+  });
 
-if (process.env.SSL_ROOT_CERT) {
-  postgresConfig.ssl = {
-    ca: process.env.SSL_ROOT_CERT
+  // EXIT IF POSTGRES_CONNECTION ENV VARIABLE NOT SET
+  if (!("POSTGRES_CONNECTION" in process.env)) {
+    throw new Error("Required ENV variable POSTGRES_CONNECTION is not set. Please see README.md for more information.");
   }
-} else if (process.env.SSL_ROOT_CERT_PATH) {
-  postgresConfig.ssl = {
-    ca: fs.readFileSync(process.env.SSL_ROOT_CERT_PATH).toString()
+
+  // POSTGRES CONNECTION
+  const postgresConfig = { connectionString: process.env.POSTGRES_CONNECTION }
+
+  if (process.env.SSL_ROOT_CERT) {
+    postgresConfig.ssl = {
+      ca: process.env.SSL_ROOT_CERT
+    }
+  } else if (process.env.SSL_ROOT_CERT_PATH) {
+    postgresConfig.ssl = {
+      ca: fs.readFileSync(process.env.SSL_ROOT_CERT_PATH).toString()
+    }
   }
-}
 
-fastify.register(require('@fastify/postgres'), postgresConfig)
+  fastify.register(require('@fastify/postgres'), postgresConfig)
 
-// COMPRESSION
-// add x-protobuf
-fastify.register(
-  require('@fastify/compress'),
-  { customTypes: /x-protobuf$/ }
-)
+  // COMPRESSION
+  // add x-protobuf
+  fastify.register(
+    require('@fastify/compress'),
+    { customTypes: /x-protobuf$/ }
+  )
 
-// CACHE SETTINGS
-fastify.register(
-  require('@fastify/caching'), {
+  // CACHE SETTINGS
+  fastify.register(
+    require('@fastify/caching'), {
     privacy: process.env.CACHE_PRIVACY || 'private',
     expiresIn: process.env.CACHE_EXPIRESIN || 3600,
     serverExpiresIn: process.env.CACHE_SERVERCACHE
+  })
+
+  // CORS
+  fastify.register(require('@fastify/cors'), { origin: typeof process.env.CORS_ORIGINS === 'string' ? process.env.CORS_ORIGINS.split(",") : process.env.CORS_ORIGINS })
+
+  // OPTIONAL RATE LIMITER
+  if ("RATE_MAX" in process.env) {
+    fastify.register(import('@fastify/rate-limit'), {
+      max: process.env.RATE_MAX,
+      timeWindow: '1 minute'
+    })
   }
-)
 
-// CORS
-fastify.register(require('@fastify/cors'))
+  // INITIALIZE SWAGGER
+  fastify.register(require('@fastify/swagger'), {
+    exposeRoute: true,
+    hideUntagged: true,
+    swagger: {
+      "basePath": process.env.BASE_PATH || "/",
+      "info": {
+        "title": "Dirt-Simple PostGIS HTTP API",
+        "description": "The Dirt-Simple PostGIS HTTP API is an easy way to expose geospatial functionality to your applications. It takes simple requests over HTTP and returns JSON, JSONP, or protobuf (Mapbox Vector Tile) to the requester. Although the focus of the project has generally been on exposing PostGIS functionality to web apps, you can use the framework to make an API to any database.",
+        "version": process.env.npm_package_version || ""
+      },
+      "externalDocs": {
+        "url": "https://github.com/tobinbradley/dirt-simple-postgis-http-api",
+        "description": "Source code on Github"
+      },
+      "tags": [{
+        "name": "api",
+        "description": "code related end-points"
+      }, {
+        "name": "feature",
+        "description": "features in common formats for direct mapping."
+      }, {
+        "name": "meta",
+        "description": "meta information for tables and views."
+      }]
+    }
+  })
 
-// OPTIONAL RATE LIMITER
-if ("RATE_MAX" in process.env) {
-  fastify.register(import('@fastify/rate-limit'), {
-    max: process.env.RATE_MAX,
-    timeWindow: '1 minute'
+  // ADD ROUTES
+  fastify.register(require('@fastify/autoload'), {
+    dir: path.join(__dirname, 'routes')
   })
-}
 
-// INITIALIZE SWAGGER
-fastify.register(require('@fastify/swagger'), {
-  exposeRoute: true,
-  hideUntagged: true,
-  swagger: {
-    "basePath": process.env.BASE_PATH || "/",
-    "info": {
-      "title": "Dirt-Simple PostGIS HTTP API",
-      "description": "The Dirt-Simple PostGIS HTTP API is an easy way to expose geospatial functionality to your applications. It takes simple requests over HTTP and returns JSON, JSONP, or protobuf (Mapbox Vector Tile) to the requester. Although the focus of the project has generally been on exposing PostGIS functionality to web apps, you can use the framework to make an API to any database.",
-      "version": process.env.npm_package_version || ""
-    },
-    "externalDocs": {
-      "url": "https://github.com/tobinbradley/dirt-simple-postgis-http-api",
-      "description": "Source code on Github"
-    },
-    "tags": [{
-      "name": "api",
-      "description": "code related end-points"
-    }, {
-      "name": "feature",
-      "description": "features in common formats for direct mapping."
-    }, {
-      "name": "meta",
-      "description": "meta information for tables and views."
-    }]
-  }
-})
+  fastify.get('/health-check', { logLevel: 'warn' }, (request, reply) => {
+    reply.send("healthy");
+  })
 
-// SWAGGER UI
-fastify.register(require("@fastify/swagger-ui"), {
-  routePrefix: "/"
-})
 
-// ADD ROUTES
-fastify.register(require('@fastify/autoload'), {
-  dir: path.join(__dirname, 'routes')
-})
+  return fastify
+}
 
 // LAUNCH SERVER
-fastify.listen({port: process.env.SERVER_PORT || 3000, host: process.env.SERVER_HOST || '0.0.0.0'}, (err, address) => {
-  if (err) {
-    console.log(err)
-    process.exit(1)
-  }
-  console.info(`Server listening on ${address}`)
-})
+build()
+  .then(fastify => // LAUNCH SERVER
+    fastify.listen({ port: process.env.SERVER_PORT || 3000, host: process.env.SERVER_HOST || '0.0.0.0' }, (err, address) => {
+      if (err) {
+        fastify.log.error(err)
+        process.exit(1)
+      }
+      fastify.log.info(`Server listening on ${address}`)
+    }))
+  .catch(console.log)