⚰️ Ta i bruk wonderwall og @navikt/oasis

.github/workflows/deploy_commit_to_dev.yml

@@ -40,6 +40,8 @@ jobs:
         run: export TZ=utc
       - name: Install dependencies
         run: npm ci --ignore-scripts
+        env:
+          NPM_AUTH_TOKEN: ${{ secrets.READER_TOKEN }}
       - name: Get jest cache directory
         run: |
           jest_command=node_modules/jest-cli/bin/jest.js # fordi å installere jest med npx tar ti sekunder

.github/workflows/master.yml

@@ -28,6 +28,8 @@ jobs:
         run: export TZ=utc
       - name: Install dependencies
         run: npm ci --ignore-scripts
+        env:
+          NPM_AUTH_TOKEN: ${{ secrets.READER_TOKEN }}
       - name: Get jest cache directory
         run: |
           jest_command=node_modules/jest-cli/bin/jest.js # fordi å installere jest med npx tar ti sekunder

.github/workflows/pull-requests.yml

@@ -15,6 +15,8 @@ jobs:
         cache-dependency-path: 'package-lock.json'
     - name: install dependencies
       run: npm ci --ignore-scripts
+      env:
+        NPM_AUTH_TOKEN: ${{ secrets.READER_TOKEN }}
     - name: test
       run: npm run test
     - name: build

.npmrc

@@ -1 +1,4 @@
+@navikt:registry=https://npm.pkg.github.com
+//npm.pkg.github.com/:_authToken=${NPM_AUTH_TOKEN}
+
 engine-strict=true

README.md

@@ -29,6 +29,17 @@ SPESIALIST_WS_URL=ws://127.0.0.1:9001
 EOF
 ```
 
+### Sett opp tilgang til Github Package Registry
+
+For å kunne laste dependencies fra Github Package Registry
+må du ha et Github Personal Access satt i miljøvariabelen `NPM_AUTH_TOKEN`.
+
+Dette tokenet trenger scopet `package:read`. Legg til følgende i `~/.bashrc` eller `~/.zshrc`:
+
+```shell
+export NPM_AUTH_TOKEN=<token>
+```
+
 ### Både frontend og backend med én kommando
 
 ```shell

deploy/dev.yml

@@ -52,6 +52,11 @@ spec:
     generatedConfig:
       mountPath: /app/dist/client/nais/nais
   azure:
+    sidecar:
+      enabled: true
+      autoLogin: true
+      autoLoginIgnorePaths:
+        - /static/*
     application:
       enabled: true
       tenant: nav.no

deploy/prod.yml

@@ -51,6 +51,11 @@ spec:
     generatedConfig:
       mountPath: /app/dist/client/nais/nais
   azure:
+    sidecar:
+      enabled: true
+      autoLogin: true
+      autoLoginIgnorePaths:
+        - /static/*
     application:
       enabled: true
       claims:

packages/backend/auth/testToken.ts

@@ -0,0 +1,9 @@
+export const createTokenForTest = () =>
+    `${Buffer.from(JSON.stringify({ alg: 'HS256', typ: 'JWT' })).toString('base64')}.${Buffer.from(
+        JSON.stringify({
+            name: 'S. A. Ksbehandler',
+            email: 'dev@nav.no',
+            NAVident: 'dev-ident',
+            oid: '4577332e-801a-4c13-8a71-39f12b8abfa3',
+        }),
+    ).toString('base64')}.bogussignature`;