├── k8s ├── rp │ ├── kustomize │ │ ├── rp │ │ │ ├── base │ │ │ │ ├── profiles-mapping.json │ │ │ │ ├── secret.env │ │ │ │ ├── config.env │ │ │ │ ├── service.yml │ │ │ │ ├── kustomization.yaml │ │ │ │ └── deployment.yml │ │ │ ├── .gitignore │ │ │ └── overlays │ │ │ │ ├── local │ │ │ │ └── rp │ │ │ │ │ ├── config.env │ │ │ │ │ ├── sedb64transform.yml │ │ │ │ │ ├── sedtransform.yml │ │ │ │ │ ├── add-ca.yml │ │ │ │ │ └── ingress.yml │ │ │ │ └── common │ │ │ │ ├── secret.env │ │ │ │ ├── sedb64transform.yml │ │ │ │ ├── sedtransform.yml │ │ │ │ ├── config.env │ │ │ │ ├── profiles-mapping.json │ │ │ │ └── kustomization.yaml │ │ └── plugin │ │ │ └── svceng │ │ │ ├── sedtransformer │ │ │ └── SedTransformer │ │ │ └── sedb64transformer │ │ │ └── SedB64Transformer │ └── README.md ├── issuer │ ├── kustomize │ │ ├── issuer │ │ │ ├── base │ │ │ │ ├── profiles-mapping.json │ │ │ │ ├── secret.env │ │ │ │ ├── service.yml │ │ │ │ ├── config.env │ │ │ │ └── kustomization.yaml │ │ │ ├── .gitignore │ │ │ └── overlays │ │ │ │ ├── local │ │ │ │ └── issuer │ │ │ │ │ ├── config.env │ │ │ │ │ ├── sedb64transform.yml │ │ │ │ │ ├── sedtransform.yml │ │ │ │ │ ├── add-ca.yml │ │ │ │ │ └── ingress.yml │ │ │ │ └── common │ │ │ │ ├── sedb64transform.yml │ │ │ │ ├── secret.env │ │ │ │ ├── sedtransform.yml │ │ │ │ └── kustomization.yaml │ │ └── plugin │ │ │ └── svceng │ │ │ ├── sedtransformer │ │ │ └── SedTransformer │ │ │ └── sedb64transformer │ │ │ └── SedB64Transformer │ └── README.md ├── cms │ ├── kustomize │ │ ├── cms │ │ │ ├── components │ │ │ │ ├── oathkeeper │ │ │ │ │ ├── access-rules.json │ │ │ │ │ ├── config.yml │ │ │ │ │ └── kustomization.yaml │ │ │ │ └── strapi │ │ │ │ │ ├── secret.env │ │ │ │ │ ├── service.yml │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ └── bootstrap.js │ │ │ └── overlays │ │ │ │ ├── common │ │ │ │ ├── .gitignore │ │ │ │ ├── sedtransform.yml │ │ │ │ ├── oathkeeper │ │ │ │ │ ├── rolebinding.yml │ │ │ │ │ ├── role.yml │ │ │ │ │ └── process-template.yml │ │ │ │ ├── sedb64transform.yml │ │ │ │ └── kustomization.yaml │ │ │ │ └── local │ │ │ │ ├── .gitignore │ │ │ │ ├── strapi │ │ │ │ ├── replacements.yml │ │ │ │ └── ingress.yml │ │ │ │ ├── sedtransform.yml │ │ │ │ ├── oathkeeper │ │ │ │ ├── replacements.yml │ │ │ │ ├── ingress.yml │ │ │ │ └── update-local-cert-store.yml │ │ │ │ └── sedb64transform.yml │ │ └── plugin │ │ │ └── svceng │ │ │ ├── sedtransformer │ │ │ └── SedTransformer │ │ │ └── sedb64transformer │ │ │ └── SedB64Transformer │ └── README.md ├── login-consent │ ├── kustomize │ │ ├── login-consent │ │ │ ├── base │ │ │ │ ├── claims-config.json │ │ │ │ ├── login-consent.env │ │ │ │ └── kustomization.yaml │ │ │ ├── .gitignore │ │ │ ├── overlays │ │ │ │ ├── local │ │ │ │ │ ├── login-consent │ │ │ │ │ │ ├── login-consent.env │ │ │ │ │ │ ├── replacements.yml │ │ │ │ │ │ ├── add-ca.yml │ │ │ │ │ │ └── ingress.yml │ │ │ │ │ ├── sedtransform.yml │ │ │ │ │ ├── sedb64transform.yml │ │ │ │ │ ├── hydra │ │ │ │ │ │ ├── replacements.yml │ │ │ │ │ │ └── ingress.yml │ │ │ │ │ └── hydra-admin │ │ │ │ │ │ ├── replacements.yml │ │ │ │ │ │ └── ingress.yml │ │ │ │ └── common │ │ │ │ │ ├── hydra │ │ │ │ │ ├── hydra-secret.env │ │ │ │ │ └── hydra-env.env │ │ │ │ │ ├── sedtransform.yml │ │ │ │ │ ├── sedb64transform.yml │ │ │ │ │ ├── login-consent │ │ │ │ │ └── login-consent.env │ │ │ │ │ └── kustomization.yaml │ │ │ └── components │ │ │ │ └── hydra │ │ │ │ ├── hydra-secret.env │ │ │ │ ├── hydra-env.env │ │ │ │ └── kustomization.yaml │ │ └── plugin │ │ │ └── svceng │ │ │ ├── sedtransformer │ │ │ └── SedTransformer │ │ │ └── sedb64transformer │ │ │ └── SedB64Transformer │ └── README.md ├── jobs │ ├── kustomize │ │ ├── jobs │ │ │ └── overlays │ │ │ │ ├── common │ │ │ │ ├── .gitignore │ │ │ │ ├── sedtransform.yml │ │ │ │ ├── rp │ │ │ │ │ ├── rolebinding.yml │ │ │ │ │ ├── role.yml │ │ │ │ │ └── register-tenant.yml │ │ │ │ ├── issuer │ │ │ │ │ ├── rolebinding.yml │ │ │ │ │ ├── role.yml │ │ │ │ │ └── register-tenant.yml │ │ │ │ └── cms │ │ │ │ │ └── strapi │ │ │ │ │ └── user-data.yml │ │ │ │ └── local │ │ │ │ ├── .gitignore │ │ │ │ └── kustomization.yaml │ │ └── plugin │ │ │ └── svceng │ │ │ └── sedtransformer │ │ │ └── SedTransformer │ └── README.md ├── ace-rp │ ├── kustomize │ │ ├── ace-rp │ │ │ ├── .gitignore │ │ │ ├── base │ │ │ │ ├── secret.env │ │ │ │ ├── config.env │ │ │ │ ├── service.yml │ │ │ │ ├── kustomization.yaml │ │ │ │ └── deployment.yml │ │ │ └── overlays │ │ │ │ ├── cbp │ │ │ │ ├── config.env │ │ │ │ └── kustomization.yaml │ │ │ │ ├── local │ │ │ │ └── ace-rp │ │ │ │ │ ├── cbp │ │ │ │ │ ├── config.env │ │ │ │ │ ├── replacements.yml │ │ │ │ │ ├── add-ca.yml │ │ │ │ │ └── ingress.yml │ │ │ │ │ ├── ucis │ │ │ │ │ ├── config.env │ │ │ │ │ ├── replacements.yml │ │ │ │ │ ├── add-ca.yml │ │ │ │ │ └── ingress.yml │ │ │ │ │ ├── benefits-dept │ │ │ │ │ ├── config.env │ │ │ │ │ ├── replacements.yml │ │ │ │ │ ├── add-ca.yml │ │ │ │ │ └── ingress.yml │ │ │ │ │ ├── sedb64transform.yml │ │ │ │ │ └── sedtransform.yml │ │ │ │ ├── ucis │ │ │ │ ├── config.env │ │ │ │ └── kustomization.yaml │ │ │ │ ├── benefits-dept │ │ │ │ ├── config.env │ │ │ │ └── kustomization.yaml │ │ │ │ └── common │ │ │ │ ├── cbp │ │ │ │ ├── secret.env │ │ │ │ └── config.env │ │ │ │ ├── ucis │ │ │ │ ├── secret.env │ │ │ │ └── config.env │ │ │ │ ├── benefits-dept │ │ │ │ ├── secret.env │ │ │ │ └── config.env │ │ │ │ ├── sedb64transform.yml │ │ │ │ └── sedtransform.yml │ │ └── plugin │ │ │ └── svceng │ │ │ ├── sedtransformer │ │ │ └── SedTransformer │ │ │ └── sedb64transformer │ │ │ └── SedB64Transformer │ └── README.md ├── demo-dbs │ ├── kustomize │ │ └── demo-dbs │ │ │ ├── overlays │ │ │ ├── common │ │ │ │ ├── .gitignore │ │ │ │ └── kustomization.yaml │ │ │ └── local │ │ │ │ ├── .gitignore │ │ │ │ └── kustomization.yaml │ │ │ └── components │ │ │ ├── postgres │ │ │ ├── configure_postgres.sql │ │ │ ├── service.yml │ │ │ ├── kustomization.yaml │ │ │ └── deployment.yml │ │ │ └── mongodb │ │ │ ├── kustomization.yaml │ │ │ ├── service.yml │ │ │ └── deployment.yml │ └── README.md ├── comparator │ └── kustomize │ │ ├── comparator │ │ ├── .gitignore │ │ ├── base │ │ │ ├── comparator │ │ │ │ ├── secret.env │ │ │ │ ├── config.env │ │ │ │ ├── service.yml │ │ │ │ └── deployment.yml │ │ │ └── kustomization.yaml │ │ └── overlays │ │ │ ├── cbp │ │ │ ├── config.env │ │ │ └── kustomization.yaml │ │ │ ├── ucis │ │ │ ├── config.env │ │ │ └── kustomization.yaml │ │ │ ├── benefits-dept │ │ │ ├── config.env │ │ │ └── kustomization.yaml │ │ │ ├── local │ │ │ └── comparator │ │ │ │ ├── cbp │ │ │ │ ├── config.env │ │ │ │ ├── replacements.yml │ │ │ │ ├── add-ca.yml │ │ │ │ └── ingress.yml │ │ │ │ ├── ucis │ │ │ │ ├── config.env │ │ │ │ ├── replacements.yml │ │ │ │ ├── add-ca.yml │ │ │ │ └── ingress.yml │ │ │ │ ├── benefits-dept │ │ │ │ ├── config.env │ │ │ │ ├── replacements.yml │ │ │ │ ├── add-ca.yml │ │ │ │ └── ingress.yml │ │ │ │ ├── sedb64transform.yml │ │ │ │ └── sedtransform.yml │ │ │ └── common │ │ │ ├── cbp │ │ │ ├── secret.env │ │ │ └── config.env │ │ │ ├── ucis │ │ │ ├── secret.env │ │ │ └── config.env │ │ │ ├── benefits-dept │ │ │ ├── secret.env │ │ │ └── config.env │ │ │ ├── sedtransform.yml │ │ │ └── sedb64transform.yml │ │ └── plugin │ │ └── svceng │ │ ├── sedtransformer │ │ └── SedTransformer │ │ └── sedb64transformer │ │ └── SedB64Transformer ├── gatekeeper │ ├── kustomize │ │ ├── gatekeeper │ │ │ ├── .gitignore │ │ │ ├── base │ │ │ │ ├── secret.env │ │ │ │ ├── config.env │ │ │ │ ├── service.yml │ │ │ │ ├── kustomization.yaml │ │ │ │ └── deployment.yml │ │ │ └── overlays │ │ │ │ ├── local │ │ │ │ └── gatekeeper │ │ │ │ │ ├── config.env │ │ │ │ │ ├── sedb64transform.yml │ │ │ │ │ ├── sedtransform.yml │ │ │ │ │ ├── add-ca.yml │ │ │ │ │ └── ingress.yml │ │ │ │ └── common │ │ │ │ ├── secret.env │ │ │ │ ├── sedb64transform.yml │ │ │ │ ├── sedtransform.yml │ │ │ │ ├── config.env │ │ │ │ └── kustomization.yaml │ │ └── plugin │ │ │ └── svceng │ │ │ ├── sedtransformer │ │ │ └── SedTransformer │ │ │ └── sedb64transformer │ │ │ └── SedB64Transformer │ └── README.md ├── scripts │ ├── .gitignore │ ├── ci_minikube_setup.sh │ ├── core_deployment.sh │ └── service_list.txt └── .gitignore ├── cmd ├── login-consent-server-vue │ ├── public │ │ ├── favicon.ico │ │ └── index.html │ ├── src │ │ ├── assets │ │ │ └── img │ │ │ │ ├── logo.png │ │ │ │ └── consent.png │ │ ├── main.js │ │ ├── components │ │ │ └── HelloWorld.vue │ │ └── App.vue │ ├── babel.config.js │ ├── .gitignore │ ├── README.md │ └── package.json ├── rp-rest │ ├── static │ │ └── img │ │ │ ├── logo.png │ │ │ ├── logo.svg │ │ │ ├── oops.png │ │ │ ├── barcode.jpg │ │ │ ├── failed.png │ │ │ ├── success.png │ │ │ ├── verifier.png │ │ │ ├── bank_account.jpg │ │ │ ├── checkmark-16.png │ │ │ ├── credit_card.jpg │ │ │ ├── flight_logo.png │ │ │ ├── icon-home-1.svg │ │ │ ├── icon-home-2.svg │ │ │ ├── icon-home-3.svg │ │ │ ├── icon-home-5.png │ │ │ ├── icon-home-6.png │ │ │ ├── icon-home-7.png │ │ │ ├── icon-home-8.png │ │ │ ├── uscis-icon.svg │ │ │ ├── vaccination-icon.svg │ │ │ ├── barcode_verify.jpeg │ │ │ ├── onboarding-flare.png │ │ │ └── register-property.jpeg │ ├── main.go │ └── main_test.go ├── issuer-rest │ ├── static │ │ ├── img │ │ │ ├── borat.png │ │ │ ├── logo.png │ │ │ ├── background.jpg │ │ │ ├── congrats.jpg │ │ │ ├── footer.png │ │ │ ├── issuer.png │ │ │ ├── qrscan.png │ │ │ ├── credit_score.jpg │ │ │ ├── flight_logo.png │ │ │ ├── issue_license.jpg │ │ │ ├── immigration_logo.jpg │ │ │ ├── onboarding-icon-1.svg │ │ │ └── immigration_nav_logo.png │ │ └── css │ │ │ └── layout.css │ ├── main.go │ └── main_test.go ├── ace-rp-rest │ ├── static │ │ ├── ucis_dept │ │ │ ├── img │ │ │ │ ├── logo.jpg │ │ │ │ ├── footer.png │ │ │ │ ├── custom_logo.png │ │ │ │ └── citizenship_logo.png │ │ │ └── internal │ │ │ │ └── img │ │ │ │ ├── logo.jpg │ │ │ │ ├── footer.png │ │ │ │ └── custom_logo.png │ │ ├── cbp_dept │ │ │ └── img │ │ │ │ ├── custom_logo.png │ │ │ │ └── custom_border_logo.png │ │ └── benefits_dept │ │ │ └── img │ │ │ └── federal_logo.png │ ├── main.go │ └── main_test.go └── login-consent-server │ └── templates │ └── img │ ├── logo.png │ ├── consent.png │ ├── footer.png │ └── citizenship_logo.png ├── doc.go ├── .dockerignore ├── docs ├── issuer │ ├── issuer_oauth2_flow.svg │ └── README.md ├── images │ ├── ace_component_diagram_v0.1.6.svg │ ├── ace_component_diagram_v0.1.7.svg │ ├── ace_component_diagram_v0.1.8.svg │ ├── vcs_component_diagram_v0.1.4.svg │ ├── vcs_component_diagram_v0.1.5.svg │ ├── vcs_component_diagram_v0.1.6.svg │ ├── vcs_component_diagram_v0.1.7.svg │ ├── vcs_component_diagram_v0.1.8.svg │ ├── adapter_component_diagram_v0.1.4.svg │ ├── adapter_component_diagram_v0.1.5.svg │ ├── adapter_component_diagram_v0.1.6.svg │ ├── adapter_component_diagram_v0.1.7.svg │ └── adapter_component_diagram_v0.1.8.svg ├── openapi-specs │ ├── swagger-ui-dist │ │ ├── favicon-16x16.png │ │ ├── favicon-32x32.png │ │ ├── index.css │ │ ├── swagger-initializer.js │ │ └── index.html │ ├── vault │ │ ├── swagger-initializer.js │ │ └── swagger-ui.html │ ├── comparator │ │ ├── swagger-initializer.js │ │ └── swagger-ui.html │ ├── gatekeeper │ │ ├── swagger-initializer.js │ │ └── swagger-ui.html │ └── confidential-storage-hub │ │ ├── swagger-initializer.js │ │ └── swagger-ui.html ├── ace-rp │ └── README.md ├── rp │ └── README.md ├── dev_steps.md └── index.md ├── test ├── ui-automation │ ├── .gitignore │ ├── wdio.conf.js │ ├── test │ │ └── helpers │ │ │ └── index.js │ └── wdio.conf.vcwallet.js ├── cmd │ ├── cms │ │ ├── go.mod │ │ ├── go.sum │ │ └── testdata │ │ │ ├── studentcards.json │ │ │ ├── travelcards.json │ │ │ ├── transcripts.json │ │ │ ├── mdlevidences.json │ │ │ ├── boardingpasses.json │ │ │ ├── creditscores.json │ │ │ ├── universitydegreecredentials.json │ │ │ ├── mdls.json │ │ │ ├── creditcardstatements.json │ │ │ └── vaccinationcertificates.json │ └── demo │ │ └── main.go └── bdd │ ├── Makefile │ ├── issuer │ ├── features │ │ └── issuer_pre_authorize.feature │ └── Makefile │ └── ace │ ├── pkg │ └── gatekeeper │ │ └── models.go │ └── Makefile ├── .gitattributes ├── scripts ├── create_element_did.sh └── check_lint.sh ├── .codecov.yaml ├── pkg ├── restapi │ ├── healthcheck │ │ ├── controller_test.go │ │ ├── operation │ │ │ └── operations_test.go │ │ └── controller.go │ ├── issuer │ │ └── controller.go │ ├── acerp │ │ └── controller.go │ └── rp │ │ └── controller.go └── internal │ └── common │ └── support │ ├── httphandler_test.go │ └── httphandler.go ├── .gitignore ├── images ├── sandbox-cms │ └── Dockerfile ├── login-consent-server │ └── Dockerfile ├── rp-rest │ └── Dockerfile ├── sandbox-cli │ └── Dockerfile ├── ace-rp-rest │ └── Dockerfile └── issuer-rest │ └── Dockerfile └── ci └── version_var.sh /k8s/rp/kustomize/rp/base/profiles-mapping.json: -------------------------------------------------------------------------------- 1 | [{}] 2 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/issuer/base/profiles-mapping.json: -------------------------------------------------------------------------------- 1 | [{}] 2 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/components/oathkeeper/access-rules.json: -------------------------------------------------------------------------------- 1 | [] 2 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/base/claims-config.json: -------------------------------------------------------------------------------- 1 | {} 2 | -------------------------------------------------------------------------------- /cmd/login-consent-server-vue/public/favicon.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trustbloc/sandbox/HEAD/cmd/login-consent-server-vue/public/favicon.ico -------------------------------------------------------------------------------- /doc.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | package edgesandbox 8 | -------------------------------------------------------------------------------- /.dockerignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ./test/ui-automation/ 8 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/logo.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:697f2839230641037e9b882d75ec79d8bf829697f7324322f3e34309f0ed9be6 3 | size 5413 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/logo.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:f61ab1975c083ac0424b3b4519eafda8361eefa042c2ca5fb4436bf63f7d5e8d 3 | size 3131 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/oops.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:a59a9d3b4e9d6645ffe9c70d48d67bb5aba684e8774951833b742e93a7f5eb9f 3 | size 1952 4 | -------------------------------------------------------------------------------- /cmd/issuer-rest/static/img/borat.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:6f9cf74dba58d1dc9815baa8b081d92d76aaa42edb2bef8fac3b052643b63a4e 3 | size 91929 4 | -------------------------------------------------------------------------------- /cmd/issuer-rest/static/img/logo.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:697f2839230641037e9b882d75ec79d8bf829697f7324322f3e34309f0ed9be6 3 | size 5413 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/barcode.jpg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:fce3ea116680a191628cf083b219f4ac0c2fddae1cfc19e34693deaec10a2574 3 | size 16409 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/failed.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:5577e737f7c96404784e81e54c3174e4e86322e34683cb8f48b4384cfbee2a05 3 | size 12495 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/success.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:311ce07b6cf39985c75f7fddb696a519c80a68f77c1616b32118dffb17e03398 3 | size 2389 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/verifier.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:a4d9f3d9ec28e67c606248a6d3f085918600459857f320119a6ba380a8cf2eb2 3 | size 215646 4 | -------------------------------------------------------------------------------- /docs/issuer/issuer_oauth2_flow.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:56d4b350db6b11c78d4002358a49dd97e86231caeec992a0af3507f22494ca52 3 | size 19915 4 | -------------------------------------------------------------------------------- /cmd/issuer-rest/static/img/background.jpg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:d947e8638c80cf9c0186a0ba6e6b5b38e207d68ebbbaa38eee7ef5e835675d28 3 | size 9400 4 | -------------------------------------------------------------------------------- /cmd/issuer-rest/static/img/congrats.jpg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:a990f8e39d0a1ec136dd7ec5a6c19275834ce79c151b248b4eea080e407cc9e6 3 | size 2505427 4 | -------------------------------------------------------------------------------- /cmd/issuer-rest/static/img/footer.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:ddb8ff54a79b487ebb06fee4ab481c52c1d16733efeedd0d663c0dadc88d58c4 3 | size 208102 4 | -------------------------------------------------------------------------------- /cmd/issuer-rest/static/img/issuer.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:654c7a9468cd3a1c017b24a9eddb2ecb5a27c1fd69ecfc942ade9df9833d8791 3 | size 169609 4 | -------------------------------------------------------------------------------- /cmd/issuer-rest/static/img/qrscan.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:d120f02b1988f6ded5daca371a6b8a9e65b584034866b93be4ff494afd24abe7 3 | size 154502 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/bank_account.jpg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:53ec2ed48f6d1be1b5500d2a723379226b8bc244e4f75c3c15c8ea8578de4eda 3 | size 58264 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/checkmark-16.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:c506e992bf2bb3b784d904626105aed929040b3f865eca7a67e04c6fa012ea8c 3 | size 373 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/credit_card.jpg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:5ec0c2af744d45274082247bdac2c4bb48919012045f5f454968a13ac1784869 3 | size 83064 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/flight_logo.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:de172b140f1f8b36799efbe60def41724bcbe3cd7a27a47abb335a33d106f346 3 | size 94709 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/icon-home-1.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:437c67509fd6d7a3b03e2302310d46f6eea74f70a186a40c5a3a9e7246fe739f 3 | size 3058 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/icon-home-2.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:3bb1d131d8e1d9eab79c9febb49187d87e7531065a28cb994a2e3fe3c4953b0d 3 | size 4129 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/icon-home-3.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:244d7a2ab230c0b24d77ee4ca7b055cfe720e5fe9584fc67d60fb2c1365b6557 3 | size 4248 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/icon-home-5.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:40eb65471b0d7ce4e2caace5944980337181378aca0d21ff7b65ae070b8fc9df 3 | size 1128 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/icon-home-6.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:659aca3c13069b885936b5bf66060009427fa9890f7a4002d2e9a50cb667073a 3 | size 3461 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/icon-home-7.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:039562e9ed329672e10fe8f7ac66863b6cea935941d27448f791261bcaf55cdd 3 | size 1795 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/icon-home-8.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:198eaf4764a802d322cf54595092eb489f930ad1764d71adbfbad87402e0466d 3 | size 6130 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/uscis-icon.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:48c65b49c6a937aa0d29c52f3f6d2c0e3ff20fff08d08fb9c264601a0b1308b9 3 | size 35829 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/vaccination-icon.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:41de92dad66ee30d940d02a6db16efef56e071441af3bdea33b1bae24034e7d8 3 | size 941 4 | -------------------------------------------------------------------------------- /cmd/ace-rp-rest/static/ucis_dept/img/logo.jpg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:cb8670860cc5eb2f7c95dcfa6c26fe1b659b432f509f663f76ea6cb76b99b967 3 | size 163311 4 | -------------------------------------------------------------------------------- /cmd/issuer-rest/static/img/credit_score.jpg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:dc663aebe92639466e78bd8e01efe66afd1f3d4d5d4715f104010a3557ace9b5 3 | size 122937 4 | -------------------------------------------------------------------------------- /cmd/issuer-rest/static/img/flight_logo.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:de172b140f1f8b36799efbe60def41724bcbe3cd7a27a47abb335a33d106f346 3 | size 94709 4 | -------------------------------------------------------------------------------- /cmd/issuer-rest/static/img/issue_license.jpg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:5a419ed286993ce6b65d155ff2629663cd79b4684314f58c85698929997b24ba 3 | size 999204 4 | -------------------------------------------------------------------------------- /cmd/login-consent-server/templates/img/logo.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:697f2839230641037e9b882d75ec79d8bf829697f7324322f3e34309f0ed9be6 3 | size 5413 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/barcode_verify.jpeg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:564d73a43b2ebb6c808000d75c96426b809991bd0eaeae2ae5c1ba91d25fbf87 3 | size 10094 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/onboarding-flare.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:edb636e2c506a77e03771525a3e93d90bd961432fc87bf77305a95ce5f11cf1b 3 | size 72966 4 | -------------------------------------------------------------------------------- /cmd/rp-rest/static/img/register-property.jpeg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:8309f5456074103e975dd5fdd80cdf67caac51ca0a9abf547898442a8298402e 3 | size 6015 4 | -------------------------------------------------------------------------------- /docs/images/ace_component_diagram_v0.1.6.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:24ff2e27ae98c026ab224c9bc6bd126077d621fbf960ee80b7a711faa1ce22d3 3 | size 45574 4 | -------------------------------------------------------------------------------- /docs/images/ace_component_diagram_v0.1.7.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:27250fa04c67d2b48eeae7bd62e5ab480e724c69be76c524b3652cee8f7be4d7 3 | size 41747 4 | -------------------------------------------------------------------------------- /docs/images/ace_component_diagram_v0.1.8.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:27250fa04c67d2b48eeae7bd62e5ab480e724c69be76c524b3652cee8f7be4d7 3 | size 41747 4 | -------------------------------------------------------------------------------- /docs/images/vcs_component_diagram_v0.1.4.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:2ed400e1a053fe7270255dc3e42339f8727489917a8ca8c338f7eaaa90b54d59 3 | size 51149 4 | -------------------------------------------------------------------------------- /docs/images/vcs_component_diagram_v0.1.5.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:4332c24b0c2e819f691b036a303269c8e32820cbbb7ed5e872471b96c87f0c25 3 | size 86514 4 | -------------------------------------------------------------------------------- /docs/images/vcs_component_diagram_v0.1.6.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:776834f31cfe9edaeff54ca481db2a13d6a0ea02fdb9a2e653bb52247b9c11e3 3 | size 86343 4 | -------------------------------------------------------------------------------- /docs/images/vcs_component_diagram_v0.1.7.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:d3ba778defab39f7946b67be9ec666587c87a04e539b54769034e3982b6cc81f 3 | size 84412 4 | -------------------------------------------------------------------------------- /docs/images/vcs_component_diagram_v0.1.8.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:d3ba778defab39f7946b67be9ec666587c87a04e539b54769034e3982b6cc81f 3 | size 84412 4 | -------------------------------------------------------------------------------- /test/ui-automation/.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | node_modules 8 | reports 9 | -------------------------------------------------------------------------------- /cmd/ace-rp-rest/static/ucis_dept/img/footer.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:ddb8ff54a79b487ebb06fee4ab481c52c1d16733efeedd0d663c0dadc88d58c4 3 | size 208102 4 | -------------------------------------------------------------------------------- /cmd/issuer-rest/static/img/immigration_logo.jpg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:cb8670860cc5eb2f7c95dcfa6c26fe1b659b432f509f663f76ea6cb76b99b967 3 | size 163311 4 | -------------------------------------------------------------------------------- /cmd/issuer-rest/static/img/onboarding-icon-1.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:2e5c10c9a2542474c0de77b29c6a8d146c3fc9cc484b76bb06f13293b2b7262a 3 | size 1655 4 | -------------------------------------------------------------------------------- /cmd/login-consent-server-vue/src/assets/img/logo.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:697f2839230641037e9b882d75ec79d8bf829697f7324322f3e34309f0ed9be6 3 | size 5413 4 | -------------------------------------------------------------------------------- /cmd/login-consent-server/templates/img/consent.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:6d731902d55747b7aaf5c372c24a8580538e97c3ceb7c168fb6a8408e7bea806 3 | size 53713 4 | -------------------------------------------------------------------------------- /cmd/login-consent-server/templates/img/footer.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:ddb8ff54a79b487ebb06fee4ab481c52c1d16733efeedd0d663c0dadc88d58c4 3 | size 208102 4 | -------------------------------------------------------------------------------- /docs/images/adapter_component_diagram_v0.1.4.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:d124f7ee440027b1e38ef341543b75f37dc7d23a1eee27c2600c653f5c30e6c2 3 | size 75852 4 | -------------------------------------------------------------------------------- /docs/images/adapter_component_diagram_v0.1.5.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:2d17453b2d2c024b654ea42fa61bcf3d6915a848f0aa3423a043441e3ad782a0 3 | size 113410 4 | -------------------------------------------------------------------------------- /docs/images/adapter_component_diagram_v0.1.6.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:3dbfe61b0876de56676ce25e00adf02c85491c774cfdbaf2bba078c7e38494a1 3 | size 113242 4 | -------------------------------------------------------------------------------- /docs/images/adapter_component_diagram_v0.1.7.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:519e99043d08c84a422b03a66d799c40341a5abbd3a077ba27435dccd3a13077 3 | size 110661 4 | -------------------------------------------------------------------------------- /docs/images/adapter_component_diagram_v0.1.8.svg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:e834745e1b7d539fb947e8005dc673a12d1afb06045f112dbacec6e29e69bf12 3 | size 108556 4 | -------------------------------------------------------------------------------- /docs/openapi-specs/swagger-ui-dist/favicon-16x16.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:af24ad604dd7b3bcda8f975ab973075f4a2f70a4087944a12f8ef8b63a3e07c2 3 | size 665 4 | -------------------------------------------------------------------------------- /docs/openapi-specs/swagger-ui-dist/favicon-32x32.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:3ed612f41e050ca5e7000cad6f1cbe7e7da39f65fca99c02e99e6591056e5837 3 | size 628 4 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/overlays/common/.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | certs/** 8 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/overlays/local/.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | certs/** 8 | -------------------------------------------------------------------------------- /k8s/jobs/kustomize/jobs/overlays/common/.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | certs/** 8 | -------------------------------------------------------------------------------- /k8s/jobs/kustomize/jobs/overlays/local/.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | certs/** 8 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | **/keys/** 8 | **/certs/** 9 | -------------------------------------------------------------------------------- /cmd/ace-rp-rest/static/cbp_dept/img/custom_logo.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:f7578a60bdf14559a778077f46cb9c1f1e529921b7c851b62f7930e828584c51 3 | size 209164 4 | -------------------------------------------------------------------------------- /cmd/ace-rp-rest/static/ucis_dept/img/custom_logo.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:f7578a60bdf14559a778077f46cb9c1f1e529921b7c851b62f7930e828584c51 3 | size 209164 4 | -------------------------------------------------------------------------------- /cmd/ace-rp-rest/static/ucis_dept/internal/img/logo.jpg: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:cb8670860cc5eb2f7c95dcfa6c26fe1b659b432f509f663f76ea6cb76b99b967 3 | size 163311 4 | -------------------------------------------------------------------------------- /cmd/issuer-rest/static/img/immigration_nav_logo.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:07b358be4e8145a243d62719aa5ad1d43bd37a0636850ea1be66eaff28f54c33 3 | size 308567 4 | -------------------------------------------------------------------------------- /cmd/login-consent-server-vue/src/assets/img/consent.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:6d731902d55747b7aaf5c372c24a8580538e97c3ceb7c168fb6a8408e7bea806 3 | size 53713 4 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/base/secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | DATABASE_URL=mem://test 8 | -------------------------------------------------------------------------------- /cmd/ace-rp-rest/static/benefits_dept/img/federal_logo.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:17ace664ae1856e90d37890cfdd6e92a4168b8f510cd1532df588c34394146f8 3 | size 93062 4 | -------------------------------------------------------------------------------- /cmd/ace-rp-rest/static/cbp_dept/img/custom_border_logo.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:19f9b2e2c7a6c5f0f42943494d558f8dbc57f8835887ac67ceb5cf2679d2fac4 3 | size 284928 4 | -------------------------------------------------------------------------------- /cmd/ace-rp-rest/static/ucis_dept/img/citizenship_logo.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:f838ab6a792bf5cf06b37b1b5f8bb3b962d339135bab5310bcf0b2790b1eaf24 3 | size 264904 4 | -------------------------------------------------------------------------------- /cmd/ace-rp-rest/static/ucis_dept/internal/img/footer.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:ddb8ff54a79b487ebb06fee4ab481c52c1d16733efeedd0d663c0dadc88d58c4 3 | size 208102 4 | -------------------------------------------------------------------------------- /cmd/login-consent-server/templates/img/citizenship_logo.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:f838ab6a792bf5cf06b37b1b5f8bb3b962d339135bab5310bcf0b2790b1eaf24 3 | size 264904 4 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | **/keys/** 8 | **/certs/** 9 | -------------------------------------------------------------------------------- /k8s/demo-dbs/kustomize/demo-dbs/overlays/common/.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | certs/** 8 | -------------------------------------------------------------------------------- /k8s/demo-dbs/kustomize/demo-dbs/overlays/local/.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | certs/** 8 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/issuer/.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | **/keys/** 8 | **/certs/** 9 | -------------------------------------------------------------------------------- /cmd/ace-rp-rest/static/ucis_dept/internal/img/custom_logo.png: -------------------------------------------------------------------------------- 1 | version https://git-lfs.github.com/spec/v1 2 | oid sha256:f7578a60bdf14559a778077f46cb9c1f1e529921b7c851b62f7930e828584c51 3 | size 209164 4 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/base/secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | DATABASE_URL=mem://test 8 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | **/keys/** 8 | **/certs/** 9 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | **/keys/** 8 | **/certs/** 9 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | **/keys/** 8 | **/certs/** 9 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/base/secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | DATABASE_URL=mem://test 8 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/overlays/local/rp/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | RP_TLS_CACERTS=/etc/rp/tls/ca.crt 8 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/base/comparator/secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | COMPARATOR_DSN=mem://test 8 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/cbp/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ACE_DEMO_MODE=cbp 8 | DATABASE_PREFIX=cbp_db 9 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/local/ace-rp/cbp/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ACE_TLS_CACERTS=/etc/ace-rp/tls/ca.crt 8 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/local/ace-rp/ucis/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ACE_TLS_CACERTS=/etc/ace-rp/tls/ca.crt 8 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/ucis/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ACE_DEMO_MODE=ucis 8 | DATABASE_PREFIX=ucis_db 9 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/cbp/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | COMPARATOR_DATABASE_PREFIX=cbpcomparator 8 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/ucis/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | COMPARATOR_DATABASE_PREFIX=uciscomparator 8 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/issuer/overlays/local/issuer/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ISSUER_TLS_CACERTS=/etc/issuer/tls/ca.crt 8 | -------------------------------------------------------------------------------- /k8s/scripts/.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | # ingress patch file 8 | .ingress* 9 | .coredns* 10 | .Corefile* 11 | -------------------------------------------------------------------------------- /k8s/.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | # kustomize binaries 8 | */bin 9 | 10 | # generated certificates 11 | .certs 12 | .core 13 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/local/ace-rp/benefits-dept/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ACE_TLS_CACERTS=/etc/ace-rp/tls/ca.crt 8 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/overlays/local/gatekeeper/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | GK_TLS_CACERTS=/etc/gatekeeper/tls/ca.crt 8 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/benefits-dept/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | COMPARATOR_DATABASE_PREFIX=benefitsdeptcomparator 8 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/benefits-dept/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ACE_DEMO_MODE=benefits 8 | DATABASE_PREFIX=benefits_dept 9 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/base/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | RP_HOST_URL=0.0.0.0:8081 8 | DATABASE_PREFIX=test 9 | RP_VCS_URL=http:// 10 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/local/comparator/cbp/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | COMPARATOR_TLS_CACERTS=/etc/comparator/tls/ca.crt 8 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/local/comparator/ucis/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | COMPARATOR_TLS_CACERTS=/etc/comparator/tls/ca.crt 8 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/local/login-consent/login-consent.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | TLS_CACERTS=/etc/login-consent/tls/ca.crt 8 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/local/comparator/benefits-dept/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | COMPARATOR_TLS_CACERTS=/etc/comparator/tls/ca.crt 8 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/overlays/common/secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | DATABASE_URL=||MONGODB_URL|| 8 | RP_REQUEST_TOKENS=vcs_verifier=vcs_verifier_rw_token 9 | -------------------------------------------------------------------------------- /cmd/login-consent-server-vue/babel.config.js: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | module.exports = { 8 | presets: [ 9 | '@vue/cli-plugin-babel/preset' 10 | ] 11 | } 12 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/common/cbp/secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | DATABASE_URL=||MONGODB_URL|| 8 | ACE_REQUEST_TOKENS=vcs_issuer=vcs_issuer_rw_token 9 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/common/ucis/secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | DATABASE_URL=||MONGODB_URL|| 8 | ACE_REQUEST_TOKENS=vcs_issuer=vcs_issuer_rw_token 9 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/overlays/local/strapi/replacements.yml: -------------------------------------------------------------------------------- 1 | source: 2 | kind: Service 3 | name: strapi 4 | version: v1 5 | targets: 6 | - fieldPaths: 7 | - spec.rules.0.http.paths.0.backend.service.name 8 | select: 9 | kind: Ingress 10 | name: strapi 11 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/issuer/base/secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | DATABASE_URL=mem://test 8 | OAUTH2_ISSUER_CLIENT_SECRET=test 9 | OAUTH2_ISSUER_CLIENT_ID=test 10 | -------------------------------------------------------------------------------- /docs/ace-rp/README.md: -------------------------------------------------------------------------------- 1 | ## Anonymous Comparator and Extractor - Relying Party (ACE-RP) 2 | 3 | Anonymous Comparator and Extractor Relying Party is a sample application to demonstrate the usage of Anonymous comparison and extraction capability 4 | provided by TrustBloc platform. 5 | 6 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/common/benefits-dept/secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | DATABASE_URL=||MONGODB_URL|| 8 | ACE_REQUEST_TOKENS=vcs_issuer=vcs_issuer_rw_token 9 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/common/cbp/secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | COMPARATOR_DSN=||MONGODB_DSN|| 8 | COMPARATOR_REQUEST_TOKENS=||COMPARATOR_REQUEST_TOKENS|| 9 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/common/ucis/secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | COMPARATOR_DSN=||MONGODB_DSN|| 8 | COMPARATOR_REQUEST_TOKENS=||COMPARATOR_REQUEST_TOKENS|| 9 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/base/comparator/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | COMPARATOR_HOST_URL=0.0.0.0:8081 8 | COMPARATOR_DID_DOMAIN=test 9 | COMPARATOR_CSH_URL=http:// 10 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/common/benefits-dept/secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | COMPARATOR_DSN=||MONGODB_DSN|| 8 | COMPARATOR_REQUEST_TOKENS=||COMPARATOR_REQUEST_TOKENS|| 9 | -------------------------------------------------------------------------------- /test/ui-automation/wdio.conf.js: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | 'use strict'; 8 | 9 | const {config} = require('./wdio.local.conf'); 10 | 11 | exports.config = { 12 | ...config, 13 | }; 14 | -------------------------------------------------------------------------------- /test/cmd/cms/go.mod: -------------------------------------------------------------------------------- 1 | // Copyright SecureKey Technologies Inc. All Rights Reserved. 2 | // 3 | // SPDX-License-Identifier: Apache-2.0 4 | 5 | module github.com/trustbloc/sandbox/test/cmd/cms 6 | 7 | go 1.19 8 | 9 | require ( 10 | github.com/google/uuid v1.3.0 11 | github.com/gorilla/mux v1.8.0 12 | ) 13 | -------------------------------------------------------------------------------- /docs/openapi-specs/swagger-ui-dist/index.css: -------------------------------------------------------------------------------- 1 | html { 2 | box-sizing: border-box; 3 | overflow: -moz-scrollbars-vertical; 4 | overflow-y: scroll; 5 | } 6 | 7 | *, 8 | *:before, 9 | *:after { 10 | box-sizing: inherit; 11 | } 12 | 13 | body { 14 | margin: 0; 15 | background: #fafafa; 16 | } 17 | -------------------------------------------------------------------------------- /.gitattributes: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | *.png filter=lfs diff=lfs merge=lfs -text 7 | *.jpg filter=lfs diff=lfs merge=lfs -text 8 | *.svg filter=lfs diff=lfs merge=lfs -text 9 | *.jpeg filter=lfs diff=lfs merge=lfs -text 10 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/base/login-consent.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # Copyright Gen Digital Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | SERVE_PORT=8081 9 | ADMIN_URL=http:// 10 | CLAIMS_CONFIG_FILE_PATH= 11 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/components/hydra/hydra-secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | DSN=postgres://user:pass@postgres-demo:5432/loginconsent 8 | SECRETS_SYSTEM=test 9 | OIDC_SUBJECT_TYPE_PAIRWISE_SALT=test 10 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/common/hydra/hydra-secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | DSN=||HYDRA_POSTGRES_DSN|| 8 | SECRETS_SYSTEM=testSecretsSystem 9 | OIDC_SUBJECT_TYPE_PAIRWISE_SALT=testSecretsSystem 10 | -------------------------------------------------------------------------------- /cmd/login-consent-server-vue/src/main.js: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | import Vue from 'vue' 8 | import App from './App.vue' 9 | 10 | Vue.config.productionTip = false 11 | 12 | new Vue({ 13 | render: h => h(App), 14 | }).$mount('#app') 15 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/common/sedtransform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedTransformer 9 | metadata: 10 | name: sedtransformer 11 | argsOneLiner: s^||DOMAIN||^${DOMAIN}^ 12 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/local/sedtransform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedTransformer 9 | metadata: 10 | name: sedtransformer 11 | argsOneLiner: s^||DOMAIN||^${DOMAIN}^ 12 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/overlays/common/sedb64transform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedB64Transformer 9 | metadata: 10 | name: sedb64transformer 11 | argsOneLiner: s^||MONGODB_URL||^${MONGODB_URL}^ 12 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/overlays/local/rp/sedb64transform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedB64Transformer 9 | metadata: 10 | name: sedb64transformer 11 | argsOneLiner: s^||MONGODB_URL||^${MONGODB_URL}^ 12 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/common/sedb64transform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedB64Transformer 9 | metadata: 10 | name: sedb64transformer 11 | argsOneLiner: s^||MONGODB_URL||^${MONGODB_URL}^ 12 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/local/ace-rp/sedb64transform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedB64Transformer 9 | metadata: 10 | name: sedb64transformer 11 | argsOneLiner: s^||MONGODB_URL||^${MONGODB_URL}^ 12 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/components/oathkeeper/config.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | serve: 8 | proxy: 9 | port: 4455 10 | api: 11 | port: 4456 12 | 13 | access_rules: 14 | repositories: 15 | - file:///etc/rules/access-rules.json 16 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/issuer/overlays/local/issuer/sedb64transform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedB64Transformer 9 | metadata: 10 | name: sedb64transformer 11 | argsOneLiner: s^||MONGODB_URL||^${MONGODB_URL}^ 12 | -------------------------------------------------------------------------------- /test/bdd/Makefile: -------------------------------------------------------------------------------- 1 | # Copyright SecureKey Technologies Inc. 2 | # 3 | # SPDX-License-Identifier: Apache-2.0 4 | 5 | .PHONY: all 6 | all: clean bdd-test 7 | 8 | .PHONY: bdd-test 9 | bdd-test: 10 | @make bdd-test -C ./ace 11 | @make bdd-test -C ./issuer 12 | 13 | .PHONY: clean 14 | clean: 15 | @make clean -C ./ace 16 | @make clean -C ./issuer 17 | -------------------------------------------------------------------------------- /test/cmd/cms/go.sum: -------------------------------------------------------------------------------- 1 | github.com/google/uuid v1.3.0 h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I= 2 | github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= 3 | github.com/gorilla/mux v1.8.0 h1:i40aqfkR1h2SlN9hojwV5ZA91wcXFOvkdNIeFDP5koI= 4 | github.com/gorilla/mux v1.8.0/go.mod h1:DVbg23sWSpFRCP0SfiEN6jmj59UnW/n46BH5rLB71So= 5 | -------------------------------------------------------------------------------- /scripts/create_element_did.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | set -e 8 | 9 | echo "Running $0" 10 | 11 | cd .build 12 | npm install @transmute/element-lib 13 | npm install axios 14 | ElementAPIURL=${REQUEST_URL} node ./create-element-did.js 15 | -------------------------------------------------------------------------------- /docs/rp/README.md: -------------------------------------------------------------------------------- 1 | ## Relying Party 2 | 3 | Relying Party is a sample application that will request verifiable credential (VC) from the user. 4 | 5 | Relying Party application will: 6 | - request VC from the user via [CHAPI](https://github.com/digitalbazaar/credential-handler-polyfill) 7 | - verify if VC is valid against [VC Service](https://github.com/trustbloc/vcs) -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/local/comparator/sedb64transform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedB64Transformer 9 | metadata: 10 | name: sedb64transformer 11 | argsOneLiner: s^||MONGODB_DSN||^${MONGODB_DSN}^ 12 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/overlays/common/secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | DATABASE_URL=||MONGODB_URL|| 8 | GK_REQUEST_TOKENS=||GK_REQUEST_TOKENS|| 9 | GK_VC_REQUEST_TOKENS=vcs_issuer=vcs_issuer_rw_token 10 | GK_REST_API_TOKEN=gk_token 11 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/overlays/common/sedtransform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedTransformer 9 | metadata: 10 | name: sedtransformer 11 | argsOneLiner: s^||DOMAIN||^${DOMAIN}^g s^||DEPLOYMENT_ENV||^${DEPLOYMENT_ENV}^g 12 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/common/sedtransform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedTransformer 9 | metadata: 10 | name: sedtransformer 11 | argsOneLiner: s^||DOMAIN||^${DOMAIN}^g s^||BLOC_DOMAIN||^${BLOC_DOMAIN}^ 12 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/base/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | GK_HOST_URL=0.0.0.0:8081 8 | DATABASE_PREFIX=gatekeeper_ 9 | GK_DID_ANCHOR_ORIGIN=http:// 10 | GK_VAULT_SERVER_URL=http:// 11 | GK_CSH_URL=http:// 12 | GK_VC_ISSUER_URL=http:// 13 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/overlays/local/gatekeeper/sedb64transform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedB64Transformer 9 | metadata: 10 | name: sedb64transformer 11 | argsOneLiner: s^||MONGODB_URL||^${MONGODB_URL}^ 12 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/overlays/local/rp/sedtransform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedTransformer 9 | metadata: 10 | name: sedtransformer 11 | argsOneLiner: s^||DOMAIN||^${DOMAIN}^g s^||DEPLOYMENT_ENV||^${DEPLOYMENT_ENV}^g 12 | -------------------------------------------------------------------------------- /.codecov.yaml: -------------------------------------------------------------------------------- 1 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 2 | # 3 | # SPDX-License-Identifier: Apache-2.0 4 | 5 | coverage: 6 | status: 7 | project: 8 | default: 9 | target: 75% 10 | patch: 11 | default: 12 | target: 85% 13 | only_pulls: true 14 | 15 | ignore: 16 | - "test/bdd" # ignore bdd tests 17 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/common/sedtransform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedTransformer 9 | metadata: 10 | name: sedtransformer 11 | argsOneLiner: s^||DOMAIN||^${DOMAIN}^g s^||DEPLOYMENT_ENV||^${DEPLOYMENT_ENV}^g 12 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/common/sedb64transform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedB64Transformer 9 | metadata: 10 | name: sedb64transformer 11 | argsOneLiner: s^||HYDRA_POSTGRES_DSN||^${HYDRA_POSTGRES_DSN}^ 12 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/local/sedb64transform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedB64Transformer 9 | metadata: 10 | name: sedb64transformer 11 | argsOneLiner: s^||HYDRA_POSTGRES_DSN||^${HYDRA_POSTGRES_DSN}^ 12 | -------------------------------------------------------------------------------- /cmd/login-consent-server-vue/.gitignore: -------------------------------------------------------------------------------- 1 | .DS_Store 2 | node_modules 3 | /dist 4 | 5 | 6 | # local env files 7 | .env.local 8 | .env.*.local 9 | 10 | # Log files 11 | npm-debug.log* 12 | yarn-debug.log* 13 | yarn-error.log* 14 | pnpm-debug.log* 15 | 16 | # Editor directories and files 17 | .idea 18 | .vscode 19 | *.suo 20 | *.ntvs* 21 | *.njsproj 22 | *.sln 23 | *.sw? 24 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/local/ace-rp/sedtransform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedTransformer 9 | metadata: 10 | name: sedtransformer 11 | argsOneLiner: s^||DOMAIN||^${DOMAIN}^g s^||DEPLOYMENT_ENV||^${DEPLOYMENT_ENV}^g 12 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/local/comparator/sedtransform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedTransformer 9 | metadata: 10 | name: sedtransformer 11 | argsOneLiner: s^||DOMAIN||^${DOMAIN}^g s^||BLOC_DOMAIN||^${BLOC_DOMAIN}^ 12 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/issuer/overlays/local/issuer/sedtransform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedTransformer 9 | metadata: 10 | name: sedtransformer 11 | argsOneLiner: s^||DOMAIN||^${DOMAIN}^g s^||DEPLOYMENT_ENV||^${DEPLOYMENT_ENV}^g 12 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/overlays/local/gatekeeper/sedtransform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedTransformer 9 | metadata: 10 | name: sedtransformer 11 | argsOneLiner: s^||DOMAIN||^${DOMAIN}^g s^||DEPLOYMENT_ENV||^${DEPLOYMENT_ENV}^g 12 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/base/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ACE_HOST_URL=0.0.0.0:8081 8 | DATABASE_PREFIX=test 9 | ACE_DEMO_MODE=uscis 10 | ACE_COMPARATOR_URL=http:// 11 | ACE_HOST_EXTERNAL_URL=http:// 12 | ACE_VC_ISSUER_URL=http:// 13 | ACE_VAULT_SERVER_URL=http:// 14 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/overlays/local/sedtransform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedTransformer 9 | metadata: 10 | name: sedtransformer 11 | argsOneLiner: s/||DOMAIN||/${DOMAIN}/g s/||BLOC_DOMAIN||/${BLOC_DOMAIN}/g s/||DEPLOYMENT_ENV||/${DEPLOYMENT_ENV}/g 12 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/overlays/common/sedtransform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedTransformer 9 | metadata: 10 | name: sedtransformer 11 | argsOneLiner: s/||DOMAIN||/${DOMAIN}/g s/||BLOC_DOMAIN||/${BLOC_DOMAIN}/g s/||DEPLOYMENT_ENV||/${DEPLOYMENT_ENV}/g 12 | -------------------------------------------------------------------------------- /k8s/jobs/kustomize/jobs/overlays/common/sedtransform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedTransformer 9 | metadata: 10 | name: sedtransformer 11 | argsOneLiner: s^||DOMAIN||^${DOMAIN}^g s^||DEPLOYMENT_ENV||^${DEPLOYMENT_ENV}^g s^||BLOC_DOMAIN||^${BLOC_DOMAIN}^g 12 | -------------------------------------------------------------------------------- /test/cmd/cms/testdata/studentcards.json: -------------------------------------------------------------------------------- 1 | [ 2 | { 3 | "userid":"100", 4 | "vcmetadata":{ 5 | "name":"Student Card", 6 | "description":"Student Card for Mr.Foo" 7 | }, 8 | "studentid":"1234568", 9 | "name":"John", 10 | "email":"john.smith@example.com", 11 | "university":"Faber College", 12 | "semester":"3", 13 | "type":"StudentCard" 14 | } 15 | ] -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/overlays/common/sedb64transform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedB64Transformer 9 | metadata: 10 | name: sedb64transformer 11 | argsOneLiner: s^||MONGODB_URL||^${MONGODB_URL}^ s^||GK_REQUEST_TOKENS||^${GK_REQUEST_TOKENS}^ 12 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/common/sedb64transform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedB64Transformer 9 | metadata: 10 | name: sedb64transformer 11 | argsOneLiner: s^||MONGODB_DSN||^${MONGODB_DSN}^ s^||COMPARATOR_REQUEST_TOKENS||^${COMPARATOR_REQUEST_TOKENS}^ 12 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/overlays/common/sedtransform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedTransformer 9 | metadata: 10 | name: sedtransformer 11 | argsOneLiner: s^||DOMAIN||^${DOMAIN}^g s^||DEPLOYMENT_ENV||^${DEPLOYMENT_ENV}^g s^||BLOC_DOMAIN||^${BLOC_DOMAIN}^g 12 | -------------------------------------------------------------------------------- /k8s/demo-dbs/kustomize/demo-dbs/components/postgres/configure_postgres.sql: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | CREATE USER loginconsent with encrypted password 'loginconsent-secret-pw'; 8 | CREATE DATABASE loginconsent; 9 | 10 | CREATE USER strapi with encrypted password 'strapi-secret-pw'; 11 | CREATE DATABASE strapi; 12 | -------------------------------------------------------------------------------- /k8s/demo-dbs/kustomize/demo-dbs/components/mongodb/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: kustomize.config.k8s.io/v1alpha1 8 | kind: Component 9 | images: 10 | - name: mongo 11 | newName: docker.io/mongo 12 | newTag: "4.0" 13 | 14 | resources: 15 | - deployment.yml 16 | - service.yml 17 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/common/login-consent/login-consent.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # Copyright Gen Digital Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | ADMIN_URL=https://hydra-admin.||DOMAIN|| 9 | TLS_SYSTEMCERTPOOL=true 10 | CLAIMS_CONFIG_FILE_PATH=/etc/login-consent/config/claims-config.json 11 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/components/hydra/hydra-env.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | URLS_LOGIN=https:// 8 | URLS_CONSENT=https:// 9 | URLS_SELF_ISSUER=http:// 10 | SERVE_ADMIN_PORT="4445" 11 | SERVE_PUBLIC_PORT="4444" 12 | OIDC_SUBJECT_TYPES_SUPPORTED=public 13 | SERVE_TLS_ALLOW_TERMINATION_FROM="10.0.0.0/8" 14 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/components/strapi/secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | DATABASE_CLIENT=||DATABASE_CLIENT|| 8 | DATABASE_HOST=||DATABASE_HOST|| 9 | DATABASE_PORT="||DATABASE_PORT||" 10 | DATABASE_NAME=||DATABASE_NAME|| 11 | DATABASE_USERNAME=||DATABASE_USERNAME|| 12 | DATABASE_PASSWORD=||DATABASE_PASSWORD|| 13 | SERVE_PORT=1337 14 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/common/cbp/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | COMPARATOR_DID_DOMAIN=||BLOC_DOMAIN|| 8 | COMPARATOR_CSH_URL=https://csh.||DOMAIN|| 9 | COMPARATOR_VAULT_URL=https://vault-server.||DOMAIN|| 10 | COMPARATOR_TLS_SYSTEMCERTPOOL=true 11 | COMPARATOR_DID_ANCHOR_ORIGIN=https://orb-2.||DOMAIN|| 12 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/common/ucis/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | COMPARATOR_DID_DOMAIN=||BLOC_DOMAIN|| 8 | COMPARATOR_CSH_URL=https://csh.||DOMAIN|| 9 | COMPARATOR_VAULT_URL=https://vault-server.||DOMAIN|| 10 | COMPARATOR_TLS_SYSTEMCERTPOOL=true 11 | COMPARATOR_DID_ANCHOR_ORIGIN=https://orb-2.||DOMAIN|| 12 | -------------------------------------------------------------------------------- /test/cmd/cms/testdata/travelcards.json: -------------------------------------------------------------------------------- 1 | [ 2 | { 3 | "userid":"100", 4 | "vcmetadata":{ 5 | "name":"Travel Card", 6 | "description":"Travel Card for Mr.John" 7 | }, 8 | "travelcardid":"123-456-765", 9 | "name":"John", 10 | "sex":"M", 11 | "country":"Canada", 12 | "dob":"12-06-1989", 13 | "issuedate":"01-06-2018", 14 | "cardexpires":"01-06-2023", 15 | "type":"TravelCard" 16 | } 17 | ] -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/common/benefits-dept/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | COMPARATOR_DID_DOMAIN=||BLOC_DOMAIN|| 8 | COMPARATOR_CSH_URL=https://csh.||DOMAIN|| 9 | COMPARATOR_VAULT_URL=https://vault-server.||DOMAIN|| 10 | COMPARATOR_TLS_SYSTEMCERTPOOL=true 11 | COMPARATOR_DID_ANCHOR_ORIGIN=https://orb-2.||DOMAIN|| 12 | -------------------------------------------------------------------------------- /test/cmd/cms/testdata/transcripts.json: -------------------------------------------------------------------------------- 1 | [ 2 | { 3 | "userid":"100", 4 | "vcmetadata":{ 5 | "name":"Degree Transcript", 6 | "description":"Degree Transcript for Mr.John" 7 | }, 8 | "studentid":"323456898", 9 | "name":"John", 10 | "university":"Faber College", 11 | "status":"graduated", 12 | "totalcredits":"100", 13 | "course":"Bachelors in Computing Science", 14 | "type":"Transcript" 15 | } 16 | ] -------------------------------------------------------------------------------- /k8s/jobs/kustomize/jobs/overlays/common/rp/rolebinding.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: rbac.authorization.k8s.io/v1 9 | kind: RoleBinding 10 | metadata: 11 | name: rp 12 | roleRef: 13 | apiGroup: rbac.authorization.k8s.io 14 | kind: Role 15 | name: rp 16 | subjects: 17 | - kind: ServiceAccount 18 | name: default 19 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/local/ace-rp/cbp/replacements.yml: -------------------------------------------------------------------------------- 1 | source: 2 | kind: Service 3 | name: cbp-rp 4 | version: v1 5 | targets: 6 | - fieldPaths: 7 | - spec.tls.0.hosts.0 8 | - spec.rules.0.host 9 | options: 10 | delimiter: . 11 | select: 12 | kind: Ingress 13 | name: cbp-ace-rp 14 | - fieldPaths: 15 | - spec.rules.0.http.paths.0.backend.service.name 16 | select: 17 | kind: Ingress 18 | name: cbp-ace-rp 19 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/local/hydra/replacements.yml: -------------------------------------------------------------------------------- 1 | source: 2 | kind: Service 3 | name: hydra 4 | version: v1 5 | targets: 6 | - fieldPaths: 7 | - spec.tls.0.hosts.0 8 | - spec.rules.0.host 9 | options: 10 | delimiter: . 11 | select: 12 | kind: Ingress 13 | name: hydra 14 | - fieldPaths: 15 | - spec.rules.0.http.paths.0.backend.service.name 16 | select: 17 | kind: Ingress 18 | name: hydra 19 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/local/ace-rp/ucis/replacements.yml: -------------------------------------------------------------------------------- 1 | source: 2 | kind: Service 3 | name: ucis-rp 4 | version: v1 5 | targets: 6 | - fieldPaths: 7 | - spec.tls.0.hosts.0 8 | - spec.rules.0.host 9 | options: 10 | delimiter: . 11 | select: 12 | kind: Ingress 13 | name: ucis-ace-rp 14 | - fieldPaths: 15 | - spec.rules.0.http.paths.0.backend.service.name 16 | select: 17 | kind: Ingress 18 | name: ucis-ace-rp 19 | -------------------------------------------------------------------------------- /k8s/jobs/kustomize/jobs/overlays/common/issuer/rolebinding.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: rbac.authorization.k8s.io/v1 9 | kind: RoleBinding 10 | metadata: 11 | name: issuer 12 | roleRef: 13 | apiGroup: rbac.authorization.k8s.io 14 | kind: Role 15 | name: issuer 16 | subjects: 17 | - kind: ServiceAccount 18 | name: default 19 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/overlays/common/oathkeeper/rolebinding.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: rbac.authorization.k8s.io/v1 9 | kind: RoleBinding 10 | metadata: 11 | name: oathkeeper 12 | roleRef: 13 | apiGroup: rbac.authorization.k8s.io 14 | kind: Role 15 | name: oathkeeper 16 | subjects: 17 | - kind: ServiceAccount 18 | name: default 19 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/base/service.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: v1 9 | kind: Service 10 | metadata: 11 | creationTimestamp: null 12 | name: verifier 13 | spec: 14 | ports: 15 | - name: http 16 | port: 80 17 | protocol: TCP 18 | targetPort: http-port 19 | selector: 20 | app: rp 21 | status: 22 | loadBalancer: {} 23 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/base/service.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: v1 9 | kind: Service 10 | metadata: 11 | creationTimestamp: null 12 | name: rp 13 | spec: 14 | ports: 15 | - name: http 16 | port: 80 17 | protocol: TCP 18 | targetPort: http-port 19 | selector: 20 | app: ace-rp 21 | status: 22 | loadBalancer: {} 23 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/overlays/common/oathkeeper/role.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: rbac.authorization.k8s.io/v1 9 | kind: Role 10 | metadata: 11 | name: oathkeeper 12 | rules: 13 | - apiGroups: 14 | - "" 15 | resources: 16 | - configmaps 17 | verbs: 18 | - create 19 | - get 20 | - list 21 | - update 22 | - patch 23 | - watch 24 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/issuer/base/service.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: v1 9 | kind: Service 10 | metadata: 11 | creationTimestamp: null 12 | name: issuer 13 | spec: 14 | ports: 15 | - name: http 16 | port: 80 17 | protocol: TCP 18 | targetPort: http-port 19 | selector: 20 | app: issuer 21 | status: 22 | loadBalancer: {} 23 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/overlays/local/oathkeeper/replacements.yml: -------------------------------------------------------------------------------- 1 | source: 2 | kind: Service 3 | name: oathkeeper-proxy 4 | version: v1 5 | targets: 6 | - fieldPaths: 7 | - spec.tls.0.hosts.0 8 | - spec.rules.0.host 9 | options: 10 | delimiter: . 11 | select: 12 | kind: Ingress 13 | name: oathkeeper-proxy 14 | - fieldPaths: 15 | - spec.rules.0.http.paths.0.backend.service.name 16 | select: 17 | kind: Ingress 18 | name: oathkeeper-proxy 19 | -------------------------------------------------------------------------------- /k8s/gatekeeper/README.md: -------------------------------------------------------------------------------- 1 | # [Gatekeeper](https://github.com/trustbloc/ace#gatekeeper) k8s deployment 2 | 3 | ## Prerequisites 4 | * [Minikube](https://minikube.sigs.k8s.io/docs/start/) with ingress addon. 5 | * GNU sed 6 | * (Optional: Gets installed by make) [kustomize](https://kubectl.docs.kubernetes.io/installation/kustomize/). 7 | 8 | ## Quick Run 9 | * `make all` 10 | * `make deploy-gatekeeper` 11 | 12 | ## Cleanup 13 | * `make undeploy-gatekeeper` 14 | * `make clean` 15 | -------------------------------------------------------------------------------- /k8s/jobs/README.md: -------------------------------------------------------------------------------- 1 | # [TrustBloc Sandbox Shared DBs]() k8s deployment # 2 | 3 | 4 | ## pre-requisits 5 | * [Minikube](https://minikube.sigs.k8s.io/docs/start/). 6 | * (Optional: Gets installed by make) [kustomize](https://kubectl.docs.kubernetes.io/installation/kustomize/). 7 | 8 | ## Quick Run 9 | * `make all` 10 | * `make deploy-sandbox` 11 | 12 | ## Cleanup 13 | * `make undeploy-sandbox` 14 | * `make clean` 15 | 16 | ## options and features 17 | * Will deploy Sandbox. 18 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/components/strapi/service.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: v1 9 | kind: Service 10 | metadata: 11 | creationTimestamp: null 12 | name: strapi 13 | spec: 14 | ports: 15 | - name: http 16 | port: 80 17 | protocol: TCP 18 | targetPort: http-port 19 | selector: 20 | app: strapi 21 | status: 22 | loadBalancer: {} 23 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/local/hydra-admin/replacements.yml: -------------------------------------------------------------------------------- 1 | source: 2 | kind: Service 3 | name: hydra-admin 4 | version: v1 5 | targets: 6 | - fieldPaths: 7 | - spec.tls.0.hosts.0 8 | - spec.rules.0.host 9 | options: 10 | delimiter: . 11 | select: 12 | kind: Ingress 13 | name: hydra-admin 14 | - fieldPaths: 15 | - spec.rules.0.http.paths.0.backend.service.name 16 | select: 17 | kind: Ingress 18 | name: hydra-admin 19 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/cbp/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: kustomize.config.k8s.io/v1beta1 8 | kind: Kustomization 9 | 10 | commonLabels: 11 | component: cbp-rp 12 | 13 | configMapGenerator: 14 | - envs: 15 | - config.env 16 | behavior: merge 17 | name: ace-rp-env 18 | 19 | namePrefix: cbp- 20 | 21 | resources: 22 | - ../../base 23 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/ucis/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: kustomize.config.k8s.io/v1beta1 8 | kind: Kustomization 9 | 10 | commonLabels: 11 | component: ucis-rp 12 | 13 | configMapGenerator: 14 | - envs: 15 | - config.env 16 | behavior: merge 17 | name: ace-rp-env 18 | 19 | namePrefix: ucis- 20 | 21 | resources: 22 | - ../../base 23 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/local/comparator/cbp/replacements.yml: -------------------------------------------------------------------------------- 1 | source: 2 | kind: Service 3 | name: cbp-comparator 4 | version: v1 5 | targets: 6 | - fieldPaths: 7 | - spec.tls.0.hosts.0 8 | - spec.rules.0.host 9 | options: 10 | delimiter: . 11 | select: 12 | kind: Ingress 13 | name: cbp-comparator 14 | - fieldPaths: 15 | - spec.rules.0.http.paths.0.backend.service.name 16 | select: 17 | kind: Ingress 18 | name: cbp-comparator 19 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/base/service.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: v1 9 | kind: Service 10 | metadata: 11 | creationTimestamp: null 12 | name: gatekeeper 13 | spec: 14 | ports: 15 | - name: http 16 | port: 80 17 | protocol: TCP 18 | targetPort: http-port 19 | selector: 20 | app: gatekeeper 21 | status: 22 | loadBalancer: {} 23 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/local/login-consent/replacements.yml: -------------------------------------------------------------------------------- 1 | source: 2 | kind: Service 3 | name: login-consent 4 | version: v1 5 | targets: 6 | - fieldPaths: 7 | - spec.tls.0.hosts.0 8 | - spec.rules.0.host 9 | options: 10 | delimiter: . 11 | select: 12 | kind: Ingress 13 | name: login-consent 14 | - fieldPaths: 15 | - spec.rules.0.http.paths.0.backend.service.name 16 | select: 17 | kind: Ingress 18 | name: login-consent 19 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/local/comparator/ucis/replacements.yml: -------------------------------------------------------------------------------- 1 | source: 2 | kind: Service 3 | name: ucis-comparator 4 | version: v1 5 | targets: 6 | - fieldPaths: 7 | - spec.tls.0.hosts.0 8 | - spec.rules.0.host 9 | options: 10 | delimiter: . 11 | select: 12 | kind: Ingress 13 | name: ucis-comparator 14 | - fieldPaths: 15 | - spec.rules.0.http.paths.0.backend.service.name 16 | select: 17 | kind: Ingress 18 | name: ucis-comparator 19 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/overlays/common/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | GK_BLOC_DOMAIN=||BLOC_DOMAIN|| 8 | GK_DID_ANCHOR_ORIGIN=https://orb-2.||DOMAIN|| 9 | GK_VAULT_SERVER_URL=https://vault-server.||DOMAIN|| 10 | GK_CSH_URL=https://csh.||DOMAIN|| 11 | GK_VC_ISSUER_URL=https://issuer-vcs.||DOMAIN|| 12 | GK_VC_ISSUER_PROFILE=vc-issuer-gk 13 | GK_TLS_SYSTEMCERTPOOL=true 14 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/issuer/base/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ISSUER_HOST_URL=0.0.0.0:8081 8 | DATABASE_PREFIX=test 9 | ISSUER_VCS_URL=http:// 10 | ISSUER_CMS_URL=http:// 11 | ISSUER_ADAPTER_URL=http:// 12 | OAUTH2_ENDPOINT_AUTH_URL=http:// 13 | OAUTH2_ENDPOINT_TOKEN_URL=http:// 14 | OAUTH2_ISSUER_CLIENT_REDIRECT_URL=http:// 15 | OAUTH2_ENDPOINT_TOKEN_INTROSPECTION_URL=http:// -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/local/ace-rp/benefits-dept/replacements.yml: -------------------------------------------------------------------------------- 1 | source: 2 | kind: Service 3 | name: benefits-dept-rp 4 | version: v1 5 | targets: 6 | - fieldPaths: 7 | - spec.tls.0.hosts.0 8 | - spec.rules.0.host 9 | options: 10 | delimiter: . 11 | select: 12 | kind: Ingress 13 | name: benefits-dept-ace-rp 14 | - fieldPaths: 15 | - spec.rules.0.http.paths.0.backend.service.name 16 | select: 17 | kind: Ingress 18 | name: benefits-dept-ace-rp 19 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/base/comparator/service.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: v1 9 | kind: Service 10 | metadata: 11 | creationTimestamp: null 12 | name: comparator 13 | spec: 14 | ports: 15 | - name: http 16 | port: 80 17 | protocol: TCP 18 | targetPort: http-port 19 | selector: 20 | app: comparator 21 | status: 22 | loadBalancer: {} 23 | -------------------------------------------------------------------------------- /test/bdd/issuer/features/issuer_pre_authorize.feature: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | @all 8 | @issuer 9 | Feature: Issuer Pre-Authorize 10 | @issuer_pre_authorize_e2e 11 | Scenario: Execute PreAuthorize flow 12 | Given User wants to receive credentials with format "jwt_vc" and type "VerifiedEmployee" 13 | When User request issuer to start pre-authorization flow 14 | Then no error is occurred -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/cbp/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: kustomize.config.k8s.io/v1beta1 8 | kind: Kustomization 9 | 10 | commonLabels: 11 | component: cbp-comparator 12 | 13 | configMapGenerator: 14 | - envs: 15 | - config.env 16 | behavior: merge 17 | name: comparator-env 18 | 19 | namePrefix: cbp- 20 | 21 | resources: 22 | - ../../base 23 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/ucis/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: kustomize.config.k8s.io/v1beta1 8 | kind: Kustomization 9 | 10 | commonLabels: 11 | component: ucis-comparator 12 | 13 | configMapGenerator: 14 | - envs: 15 | - config.env 16 | behavior: merge 17 | name: comparator-env 18 | 19 | namePrefix: ucis- 20 | 21 | resources: 22 | - ../../base 23 | -------------------------------------------------------------------------------- /k8s/demo-dbs/README.md: -------------------------------------------------------------------------------- 1 | # [TrustBloc Sandbox Shared DBs]() k8s deployment # 2 | 3 | 4 | ## pre-requisits 5 | * [Minikube](https://minikube.sigs.k8s.io/docs/start/). 6 | * (Optional: Gets installed by make) [kustomize](https://kubectl.docs.kubernetes.io/installation/kustomize/). 7 | 8 | ## Quick Run 9 | * `make all` 10 | * `make deploy-sandbox` 11 | 12 | ## Cleanup 13 | * `make undeploy-sandbox` 14 | * `make clean` 15 | 16 | ## options and features 17 | * Will deploy Sandbox MongoDB and PostgresSQL. 18 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/benefits-dept/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: kustomize.config.k8s.io/v1beta1 8 | kind: Kustomization 9 | 10 | commonLabels: 11 | component: benefits-dept-rp 12 | 13 | configMapGenerator: 14 | - envs: 15 | - config.env 16 | behavior: merge 17 | name: ace-rp-env 18 | 19 | namePrefix: benefits-dept- 20 | 21 | resources: 22 | - ../../base 23 | -------------------------------------------------------------------------------- /test/ui-automation/test/helpers/index.js: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | 'use strict'; 8 | 9 | const chapi = require('./chapi'); 10 | const wallet = require('./wallet'); 11 | const issuer = require('./issuer'); 12 | const verifier = require('./verifier'); 13 | 14 | const api = {}; 15 | module.exports = api; 16 | 17 | api.chapi = chapi; 18 | api.wallet = wallet; 19 | api.issuer = issuer; 20 | api.verifier = verifier; 21 | -------------------------------------------------------------------------------- /k8s/demo-dbs/kustomize/demo-dbs/components/mongodb/service.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: v1 9 | kind: Service 10 | metadata: 11 | creationTimestamp: null 12 | name: mongodb-demo 13 | spec: 14 | ports: 15 | - name: mongodb-port 16 | port: 27017 17 | protocol: TCP 18 | targetPort: mongodb-port 19 | selector: 20 | app: mongodb-demo 21 | status: 22 | loadBalancer: {} 23 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/plugin/svceng/sedtransformer/SedTransformer: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # https://github.com/kubernetes-sigs/kustomize/blob/master/plugin/someteam.example.com/v1/sedtransformer/SedTransformer 9 | # Skip the config file name argument. 10 | shift 11 | args=() 12 | for arg in "$@"; do 13 | env_expanded=${arg@P} 14 | args+=(-e "$env_expanded") 15 | done 16 | 17 | sed "${args[@]}" 18 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/local/comparator/benefits-dept/replacements.yml: -------------------------------------------------------------------------------- 1 | source: 2 | kind: Service 3 | name: benefits-dept-comparator 4 | version: v1 5 | targets: 6 | - fieldPaths: 7 | - spec.tls.0.hosts.0 8 | - spec.rules.0.host 9 | options: 10 | delimiter: . 11 | select: 12 | kind: Ingress 13 | name: benefits-dept-comparator 14 | - fieldPaths: 15 | - spec.rules.0.http.paths.0.backend.service.name 16 | select: 17 | kind: Ingress 18 | name: benefits-dept-comparator 19 | -------------------------------------------------------------------------------- /k8s/demo-dbs/kustomize/demo-dbs/components/postgres/service.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: v1 9 | kind: Service 10 | metadata: 11 | creationTimestamp: null 12 | name: postgres-demo 13 | spec: 14 | ports: 15 | - name: postgres-port 16 | port: 5432 17 | protocol: TCP 18 | targetPort: postgres-port 19 | selector: 20 | app: postgres-demo 21 | status: 22 | loadBalancer: {} 23 | -------------------------------------------------------------------------------- /k8s/jobs/kustomize/plugin/svceng/sedtransformer/SedTransformer: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # https://github.com/kubernetes-sigs/kustomize/blob/master/plugin/someteam.example.com/v1/sedtransformer/SedTransformer 9 | # Skip the config file name argument. 10 | shift 11 | args=() 12 | for arg in "$@"; do 13 | env_expanded=${arg@P} 14 | args+=(-e "$env_expanded") 15 | done 16 | 17 | sed "${args[@]}" 18 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/plugin/svceng/sedtransformer/SedTransformer: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # https://github.com/kubernetes-sigs/kustomize/blob/master/plugin/someteam.example.com/v1/sedtransformer/SedTransformer 9 | # Skip the config file name argument. 10 | shift 11 | args=() 12 | for arg in "$@"; do 13 | env_expanded=${arg@P} 14 | args+=(-e "$env_expanded") 15 | done 16 | 17 | sed "${args[@]}" 18 | -------------------------------------------------------------------------------- /cmd/login-consent-server-vue/README.md: -------------------------------------------------------------------------------- 1 | # login-consent-server-vue 2 | 3 | Frontend for the login-consent server. 4 | 5 | ## Project setup 6 | ``` 7 | npm install 8 | ``` 9 | 10 | ### Compiles and hot-reloads for development 11 | ``` 12 | npm run serve 13 | ``` 14 | 15 | ### Compiles and minifies for production 16 | ``` 17 | npm run build 18 | ``` 19 | 20 | ### Lints and fixes files 21 | ``` 22 | npm run lint 23 | ``` 24 | 25 | ### Customize configuration 26 | See [Configuration Reference](https://cli.vuejs.org/config/). 27 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/plugin/svceng/sedtransformer/SedTransformer: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # https://github.com/kubernetes-sigs/kustomize/blob/master/plugin/someteam.example.com/v1/sedtransformer/SedTransformer 9 | # Skip the config file name argument. 10 | shift 11 | args=() 12 | for arg in "$@"; do 13 | env_expanded=${arg@P} 14 | args+=(-e "$env_expanded") 15 | done 16 | 17 | sed "${args[@]}" 18 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/plugin/svceng/sedtransformer/SedTransformer: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # https://github.com/kubernetes-sigs/kustomize/blob/master/plugin/someteam.example.com/v1/sedtransformer/SedTransformer 9 | # Skip the config file name argument. 10 | shift 11 | args=() 12 | for arg in "$@"; do 13 | env_expanded=${arg@P} 14 | args+=(-e "$env_expanded") 15 | done 16 | 17 | sed "${args[@]}" 18 | -------------------------------------------------------------------------------- /k8s/demo-dbs/kustomize/demo-dbs/components/postgres/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: kustomize.config.k8s.io/v1alpha1 8 | kind: Component 9 | images: 10 | - name: postgres 11 | newName: docker.io/postgres 12 | newTag: "13" 13 | 14 | configMapGenerator: 15 | - files: 16 | - configure_postgres.sql 17 | name: postgres-configure 18 | 19 | resources: 20 | - deployment.yml 21 | - service.yml 22 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/plugin/svceng/sedtransformer/SedTransformer: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # https://github.com/kubernetes-sigs/kustomize/blob/master/plugin/someteam.example.com/v1/sedtransformer/SedTransformer 9 | # Skip the config file name argument. 10 | shift 11 | args=() 12 | for arg in "$@"; do 13 | env_expanded=${arg@P} 14 | args+=(-e "$env_expanded") 15 | done 16 | 17 | sed "${args[@]}" 18 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/plugin/svceng/sedtransformer/SedTransformer: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # https://github.com/kubernetes-sigs/kustomize/blob/master/plugin/someteam.example.com/v1/sedtransformer/SedTransformer 9 | # Skip the config file name argument. 10 | shift 11 | args=() 12 | for arg in "$@"; do 13 | env_expanded=${arg@P} 14 | args+=(-e "$env_expanded") 15 | done 16 | 17 | sed "${args[@]}" 18 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/benefits-dept/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: kustomize.config.k8s.io/v1beta1 8 | kind: Kustomization 9 | 10 | commonLabels: 11 | component: benefits-dept-comparator 12 | 13 | configMapGenerator: 14 | - envs: 15 | - config.env 16 | behavior: merge 17 | name: comparator-env 18 | 19 | namePrefix: benefits-dept- 20 | 21 | resources: 22 | - ../../base 23 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/plugin/svceng/sedtransformer/SedTransformer: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # https://github.com/kubernetes-sigs/kustomize/blob/master/plugin/someteam.example.com/v1/sedtransformer/SedTransformer 9 | # Skip the config file name argument. 10 | shift 11 | args=() 12 | for arg in "$@"; do 13 | env_expanded=${arg@P} 14 | args+=(-e "$env_expanded") 15 | done 16 | 17 | sed "${args[@]}" 18 | -------------------------------------------------------------------------------- /pkg/restapi/healthcheck/controller_test.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | SPDX-License-Identifier: Apache-2.0 4 | */ 5 | 6 | package healthcheck 7 | 8 | import ( 9 | "testing" 10 | 11 | "github.com/stretchr/testify/require" 12 | ) 13 | 14 | func TestController_New(t *testing.T) { 15 | t.Run("test success", func(t *testing.T) { 16 | controller := New() 17 | require.NotNil(t, controller) 18 | ops := controller.GetOperations() 19 | 20 | require.Equal(t, 1, len(ops)) 21 | }) 22 | } 23 | -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | # Binaries for programs and plugins 8 | *.exe 9 | *.exe~ 10 | *.dll 11 | *.so 12 | *.dylib 13 | 14 | # Editor and go temporary files & folders 15 | .swp 16 | vendor 17 | 18 | # Test binary, build with `go test -c` 19 | *.test 20 | 21 | # Output of the go coverage tool, specifically when used with LiteIDE 22 | *.out 23 | .idea 24 | .DS_Store 25 | .vscode/ 26 | 27 | coverage.out 28 | 29 | .build 30 | -------------------------------------------------------------------------------- /test/bdd/ace/pkg/gatekeeper/models.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | package gatekeeper 8 | 9 | type protectRequest struct { 10 | Policy string `json:"policy"` 11 | Target string `json:"target"` 12 | } 13 | 14 | type protectResponse struct { 15 | DID string `json:"did"` 16 | } 17 | 18 | type releaseRequest struct { 19 | DID string `json:"did"` 20 | } 21 | 22 | type releaseResponse struct { 23 | TicketID string `json:"ticket_id"` 24 | } 25 | -------------------------------------------------------------------------------- /test/cmd/cms/testdata/mdlevidences.json: -------------------------------------------------------------------------------- 1 | [ 2 | { 3 | "userid":"100", 4 | "vcmetadata":{ 5 | "@context":[ 6 | "https://www.w3.org/2018/credentials/v1", 7 | "https://trustbloc.github.io/context/vc/examples/booking-ref-v1.jsonld" 8 | ], 9 | "name":"Taylor Flights Booking Reference", 10 | "description":"Booking Reference for Mr.Louis Pasteur" 11 | }, 12 | "vccredentialsubject":{ 13 | "referenceNumber":"K1J 3XA", 14 | "issuedBy":"Taylor Chartered Flights" 15 | } 16 | } 17 | ] -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/overlays/common/sedb64transform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedB64Transformer 9 | metadata: 10 | name: sedb64transformer 11 | argsOneLiner: s^||DATABASE_USERNAME||^${DATABASE_USERNAME}^ s^||DATABASE_PASSWORD||^${DATABASE_PASSWORD}^ s^||DATABASE_CLIENT||^${DATABASE_CLIENT}^ s^||DATABASE_HOST||^${DATABASE_HOST}^ s^||DATABASE_PORT||^${DATABASE_PORT}^ s^||DATABASE_NAME||^${DATABASE_NAME}^ 12 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/overlays/local/sedb64transform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedB64Transformer 9 | metadata: 10 | name: sedb64transformer 11 | argsOneLiner: s^||DATABASE_USERNAME||^${DATABASE_USERNAME}^ s^||DATABASE_PASSWORD||^${DATABASE_PASSWORD}^ s^||DATABASE_CLIENT||^${DATABASE_CLIENT}^ s^||DATABASE_HOST||^${DATABASE_HOST}^ s^||DATABASE_PORT||^${DATABASE_PORT}^ s^||DATABASE_NAME||^${DATABASE_NAME}^ 12 | -------------------------------------------------------------------------------- /test/cmd/cms/testdata/boardingpasses.json: -------------------------------------------------------------------------------- 1 | [ 2 | { 3 | "userid":"100", 4 | "vcmetadata":{ 5 | "@context":[ 6 | "https://www.w3.org/2018/credentials/v1", 7 | "https://trustbloc.github.io/context/vc/examples/booking-ref-v1.jsonld" 8 | ], 9 | "name":"Taylor Flights Booking Reference", 10 | "description":"Booking Reference for Mr.Louis Pasteur" 11 | }, 12 | "vccredentialsubject":{ 13 | "referenceNumber":"K1J 3XA", 14 | "issuedBy":"Taylor Chartered Flights" 15 | } 16 | } 17 | ] -------------------------------------------------------------------------------- /test/cmd/cms/testdata/creditscores.json: -------------------------------------------------------------------------------- 1 | [ 2 | { 3 | "userid":"100", 4 | "metadata":{ 5 | "contexts":[ 6 | "https://trustbloc.github.io/context/vc/examples/credit-score-v1.jsonld" 7 | ], 8 | "scopes":[ 9 | "CreditScore" 10 | ] 11 | }, 12 | "data":{ 13 | "family_name":"Smith", 14 | "given_name":"John", 15 | "birthdate":"1990-01-01", 16 | "address":"4726 Pine Street, Toronto - A1B 2C3", 17 | "report_date":"2020-08-14", 18 | "score":"737" 19 | } 20 | } 21 | ] -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/overlays/local/rp/add-ca.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: apps/v1 8 | kind: Deployment 9 | metadata: 10 | name: rp 11 | spec: 12 | template: 13 | spec: 14 | volumes: 15 | - name: ca-cert 16 | configMap: 17 | name: demo-ca-cert 18 | containers: 19 | - name: rp 20 | volumeMounts: 21 | - name: ca-cert 22 | mountPath: /etc/rp/tls 23 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/components/oathkeeper/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: kustomize.config.k8s.io/v1alpha1 8 | kind: Component 9 | images: 10 | - name: oathkeeper 11 | newName: oryd/oathkeeper 12 | newTag: v0.38.15-alpine 13 | 14 | configMapGenerator: 15 | - files: 16 | - config.yml 17 | name: oathkeeper-config 18 | - files: 19 | - access-rules.json 20 | name: oathkeeper-rules 21 | 22 | resources: 23 | - oathkeeper.yml 24 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/issuer/overlays/local/issuer/add-ca.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: apps/v1 8 | kind: Deployment 9 | metadata: 10 | name: issuer 11 | spec: 12 | template: 13 | spec: 14 | volumes: 15 | - name: ca-cert 16 | configMap: 17 | name: demo-ca-cert 18 | containers: 19 | - name: issuer 20 | volumeMounts: 21 | - name: ca-cert 22 | mountPath: /etc/issuer/tls 23 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/components/hydra/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: kustomize.config.k8s.io/v1alpha1 8 | kind: Component 9 | images: 10 | - name: hydra 11 | newName: oryd/hydra 12 | newTag: v1.3.2-alpine 13 | 14 | secretGenerator: 15 | - envs: 16 | - hydra-secret.env 17 | name: hydra-secret 18 | 19 | configMapGenerator: 20 | - envs: 21 | - hydra-env.env 22 | name: hydra-env 23 | 24 | resources: 25 | - hydra.yml 26 | -------------------------------------------------------------------------------- /k8s/scripts/ci_minikube_setup.sh: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | set -e 8 | 9 | # Set default values, which may be overriden by the environment variables 10 | : ${DOMAIN:=trustbloc.dev} 11 | 12 | source ./coredns_patch.sh 13 | 14 | echo 'updating entries in /etc/hosts' 15 | echo '=========================== CUT ==========================' 16 | generate_host_entries | sudo tee -a /etc/hosts 17 | echo '=========================== CUT ==========================' 18 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/issuer/overlays/common/sedb64transform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedB64Transformer 9 | metadata: 10 | name: sedb64transformer 11 | argsOneLiner: s^||MONGODB_URL||^${MONGODB_URL}^ s^||EXTERNAL_API_CLIENTID||^${EXTERNAL_API_CLIENTID}^ s^||EXTERNAL_API_CLIENTSECRET||^${EXTERNAL_API_CLIENTSECRET}^ s^||OAUTH2_EXTERNAL_CLIENT_ID||^${OAUTH2_EXTERNAL_CLIENT_ID}^ s^||OAUTH2_EXTERNAL_CLIENT_SECRET||^${OAUTH2_EXTERNAL_CLIENT_SECRET}^ -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/local/ace-rp/cbp/add-ca.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: apps/v1 8 | kind: Deployment 9 | metadata: 10 | name: cbp-ace-rp 11 | spec: 12 | template: 13 | spec: 14 | volumes: 15 | - name: ca-cert 16 | configMap: 17 | name: demo-ca-cert 18 | containers: 19 | - name: ace-rp 20 | volumeMounts: 21 | - name: ca-cert 22 | mountPath: /etc/ace-rp/tls 23 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/local/ace-rp/ucis/add-ca.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: apps/v1 8 | kind: Deployment 9 | metadata: 10 | name: ucis-ace-rp 11 | spec: 12 | template: 13 | spec: 14 | volumes: 15 | - name: ca-cert 16 | configMap: 17 | name: demo-ca-cert 18 | containers: 19 | - name: ace-rp 20 | volumeMounts: 21 | - name: ca-cert 22 | mountPath: /etc/ace-rp/tls 23 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/issuer/overlays/common/secret.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | DATABASE_URL=||MONGODB_URL|| 8 | ISSUER_REQUEST_TOKENS=vcs_issuer=vcs_issuer_rw_token 9 | OAUTH2_ISSUER_CLIENT_ID=auth-code-client 10 | OAUTH2_ISSUER_CLIENT_SECRET=secret 11 | EXTERNAL_API_CLIENTID=||EXTERNAL_API_CLIENTID|| 12 | EXTERNAL_API_CLIENTSECRET=||EXTERNAL_API_CLIENTSECRET|| 13 | OAUTH2_EXTERNAL_CLIENT_ID=||OAUTH2_EXTERNAL_CLIENT_ID|| 14 | OAUTH2_EXTERNAL_CLIENT_SECRET=||OAUTH2_EXTERNAL_CLIENT_SECRET|| -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/local/ace-rp/benefits-dept/add-ca.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: apps/v1 8 | kind: Deployment 9 | metadata: 10 | name: benefits-dept-ace-rp 11 | spec: 12 | template: 13 | spec: 14 | volumes: 15 | - name: ca-cert 16 | configMap: 17 | name: demo-ca-cert 18 | containers: 19 | - name: ace-rp 20 | volumeMounts: 21 | - name: ca-cert 22 | mountPath: /etc/ace-rp/tls 23 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/overlays/local/gatekeeper/add-ca.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: apps/v1 8 | kind: Deployment 9 | metadata: 10 | name: gatekeeper 11 | spec: 12 | template: 13 | spec: 14 | volumes: 15 | - name: ca-cert 16 | configMap: 17 | name: gatekeeper-ca-cert 18 | containers: 19 | - name: gatekeeper 20 | volumeMounts: 21 | - name: ca-cert 22 | mountPath: /etc/gatekeeper/tls 23 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/local/comparator/cbp/add-ca.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: apps/v1 8 | kind: Deployment 9 | metadata: 10 | name: cbp-comparator 11 | spec: 12 | template: 13 | spec: 14 | volumes: 15 | - name: ca-cert 16 | configMap: 17 | name: comparator-ca-cert 18 | containers: 19 | - name: comparator 20 | volumeMounts: 21 | - name: ca-cert 22 | mountPath: /etc/comparator/tls 23 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/local/comparator/ucis/add-ca.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: apps/v1 8 | kind: Deployment 9 | metadata: 10 | name: ucis-comparator 11 | spec: 12 | template: 13 | spec: 14 | volumes: 15 | - name: ca-cert 16 | configMap: 17 | name: comparator-ca-cert 18 | containers: 19 | - name: comparator 20 | volumeMounts: 21 | - name: ca-cert 22 | mountPath: /etc/comparator/tls 23 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/issuer/overlays/common/sedtransform.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: svceng 8 | kind: SedTransformer 9 | metadata: 10 | name: sedtransformer 11 | argsOneLiner: s^||DOMAIN||^${DOMAIN}^g s^||DEPLOYMENT_ENV||^${DEPLOYMENT_ENV}^g s^||EXTERNAL_OAUTH2_ENDPOINT_AUTH_URL||^${EXTERNAL_OAUTH2_ENDPOINT_AUTH_URL}^g s^||EXTERNAL_ENDPOINT_TOKEN_URL||^${EXTERNAL_ENDPOINT_TOKEN_URL}^g s^||EXTERNAL_DATA_SOURCE_URL||^${EXTERNAL_DATA_SOURCE_URL}^g s^||EXTERNAL_OIDC_OPURL||^${EXTERNAL_OIDC_OPURL}^g -------------------------------------------------------------------------------- /cmd/login-consent-server-vue/src/components/HelloWorld.vue: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | 15 | 16 | 24 | 25 | 26 | 31 | -------------------------------------------------------------------------------- /k8s/jobs/kustomize/jobs/overlays/common/issuer/role.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: rbac.authorization.k8s.io/v1 9 | kind: Role 10 | metadata: 11 | name: issuer 12 | rules: 13 | - apiGroups: 14 | - "" 15 | resources: 16 | - configmaps 17 | verbs: 18 | - create 19 | - get 20 | - list 21 | - update 22 | - patch 23 | - watch 24 | - apiGroups: 25 | - "apps" 26 | resources: 27 | - deployments 28 | resourceNames: 29 | - "issuer" 30 | verbs: 31 | - get 32 | - patch 33 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/local/hydra/ingress.yml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: networking.k8s.io/v1 3 | kind: Ingress 4 | metadata: 5 | name: hydra 6 | labels: 7 | app: hydra 8 | spec: 9 | tls: 10 | - hosts: 11 | - HYDRA_PUBLIC_SERVICE_NAME.||DOMAIN|| 12 | secretName: INGRESS_TLS_SECRET 13 | rules: 14 | - host: HYDRA_PUBLIC_SERVICE_NAME.||DOMAIN|| 15 | http: 16 | paths: 17 | - pathType: Prefix 18 | path: "/" 19 | backend: 20 | service: 21 | name: HYDRA_PUBLIC_SERVICE_NAME 22 | port: 23 | name: http 24 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/local/hydra-admin/ingress.yml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: networking.k8s.io/v1 3 | kind: Ingress 4 | metadata: 5 | name: hydra-admin 6 | labels: 7 | app: hydra 8 | spec: 9 | tls: 10 | - hosts: 11 | - HYDRA_ADMIN_SERVICE_NAME.||DOMAIN|| 12 | secretName: INGRESS_TLS_SECRET 13 | rules: 14 | - host: HYDRA_ADMIN_SERVICE_NAME.||DOMAIN|| 15 | http: 16 | paths: 17 | - pathType: Prefix 18 | path: "/" 19 | backend: 20 | service: 21 | name: HYDRA_ADMIN_SERVICE_NAME 22 | port: 23 | name: http 24 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/local/login-consent/add-ca.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: apps/v1 8 | kind: Deployment 9 | metadata: 10 | name: login-consent 11 | spec: 12 | template: 13 | spec: 14 | volumes: 15 | - name: ca-cert 16 | configMap: 17 | name: login-consent-ca-cert 18 | containers: 19 | - name: login-consent 20 | volumeMounts: 21 | - name: ca-cert 22 | mountPath: /etc/login-consent/tls 23 | -------------------------------------------------------------------------------- /test/bdd/ace/Makefile: -------------------------------------------------------------------------------- 1 | # Copyright SecureKey Technologies Inc. 2 | # 3 | # SPDX-License-Identifier: Apache-2.0 4 | 5 | DEPLOYMENT_ENV ?= local 6 | DOMAIN ?= ${DEPLOYMENT_ENV}.trustbloc.dev 7 | BLOC_DOMAIN ?= orb-1.${DOMAIN} 8 | GATEKEEPER_HOST ?= gatekeeper.${DOMAIN} 9 | 10 | .PHONY: all 11 | all: clean bdd-test 12 | 13 | .PHONY: bdd-test 14 | bdd-test: 15 | GATEKEEPER_HOST=${GATEKEEPER_HOST} ORB_DOMAIN=${BLOC_DOMAIN} ORB_AUTH_TOKEN=ADMIN_TOKEN TAGS=gatekeeper_e2e \ 16 | go test -count=1 -v -cover . -p 1 -timeout=10m -race 17 | 18 | .PHONY: clean 19 | clean: 20 | @rm -rf ./build 21 | -------------------------------------------------------------------------------- /test/cmd/cms/testdata/universitydegreecredentials.json: -------------------------------------------------------------------------------- 1 | [ 2 | { 3 | "userid":"100", 4 | "vcmetadata":{ 5 | "@context":[ 6 | "https://www.w3.org/2018/credentials/v1", 7 | "https://www.w3.org/2018/credentials/examples/v1", 8 | "https://trustbloc.github.io/context/vc/examples-ext-v1.jsonld" 9 | ], 10 | "name":"University Degree Credential", 11 | "description":"University Degree Credential for Mr.Jayden Doe" 12 | }, 13 | "name":"Jayden Doe", 14 | "degree":{ 15 | "type":"BachelorDegree", 16 | "degree":"Bachelor of Science and Arts" 17 | } 18 | } 19 | ] -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/local/comparator/benefits-dept/add-ca.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: apps/v1 8 | kind: Deployment 9 | metadata: 10 | name: benefits-dept-comparator 11 | spec: 12 | template: 13 | spec: 14 | volumes: 15 | - name: ca-cert 16 | configMap: 17 | name: comparator-ca-cert 18 | containers: 19 | - name: comparator 20 | volumeMounts: 21 | - name: ca-cert 22 | mountPath: /etc/comparator/tls 23 | -------------------------------------------------------------------------------- /docs/openapi-specs/vault/swagger-initializer.js: -------------------------------------------------------------------------------- 1 | window.onload = function() { 2 | // 3 | 4 | // the following lines will be replaced by docker/configurator, when it runs in a docker-container 5 | window.ui = SwaggerUIBundle({ 6 | url: "openapi-spec.yml", 7 | dom_id: '#swagger-ui', 8 | deepLinking: true, 9 | presets: [ 10 | SwaggerUIBundle.presets.apis, 11 | SwaggerUIStandalonePreset 12 | ], 13 | plugins: [ 14 | SwaggerUIBundle.plugins.DownloadUrl 15 | ], 16 | layout: "StandaloneLayout" 17 | }); 18 | 19 | // 20 | }; 21 | -------------------------------------------------------------------------------- /docs/openapi-specs/comparator/swagger-initializer.js: -------------------------------------------------------------------------------- 1 | window.onload = function() { 2 | // 3 | 4 | // the following lines will be replaced by docker/configurator, when it runs in a docker-container 5 | window.ui = SwaggerUIBundle({ 6 | url: "openapi-spec.yml", 7 | dom_id: '#swagger-ui', 8 | deepLinking: true, 9 | presets: [ 10 | SwaggerUIBundle.presets.apis, 11 | SwaggerUIStandalonePreset 12 | ], 13 | plugins: [ 14 | SwaggerUIBundle.plugins.DownloadUrl 15 | ], 16 | layout: "StandaloneLayout" 17 | }); 18 | 19 | // 20 | }; 21 | -------------------------------------------------------------------------------- /docs/openapi-specs/gatekeeper/swagger-initializer.js: -------------------------------------------------------------------------------- 1 | window.onload = function() { 2 | // 3 | 4 | // the following lines will be replaced by docker/configurator, when it runs in a docker-container 5 | window.ui = SwaggerUIBundle({ 6 | url: "openapi-spec.yml", 7 | dom_id: '#swagger-ui', 8 | deepLinking: true, 9 | presets: [ 10 | SwaggerUIBundle.presets.apis, 11 | SwaggerUIStandalonePreset 12 | ], 13 | plugins: [ 14 | SwaggerUIBundle.plugins.DownloadUrl 15 | ], 16 | layout: "StandaloneLayout" 17 | }); 18 | 19 | // 20 | }; 21 | -------------------------------------------------------------------------------- /docs/openapi-specs/swagger-ui-dist/swagger-initializer.js: -------------------------------------------------------------------------------- 1 | window.onload = function() { 2 | // 3 | 4 | // the following lines will be replaced by docker/configurator, when it runs in a docker-container 5 | window.ui = SwaggerUIBundle({ 6 | url: "___openapi-spec.yml", 7 | dom_id: '#swagger-ui', 8 | deepLinking: true, 9 | presets: [ 10 | SwaggerUIBundle.presets.apis, 11 | SwaggerUIStandalonePreset 12 | ], 13 | plugins: [ 14 | SwaggerUIBundle.plugins.DownloadUrl 15 | ], 16 | layout: "StandaloneLayout" 17 | }); 18 | 19 | // 20 | }; 21 | -------------------------------------------------------------------------------- /pkg/restapi/healthcheck/operation/operations_test.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | SPDX-License-Identifier: Apache-2.0 4 | */ 5 | 6 | package operation 7 | 8 | import ( 9 | "net/http" 10 | "net/http/httptest" 11 | "testing" 12 | 13 | "github.com/stretchr/testify/require" 14 | ) 15 | 16 | func TestGetRESTHandlers(t *testing.T) { 17 | c := New() 18 | require.Equal(t, 1, len(c.GetRESTHandlers())) 19 | } 20 | 21 | func TestHealthCheck(t *testing.T) { 22 | c := New() 23 | 24 | b := &httptest.ResponseRecorder{} 25 | c.healthCheckHandler(b, nil) 26 | 27 | require.Equal(t, http.StatusOK, b.Code) 28 | } 29 | -------------------------------------------------------------------------------- /docs/openapi-specs/confidential-storage-hub/swagger-initializer.js: -------------------------------------------------------------------------------- 1 | window.onload = function() { 2 | // 3 | 4 | // the following lines will be replaced by docker/configurator, when it runs in a docker-container 5 | window.ui = SwaggerUIBundle({ 6 | url: "openapi-spec.yml", 7 | dom_id: '#swagger-ui', 8 | deepLinking: true, 9 | presets: [ 10 | SwaggerUIBundle.presets.apis, 11 | SwaggerUIStandalonePreset 12 | ], 13 | plugins: [ 14 | SwaggerUIBundle.plugins.DownloadUrl 15 | ], 16 | layout: "StandaloneLayout" 17 | }); 18 | 19 | // 20 | }; 21 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/overlays/local/rp/ingress.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: networking.k8s.io/v1 9 | kind: Ingress 10 | metadata: 11 | name: rp 12 | labels: 13 | app: rp 14 | spec: 15 | tls: 16 | - hosts: 17 | - demo-rp.||DOMAIN|| 18 | secretName: INGRESS_TLS_SECRET 19 | rules: 20 | - host: demo-rp.||DOMAIN|| 21 | http: 22 | paths: 23 | - pathType: Prefix 24 | path: "/" 25 | backend: 26 | service: 27 | name: RP_SERVICE_NAME 28 | port: 29 | name: http 30 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/overlays/local/strapi/ingress.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: networking.k8s.io/v1 9 | kind: Ingress 10 | metadata: 11 | name: strapi 12 | labels: 13 | app: strapi 14 | spec: 15 | tls: 16 | - hosts: 17 | - cms.||DOMAIN|| 18 | secretName: INGRESS_TLS_SECRET 19 | rules: 20 | - host: cms.||DOMAIN|| 21 | http: 22 | paths: 23 | - pathType: Prefix 24 | path: "/" 25 | backend: 26 | service: 27 | name: STRAPI_SERVICE_NAME 28 | port: 29 | name: http 30 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/components/strapi/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: kustomize.config.k8s.io/v1alpha1 8 | kind: Component 9 | images: 10 | - name: strapi 11 | newName: ghcr.io/trustbloc-cicd/sandbox-cms 12 | newTag: 0.1.9-snapshot-e951846 13 | 14 | secretGenerator: 15 | - envs: 16 | - secret.env 17 | name: strapi-env-secret 18 | 19 | configMapGenerator: 20 | - files: 21 | - strapi_configure.sh 22 | name: strapi-config 23 | - files: 24 | - bootstrap.js 25 | name: strapi-bootstrap 26 | 27 | resources: 28 | - deployment.yml 29 | - service.yml 30 | -------------------------------------------------------------------------------- /cmd/login-consent-server-vue/public/index.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | Login Page 9 | 10 | 11 | 14 |
15 | 16 | 17 | 18 | -------------------------------------------------------------------------------- /k8s/jobs/kustomize/jobs/overlays/local/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | # Adds namespace to all resources. 8 | #namespace: edge-sandbox-system 9 | 10 | # Value of this field is prepended to the 11 | # names of all resources, e.g. a deployment named 12 | # "wordpress" becomes "alices-wordpress". 13 | # Note that it should also match with the prefix (text before '-') of the namespace 14 | # field above. 15 | commonLabels: 16 | instance: local 17 | project: trustbloc 18 | 19 | 20 | apiVersion: kustomize.config.k8s.io/v1beta1 21 | kind: Kustomization 22 | 23 | resources: 24 | - ../common 25 | -------------------------------------------------------------------------------- /test/ui-automation/wdio.conf.vcwallet.js: -------------------------------------------------------------------------------- 1 | 2 | /* 3 | Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | "use strict"; 8 | 9 | const {config} = require('./wdio.shared.conf'); 10 | const domain = ".local.trustbloc.dev" 11 | 12 | exports.config = { 13 | ...config, 14 | 15 | // Test files 16 | specs: [ 17 | "./test/specs/oidc-flow.js", 18 | ], 19 | 20 | walletName: "vcwallet" + domain, 21 | walletURL: "https://vcwallet" + domain, 22 | applyPrCardURL: "https://demo-issuer" + domain + "/applyprcard", 23 | backgroundCheckURL: "https://demo-rp" + domain + "/backgroundcheck", 24 | isCHAPIEnabled: false 25 | }; -------------------------------------------------------------------------------- /k8s/issuer/kustomize/issuer/overlays/local/issuer/ingress.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: networking.k8s.io/v1 9 | kind: Ingress 10 | metadata: 11 | name: demo-issuer 12 | labels: 13 | app: issuer 14 | spec: 15 | tls: 16 | - hosts: 17 | - demo-issuer.||DOMAIN|| 18 | secretName: INGRESS_TLS_SECRET 19 | rules: 20 | - host: demo-issuer.||DOMAIN|| 21 | http: 22 | paths: 23 | - pathType: Prefix 24 | path: "/" 25 | backend: 26 | service: 27 | name: ISSUER_SERVICE_NAME 28 | port: 29 | name: http 30 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/common/hydra/hydra-env.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | URLS_LOGIN=https://login-consent.||DOMAIN||/login 8 | URLS_LOGOUT=https://login-consent.||DOMAIN||/logout 9 | URLS_CONSENT=https://login-consent.||DOMAIN||/consent 10 | URLS_SELF_ISSUER=https://hydra.||DOMAIN||/ 11 | OIDC_SUBJECT_TYPES_SUPPORTED=public,pairwise 12 | SERVE_TLS_ALLOW_TERMINATION_FROM=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 13 | WEBFINGER_OIDC_DISCOVERY_CLIENT_REGISTRATION_URL=https://hydra-admin.||DOMAIN||/clients/ 14 | OIDC_DYNAMIC_CLIENT_REGISTRATION_DEFAULT_SCOPE=openid,offline_access 15 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/common/benefits-dept/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ACE_HOST_EXTERNAL_URL=https://benefits-dept-rp.||DOMAIN|| 8 | ACE_VAULT_SERVER_URL=https://vault-server.||DOMAIN|| 9 | ACE_COMPARATOR_URL=https://ucis-comparator.||DOMAIN|| 10 | ACE_VC_ISSUER_URL=https://issuer-vcs.||DOMAIN||/vc-issuer-ucis 11 | ACE_DID_RESOLVER_URL=https://did-resolver.||DOMAIN||/1.0/identifiers 12 | #ACE_TLS_CERT_FILE=/etc/ace-rp/tls/tls.crt 13 | #ACE_TLS_KEY_FILE=/etc/ace-rp/tls/tls.key 14 | ACE_TLS_SYSTEMCERTPOOL=true 15 | ACE_CONTEXT_PROVIDER_URL=https://static-file-server.||DOMAIN||/ld-contexts.json 16 | -------------------------------------------------------------------------------- /k8s/jobs/kustomize/jobs/overlays/common/rp/role.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: rbac.authorization.k8s.io/v1 9 | kind: Role 10 | metadata: 11 | name: rp 12 | rules: 13 | - apiGroups: 14 | - "" 15 | resources: 16 | - configmaps 17 | verbs: 18 | - create 19 | - get 20 | - list 21 | - update 22 | - patch 23 | - watch 24 | - apiGroups: 25 | - "apps" 26 | resources: 27 | - deployments 28 | resourceNames: 29 | - "rp" 30 | verbs: 31 | - get 32 | - patch 33 | - apiGroups: 34 | - "" 35 | resources: 36 | - pods 37 | verbs: 38 | - get 39 | - list 40 | - watch 41 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/overlays/local/gatekeeper/ingress.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: networking.k8s.io/v1 9 | kind: Ingress 10 | metadata: 11 | name: gatekeeper 12 | labels: 13 | app: gatekeeper 14 | spec: 15 | tls: 16 | - hosts: 17 | - gatekeeper.||DOMAIN|| 18 | secretName: INGRESS_TLS_SECRET 19 | rules: 20 | - host: gatekeeper.||DOMAIN|| 21 | http: 22 | paths: 23 | - pathType: Prefix 24 | path: "/" 25 | backend: 26 | service: 27 | name: GATEKEEPER_SERVICE_NAME 28 | port: 29 | name: http 30 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/local/ace-rp/cbp/ingress.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: networking.k8s.io/v1 9 | kind: Ingress 10 | metadata: 11 | name: cbp-ace-rp 12 | labels: 13 | app: cbp-ace-rp 14 | spec: 15 | tls: 16 | - hosts: 17 | - CBP_RP_SERVICE_NAME.||DOMAIN|| 18 | secretName: INGRESS_TLS_SECRET 19 | rules: 20 | - host: CBP_RP_SERVICE_NAME.||DOMAIN|| 21 | http: 22 | paths: 23 | - pathType: Prefix 24 | path: "/" 25 | backend: 26 | service: 27 | name: CBP_RP_SERVICE_NAME 28 | port: 29 | name: http 30 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/overlays/local/oathkeeper/ingress.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: networking.k8s.io/v1 9 | kind: Ingress 10 | metadata: 11 | name: oathkeeper-proxy 12 | labels: 13 | app: oathkeeper 14 | spec: 15 | tls: 16 | - hosts: 17 | - PROXY_SERVICE_NAME.||DOMAIN|| 18 | secretName: INGRESS_TLS_SECRET 19 | rules: 20 | - host: PROXY_SERVICE_NAME.||DOMAIN|| 21 | http: 22 | paths: 23 | - pathType: Prefix 24 | path: "/" 25 | backend: 26 | service: 27 | name: PROXY_SERVICE_NAME 28 | port: 29 | name: http 30 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/common/cbp/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ACE_HOST_EXTERNAL_URL=https://cbp-rp.||DOMAIN|| 8 | ACE_VAULT_SERVER_URL=https://vault-server.||DOMAIN|| 9 | ACE_COMPARATOR_URL=https://ucis-comparator.||DOMAIN|| 10 | ACE_VC_ISSUER_URL=https://issuer-vcs.||DOMAIN||/vc-issuer-ucis 11 | ACE_ACCOUNT_LINK_PROFILE=ucis-profile 12 | ACE_DID_RESOLVER_URL=https://did-resolver.||DOMAIN||/1.0/identifiers 13 | ACE_TLS_SYSTEMCERTPOOL=true 14 | #ACE_TLS_CERT_FILE=/etc/ace-rp/tls/tls.crt 15 | #ACE_TLS_KEY_FILE=/etc/ace-rp/tls/tls.key 16 | ACE_CONTEXT_PROVIDER_URL=https://static-file-server.||DOMAIN||/ld-contexts.json 17 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/local/ace-rp/ucis/ingress.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: networking.k8s.io/v1 9 | kind: Ingress 10 | metadata: 11 | name: ucis-ace-rp 12 | labels: 13 | app: ucis-ace-rp 14 | spec: 15 | tls: 16 | - hosts: 17 | - UCIS_RP_SERVICE_NAME.||DOMAIN|| 18 | secretName: INGRESS_TLS_SECRET 19 | rules: 20 | - host: UCIS_RP_SERVICE_NAME.||DOMAIN|| 21 | http: 22 | paths: 23 | - pathType: Prefix 24 | path: "/" 25 | backend: 26 | service: 27 | name: UCIS_RP_SERVICE_NAME 28 | port: 29 | name: http 30 | -------------------------------------------------------------------------------- /cmd/rp-rest/main.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | package main 8 | 9 | import ( 10 | "github.com/spf13/cobra" 11 | "github.com/trustbloc/edge-core/pkg/log" 12 | 13 | "github.com/trustbloc/sandbox/cmd/rp-rest/startcmd" 14 | ) 15 | 16 | var logger = log.New("rp-rest") 17 | 18 | func main() { 19 | rootCmd := &cobra.Command{ 20 | Use: "rp", 21 | Run: func(cmd *cobra.Command, args []string) { 22 | cmd.HelpFunc()(cmd, args) 23 | }, 24 | } 25 | 26 | rootCmd.AddCommand(startcmd.GetStartCmd(&startcmd.HTTPServer{})) 27 | 28 | if err := rootCmd.Execute(); err != nil { 29 | logger.Fatalf("Failed to run rp: %s", err.Error()) 30 | } 31 | } 32 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/common/ucis/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ACE_HOST_EXTERNAL_URL=https://ucis-rp.||DOMAIN|| 8 | ACE_VAULT_SERVER_URL=https://vault-server.||DOMAIN|| 9 | ACE_COMPARATOR_URL=https://ucis-comparator.||DOMAIN|| 10 | ACE_VC_ISSUER_URL=https://issuer-vcs.||DOMAIN||/vc-issuer-ucis 11 | ACE_EXTRACTOR_PROFILE=benefit-dept-profile 12 | ACE_DID_RESOLVER_URL=https://did-resolver.||DOMAIN||/1.0/identifiers 13 | #ACE_TLS_CERT_FILE=/etc/ace-rp/tls/tls.crt 14 | #ACE_TLS_KEY_FILE=/etc/ace-rp/tls/tls.key 15 | ACE_TLS_SYSTEMCERTPOOL=true 16 | ACE_CONTEXT_PROVIDER_URL=https://static-file-server.||DOMAIN||/ld-contexts.json 17 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/local/comparator/cbp/ingress.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: networking.k8s.io/v1 9 | kind: Ingress 10 | metadata: 11 | name: cbp-comparator 12 | labels: 13 | app: cbp-comparator 14 | spec: 15 | tls: 16 | - hosts: 17 | - CBP_SERVICE_NAME.||DOMAIN|| 18 | secretName: INGRESS_TLS_SECRET 19 | rules: 20 | - host: CBP_SERVICE_NAME.||DOMAIN|| 21 | http: 22 | paths: 23 | - pathType: Prefix 24 | path: "/" 25 | backend: 26 | service: 27 | name: CBP_SERVICE_NAME 28 | port: 29 | name: http 30 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/local/comparator/ucis/ingress.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: networking.k8s.io/v1 9 | kind: Ingress 10 | metadata: 11 | name: ucis-comparator 12 | labels: 13 | app: ucis-comparator 14 | spec: 15 | tls: 16 | - hosts: 17 | - UCIS_SERVICE_NAME.||DOMAIN|| 18 | secretName: INGRESS_TLS_SECRET 19 | rules: 20 | - host: UCIS_SERVICE_NAME.||DOMAIN|| 21 | http: 22 | paths: 23 | - pathType: Prefix 24 | path: "/" 25 | backend: 26 | service: 27 | name: UCIS_SERVICE_NAME 28 | port: 29 | name: http 30 | -------------------------------------------------------------------------------- /cmd/ace-rp-rest/main.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | package main 8 | 9 | import ( 10 | "github.com/spf13/cobra" 11 | "github.com/trustbloc/edge-core/pkg/log" 12 | 13 | "github.com/trustbloc/sandbox/cmd/ace-rp-rest/startcmd" 14 | ) 15 | 16 | var logger = log.New("ace-rp-rest") 17 | 18 | func main() { 19 | rootCmd := &cobra.Command{ 20 | Use: "ace-rp", 21 | Run: func(cmd *cobra.Command, args []string) { 22 | cmd.HelpFunc()(cmd, args) 23 | }, 24 | } 25 | 26 | rootCmd.AddCommand(startcmd.GetStartCmd(&startcmd.HTTPServer{})) 27 | 28 | if err := rootCmd.Execute(); err != nil { 29 | logger.Fatalf("Failed to run rp: %s", err.Error()) 30 | } 31 | } 32 | -------------------------------------------------------------------------------- /cmd/issuer-rest/main.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | package main 8 | 9 | import ( 10 | "github.com/spf13/cobra" 11 | "github.com/trustbloc/edge-core/pkg/log" 12 | 13 | "github.com/trustbloc/sandbox/cmd/issuer-rest/startcmd" 14 | ) 15 | 16 | var logger = log.New("issuer-rest") 17 | 18 | func main() { 19 | rootCmd := &cobra.Command{ 20 | Use: "issuer", 21 | Run: func(cmd *cobra.Command, args []string) { 22 | cmd.HelpFunc()(cmd, args) 23 | }, 24 | } 25 | 26 | rootCmd.AddCommand(startcmd.GetStartCmd(&startcmd.HTTPServer{})) 27 | 28 | if err := rootCmd.Execute(); err != nil { 29 | logger.Fatalf("Failed to run issuer: %s", err.Error()) 30 | } 31 | } 32 | -------------------------------------------------------------------------------- /k8s/demo-dbs/kustomize/demo-dbs/overlays/local/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | # Adds namespace to all resources. 8 | #namespace: edge-sandbox-system 9 | 10 | # Value of this field is prepended to the 11 | # names of all resources, e.g. a deployment named 12 | # "wordpress" becomes "alices-wordpress". 13 | # Note that it should also match with the prefix (text before '-') of the namespace 14 | # field above. 15 | commonLabels: 16 | component: demo-dbs 17 | group: third-party 18 | instance: local 19 | project: trustbloc 20 | 21 | 22 | apiVersion: kustomize.config.k8s.io/v1beta1 23 | kind: Kustomization 24 | 25 | resources: 26 | - ../common 27 | -------------------------------------------------------------------------------- /k8s/scripts/core_deployment.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | echo "pull trustbloc core deployment configs - start" 9 | 10 | root=$(pwd) 11 | core_dir=$root/.core 12 | 13 | rm -rf $core_dir 14 | mkdir -p $core_dir 15 | cd $core_dir 16 | 17 | git clone -b main https://github.com/trustbloc/k8s $core_dir 18 | git checkout ${TRUSTBLOC_CORE_K8S_COMMIT} 19 | 20 | # uncomment below line to link deployments to https://github.com/trustbloc/k8s directly (assuming k8s repo is in same folder as sandbox) 21 | # rm -rf $core_dir && mkdir -p $core_dir && ln -s ../../../k8s/* $core_dir 22 | 23 | cd $root 24 | 25 | echo "pull trustbloc core deployment configs - end" 26 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/local/login-consent/ingress.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: networking.k8s.io/v1 9 | kind: Ingress 10 | metadata: 11 | name: login-consent 12 | labels: 13 | app: login-consent 14 | spec: 15 | tls: 16 | - hosts: 17 | - LOGIN_CONSENT_SERVICE_NAME.||DOMAIN|| 18 | secretName: INGRESS_TLS_SECRET 19 | rules: 20 | - host: LOGIN_CONSENT_SERVICE_NAME.||DOMAIN|| 21 | http: 22 | paths: 23 | - pathType: Prefix 24 | path: "/" 25 | backend: 26 | service: 27 | name: LOGIN_CONSENT_SERVICE_NAME 28 | port: 29 | name: http 30 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/overlays/local/ace-rp/benefits-dept/ingress.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: networking.k8s.io/v1 9 | kind: Ingress 10 | metadata: 11 | name: benefits-dept-ace-rp 12 | labels: 13 | app: benefits-dept-ace-rp 14 | spec: 15 | tls: 16 | - hosts: 17 | - BENEFITS_DEPT_RP_SERVICE_NAME.||DOMAIN|| 18 | secretName: INGRESS_TLS_SECRET 19 | rules: 20 | - host: BENEFITS_DEPT_RP_SERVICE_NAME.||DOMAIN|| 21 | http: 22 | paths: 23 | - pathType: Prefix 24 | path: "/" 25 | backend: 26 | service: 27 | name: BENEFITS_DEPT_RP_SERVICE_NAME 28 | port: 29 | name: http 30 | -------------------------------------------------------------------------------- /k8s/demo-dbs/kustomize/demo-dbs/overlays/common/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | # Adds namespace to all resources. 8 | #namespace: edge-sandbox-system 9 | 10 | # Value of this field is prepended to the 11 | # names of all resources, e.g. a deployment named 12 | # "wordpress" becomes "alices-wordpress". 13 | # Note that it should also match with the prefix (text before '-') of the namespace 14 | # field above. 15 | commonLabels: 16 | component: demo-dbs 17 | group: third-party 18 | project: trustbloc 19 | 20 | 21 | apiVersion: kustomize.config.k8s.io/v1beta1 22 | kind: Kustomization 23 | 24 | components: 25 | - ../../components/mongodb 26 | - ../../components/postgres 27 | -------------------------------------------------------------------------------- /cmd/issuer-rest/static/css/layout.css: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | .gradient { 8 | background: linear-gradient(90deg, #000046 20%, #000046 100%); 9 | } 10 | .credit-gradient { 11 | background: linear-gradient(90deg, #3a7bd5 10%, #3a6073 100%); 12 | } 13 | 14 | .heading-text{ 15 | font-size:32px; 16 | color:white 17 | } 18 | 19 | body-font{ 20 | font-family: 'Source Sans Pro', sans-serif; 21 | } 22 | 23 | .bg { 24 | /* The image used */ 25 | background-image: url("../img/background.jpg"); 26 | } 27 | .modal { 28 | transition: opacity 0.25s ease; 29 | } 30 | pre { 31 | padding: 2px; 32 | margin: 2px; 33 | font-size: 12px; 34 | text-align: left 35 | } 36 | -------------------------------------------------------------------------------- /cmd/rp-rest/main_test.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | SPDX-License-Identifier: Apache-2.0 4 | */ 5 | 6 | package main 7 | 8 | import ( 9 | "os" 10 | "testing" 11 | ) 12 | 13 | // Correct behaviour is for main to finish with exit code 0. 14 | // This test fails otherwise. However, this can't be checked by the unit test framework. The *testing.T argument is 15 | // only there so that this test gets picked up by the framework but otherwise we don't need it. 16 | func TestWithoutUserAgs(_ *testing.T) { 17 | setUpArgs() 18 | main() 19 | } 20 | 21 | // Strips out the extra args that the unit test framework adds 22 | // This allows main() to execute as if it was called directly from the command line 23 | func setUpArgs() { 24 | os.Args = os.Args[:1] 25 | } 26 | -------------------------------------------------------------------------------- /cmd/ace-rp-rest/main_test.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | SPDX-License-Identifier: Apache-2.0 4 | */ 5 | 6 | package main 7 | 8 | import ( 9 | "os" 10 | "testing" 11 | ) 12 | 13 | // Correct behaviour is for main to finish with exit code 0. 14 | // This test fails otherwise. However, this can't be checked by the unit test framework. The *testing.T argument is 15 | // only there so that this test gets picked up by the framework but otherwise we don't need it. 16 | func TestWithoutUserAgs(_ *testing.T) { 17 | setUpArgs() 18 | main() 19 | } 20 | 21 | // Strips out the extra args that the unit test framework adds 22 | // This allows main() to execute as if it was called directly from the command line 23 | func setUpArgs() { 24 | os.Args = os.Args[:1] 25 | } 26 | -------------------------------------------------------------------------------- /cmd/issuer-rest/main_test.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | SPDX-License-Identifier: Apache-2.0 4 | */ 5 | 6 | package main 7 | 8 | import ( 9 | "os" 10 | "testing" 11 | ) 12 | 13 | // Correct behaviour is for main to finish with exit code 0. 14 | // This test fails otherwise. However, this can't be checked by the unit test framework. The *testing.T argument is 15 | // only there so that this test gets picked up by the framework but otherwise we don't need it. 16 | func TestWithoutUserAgs(_ *testing.T) { 17 | setUpArgs() 18 | main() 19 | } 20 | 21 | // Strips out the extra args that the unit test framework adds 22 | // This allows main() to execute as if it was called directly from the command line 23 | func setUpArgs() { 24 | os.Args = os.Args[:1] 25 | } 26 | -------------------------------------------------------------------------------- /cmd/login-consent-server-vue/src/App.vue: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | 13 | 14 | 24 | 25 | 35 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/overlays/local/comparator/benefits-dept/ingress.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: networking.k8s.io/v1 9 | kind: Ingress 10 | metadata: 11 | name: benefits-dept-comparator 12 | labels: 13 | app: benefits-dept-comparator 14 | spec: 15 | tls: 16 | - hosts: 17 | - BENEFITS_DEPT_SERVICE_NAME.||DOMAIN|| 18 | secretName: INGRESS_TLS_SECRET 19 | rules: 20 | - host: BENEFITS_DEPT_SERVICE_NAME.||DOMAIN|| 21 | http: 22 | paths: 23 | - pathType: Prefix 24 | path: "/" 25 | backend: 26 | service: 27 | name: BENEFITS_DEPT_SERVICE_NAME 28 | port: 29 | name: http 30 | -------------------------------------------------------------------------------- /k8s/scripts/service_list.txt: -------------------------------------------------------------------------------- 1 | adapter-hydra 2 | adapter-hydra-admin 3 | adapter-issuer 4 | adapter-issuer-didcomm 5 | adapter-rp 6 | adapter-rp-didcomm 7 | api-gateway 8 | auth-hydra 9 | auth-hydra-admin 10 | benefits-dept-comparator 11 | benefits-dept-rp 12 | cbp-comparator 13 | cbp-rp 14 | cms 15 | csh 16 | demo-issuer 17 | demo-rp 18 | did-method 19 | did-resolver 20 | edv 21 | gatekeeper 22 | holder-vcs 23 | hub-auth 24 | hydra 25 | hydra-admin 26 | issuer-vcs 27 | login-consent 28 | oathkeeper-proxy 29 | orb-driver 30 | orb-1 31 | orb-kms 32 | vct 33 | orb-2 34 | orb-3 35 | orb-4 36 | router 37 | router-api 38 | router-ws 39 | ucis-comparator 40 | ucis-rp 41 | uni-resolver-web 42 | vault-kms 43 | vault-server 44 | vcs-awskms 45 | vcs-localkms 46 | verifier-vcs 47 | wallet 48 | vcwallet 49 | static-file-server 50 | -------------------------------------------------------------------------------- /test/cmd/demo/main.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | SPDX-License-Identifier: Apache-2.0 4 | */ 5 | 6 | package main 7 | 8 | import ( 9 | "crypto/ed25519" 10 | "fmt" 11 | "os" 12 | 13 | "github.com/btcsuite/btcutil/base58" 14 | "github.com/square/go-jose/v3" 15 | ) 16 | 17 | func main() { 18 | switch os.Args[1] { //nolint: gocritic 19 | case "getPrivateKey": 20 | jwk := jose.JSONWebKey{} 21 | if errUnmarshalJSON := jwk.UnmarshalJSON([]byte(os.Args[2])); errUnmarshalJSON != nil { 22 | fmt.Printf("failed to unmarshal resp to jwk: %s\n", errUnmarshalJSON) 23 | return 24 | } 25 | 26 | k, ok := jwk.Key.(ed25519.PrivateKey) 27 | if !ok { 28 | fmt.Printf("key is not ed25519\n") 29 | return 30 | } 31 | 32 | fmt.Println(base58.Encode(k)) 33 | } 34 | } 35 | -------------------------------------------------------------------------------- /images/sandbox-cms/Dockerfile: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ARG GO_VER 8 | ARG ALPINE_VER 9 | 10 | FROM golang:${GO_VER}-alpine${ALPINE_VER} as golang 11 | RUN apk add --no-cache \ 12 | gcc \ 13 | musl-dev \ 14 | git \ 15 | libtool \ 16 | bash \ 17 | make; 18 | ADD . /opt/workspace/sandbox 19 | WORKDIR /opt/workspace/sandbox 20 | ENV EXECUTABLES go git 21 | 22 | FROM golang as sandbox 23 | RUN make sandbox-cms 24 | 25 | 26 | FROM alpine:${ALPINE_VER} 27 | LABEL org.opencontainers.image.source https://github.com/trustbloc/sandbox 28 | 29 | # copy build artifacts from build container 30 | COPY --from=sandbox /opt/workspace/sandbox/.build/bin/cms /usr/local/bin 31 | 32 | WORKDIR /usr/local/bin 33 | ENTRYPOINT ["cms"] 34 | -------------------------------------------------------------------------------- /docs/openapi-specs/swagger-ui-dist/index.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | Swagger UI 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 |
15 | 16 | 17 | 18 | 19 | 20 | -------------------------------------------------------------------------------- /images/login-consent-server/Dockerfile: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ARG GO_VER 8 | ARG ALPINE_VER 9 | 10 | FROM golang:${GO_VER}-alpine${ALPINE_VER} as golang 11 | RUN apk add --no-cache \ 12 | gcc \ 13 | musl-dev \ 14 | git \ 15 | libtool \ 16 | bash \ 17 | make; 18 | ADD . /opt/workspace/sandbox 19 | WORKDIR /opt/workspace/sandbox 20 | ENV EXECUTABLES go git 21 | 22 | FROM golang as sandbox 23 | RUN make login-consent-server 24 | 25 | 26 | FROM alpine:${ALPINE_VER} 27 | LABEL org.opencontainers.image.source https://github.com/trustbloc/sandbox 28 | 29 | # copy build artifacts from build container 30 | COPY --from=sandbox /opt/workspace/sandbox/.build/bin/login-consent /usr/local/bin 31 | 32 | WORKDIR /usr/local/bin 33 | ENTRYPOINT ["server"] 34 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | # Labels to add to all resources and selectors. 8 | #commonLabels: 9 | # someName: someValue 10 | 11 | # Annotations to add to all resources 12 | #commonAnnotations: 13 | # someName: someValue 14 | 15 | generatorOptions: {} 16 | 17 | configMapGenerator: 18 | - envs: 19 | - config.env 20 | name: ace-rp-env 21 | 22 | secretGenerator: 23 | - envs: 24 | - secret.env 25 | name: ace-rp-env-secret 26 | 27 | resources: 28 | - deployment.yml 29 | - service.yml 30 | 31 | 32 | apiVersion: kustomize.config.k8s.io/v1beta1 33 | kind: Kustomization 34 | images: 35 | - name: sandbox-ace-rp 36 | newName: ghcr.io/trustbloc-cicd/sandbox-ace-rp 37 | newTag: 0.1.9-snapshot-e951846 38 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/plugin/svceng/sedb64transformer/SedB64Transformer: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # https://github.com/kubernetes-sigs/kustomize/blob/master/plugin/someteam.example.com/v1/sedtransformer/SedTransformer 9 | # Skip the config file name argument. 10 | shift 11 | args=() 12 | sed_expression="" 13 | for arg in "$@"; do 14 | env_expanded=${arg@P} 15 | IFS_TEMP=${IFS} 16 | IFS='^' 17 | for word in ${env_expanded}; 18 | do 19 | if [ "${word}" == "s" ]; 20 | then 21 | sed_expression+="s^" 22 | else 23 | sed_expression+=$(echo -n $word | base64 -w0) 24 | sed_expression+='^' 25 | fi 26 | done 27 | IFS=${IFS_TEMP} 28 | args+=(-e "$sed_expression") 29 | sed_expression="" 30 | done 31 | 32 | sed "${args[@]}" 33 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/plugin/svceng/sedb64transformer/SedB64Transformer: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # https://github.com/kubernetes-sigs/kustomize/blob/master/plugin/someteam.example.com/v1/sedtransformer/SedTransformer 9 | # Skip the config file name argument. 10 | shift 11 | args=() 12 | sed_expression="" 13 | for arg in "$@"; do 14 | env_expanded=${arg@P} 15 | IFS_TEMP=${IFS} 16 | IFS='^' 17 | for word in ${env_expanded}; 18 | do 19 | if [ "${word}" == "s" ]; 20 | then 21 | sed_expression+="s^" 22 | else 23 | sed_expression+=$(echo -n $word | base64 -w0) 24 | sed_expression+='^' 25 | fi 26 | done 27 | IFS=${IFS_TEMP} 28 | args+=(-e "$sed_expression") 29 | sed_expression="" 30 | done 31 | 32 | sed "${args[@]}" 33 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/plugin/svceng/sedb64transformer/SedB64Transformer: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # https://github.com/kubernetes-sigs/kustomize/blob/master/plugin/someteam.example.com/v1/sedtransformer/SedTransformer 9 | # Skip the config file name argument. 10 | shift 11 | args=() 12 | sed_expression="" 13 | for arg in "$@"; do 14 | env_expanded=${arg@P} 15 | IFS_TEMP=${IFS} 16 | IFS='^' 17 | for word in ${env_expanded}; 18 | do 19 | if [ "${word}" == "s" ]; 20 | then 21 | sed_expression+="s^" 22 | else 23 | sed_expression+=$(echo -n $word | base64 -w0) 24 | sed_expression+='^' 25 | fi 26 | done 27 | IFS=${IFS_TEMP} 28 | args+=(-e "$sed_expression") 29 | sed_expression="" 30 | done 31 | 32 | sed "${args[@]}" 33 | -------------------------------------------------------------------------------- /pkg/restapi/healthcheck/controller.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | SPDX-License-Identifier: Apache-2.0 4 | */ 5 | 6 | package healthcheck 7 | 8 | import ( 9 | "github.com/trustbloc/sandbox/pkg/restapi/healthcheck/operation" 10 | ) 11 | 12 | // New returns new controller instance. 13 | func New() *Controller { 14 | var allHandlers []operation.Handler 15 | 16 | rpService := operation.New() 17 | 18 | handlers := rpService.GetRESTHandlers() 19 | 20 | allHandlers = append(allHandlers, handlers...) 21 | 22 | return &Controller{handlers: allHandlers} 23 | } 24 | 25 | // Controller contains handlers for controller. 26 | type Controller struct { 27 | handlers []operation.Handler 28 | } 29 | 30 | // GetOperations returns all controller endpoints. 31 | func (c *Controller) GetOperations() []operation.Handler { 32 | return c.handlers 33 | } 34 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/plugin/svceng/sedb64transformer/SedB64Transformer: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # https://github.com/kubernetes-sigs/kustomize/blob/master/plugin/someteam.example.com/v1/sedtransformer/SedTransformer 9 | # Skip the config file name argument. 10 | shift 11 | args=() 12 | sed_expression="" 13 | for arg in "$@"; do 14 | env_expanded=${arg@P} 15 | IFS_TEMP=${IFS} 16 | IFS='^' 17 | for word in ${env_expanded}; 18 | do 19 | if [ "${word}" == "s" ]; 20 | then 21 | sed_expression+="s^" 22 | else 23 | sed_expression+=$(echo -n $word | base64 -w0) 24 | sed_expression+='^' 25 | fi 26 | done 27 | IFS=${IFS_TEMP} 28 | args+=(-e "$sed_expression") 29 | sed_expression="" 30 | done 31 | 32 | sed "${args[@]}" 33 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | # Labels to add to all resources and selectors. 8 | #commonLabels: 9 | # someName: someValue 10 | 11 | # Annotations to add to all resources 12 | #commonAnnotations: 13 | # someName: someValue 14 | 15 | commonLabels: 16 | component: gatekeeper 17 | 18 | configMapGenerator: 19 | - envs: 20 | - config.env 21 | name: gatekeeper-env 22 | 23 | secretGenerator: 24 | - envs: 25 | - secret.env 26 | name: gatekeeper-env-secret 27 | 28 | resources: 29 | - deployment.yml 30 | - service.yml 31 | 32 | 33 | apiVersion: kustomize.config.k8s.io/v1beta1 34 | kind: Kustomization 35 | images: 36 | - name: gatekeeper 37 | newName: ghcr.io/trustbloc-cicd/gatekeeper 38 | newTag: 0.1.9-snapshot-d5992d5 39 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/plugin/svceng/sedb64transformer/SedB64Transformer: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # https://github.com/kubernetes-sigs/kustomize/blob/master/plugin/someteam.example.com/v1/sedtransformer/SedTransformer 9 | # Skip the config file name argument. 10 | shift 11 | args=() 12 | sed_expression="" 13 | for arg in "$@"; do 14 | env_expanded=${arg@P} 15 | IFS_TEMP=${IFS} 16 | IFS='^' 17 | for word in ${env_expanded}; 18 | do 19 | if [ "${word}" == "s" ]; 20 | then 21 | sed_expression+="s^" 22 | else 23 | sed_expression+=$(echo -n $word | base64 -w0) 24 | sed_expression+='^' 25 | fi 26 | done 27 | IFS=${IFS_TEMP} 28 | args+=(-e "$sed_expression") 29 | sed_expression="" 30 | done 31 | 32 | sed "${args[@]}" 33 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/plugin/svceng/sedb64transformer/SedB64Transformer: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # https://github.com/kubernetes-sigs/kustomize/blob/master/plugin/someteam.example.com/v1/sedtransformer/SedTransformer 9 | # Skip the config file name argument. 10 | shift 11 | args=() 12 | sed_expression="" 13 | for arg in "$@"; do 14 | env_expanded=${arg@P} 15 | IFS_TEMP=${IFS} 16 | IFS='^' 17 | for word in ${env_expanded}; 18 | do 19 | if [ "${word}" == "s" ]; 20 | then 21 | sed_expression+="s^" 22 | else 23 | sed_expression+=$(echo -n $word | base64 -w0) 24 | sed_expression+='^' 25 | fi 26 | done 27 | IFS=${IFS_TEMP} 28 | args+=(-e "$sed_expression") 29 | sed_expression="" 30 | done 31 | 32 | sed "${args[@]}" 33 | -------------------------------------------------------------------------------- /images/rp-rest/Dockerfile: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ARG GO_VER 8 | ARG ALPINE_VER 9 | 10 | FROM golang:${GO_VER}-alpine${ALPINE_VER} as golang 11 | RUN apk add --no-cache \ 12 | gcc \ 13 | musl-dev \ 14 | git \ 15 | libtool \ 16 | bash \ 17 | make; 18 | ADD . /opt/workspace/sandbox 19 | WORKDIR /opt/workspace/sandbox 20 | ENV EXECUTABLES go git 21 | 22 | FROM golang as sandbox 23 | RUN make rp-rest 24 | 25 | 26 | FROM alpine:${ALPINE_VER} 27 | LABEL org.opencontainers.image.source https://github.com/trustbloc/sandbox 28 | 29 | RUN apk add --no-cache \ 30 | bash \ 31 | curl \ 32 | jq; 33 | 34 | # copy build artifacts from build container 35 | COPY --from=sandbox /opt/workspace/sandbox/.build/bin/rp /usr/local/bin 36 | 37 | WORKDIR /usr/local/bin 38 | ENTRYPOINT ["rp-rest"] 39 | -------------------------------------------------------------------------------- /docs/openapi-specs/vault/swagger-ui.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | Swagger UI 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 |
15 | 16 | 17 | 18 | 19 | -------------------------------------------------------------------------------- /images/sandbox-cli/Dockerfile: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ARG GO_VER 8 | ARG ALPINE_VER 9 | 10 | FROM golang:${GO_VER}-alpine${ALPINE_VER} as golang 11 | RUN apk add --no-cache \ 12 | gcc \ 13 | musl-dev \ 14 | git \ 15 | libtool \ 16 | bash \ 17 | make; 18 | ADD . /opt/workspace/sandbox 19 | WORKDIR /opt/workspace/sandbox 20 | ENV EXECUTABLES go git 21 | 22 | FROM golang as sandbox 23 | RUN make demo-cli 24 | 25 | 26 | FROM alpine:${ALPINE_VER} 27 | LABEL org.opencontainers.image.source https://github.com/trustbloc/sandbox 28 | 29 | RUN apk add --no-cache \ 30 | bash \ 31 | curl \ 32 | jq; 33 | 34 | # copy build artifacts from build container 35 | COPY --from=sandbox /opt/workspace/sandbox/.build/bin/demo /usr/local/bin 36 | 37 | WORKDIR /usr/local/bin 38 | ENTRYPOINT ["demo"] 39 | -------------------------------------------------------------------------------- /docs/openapi-specs/comparator/swagger-ui.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | Swagger UI 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 |
15 | 16 | 17 | 18 | 19 | -------------------------------------------------------------------------------- /docs/openapi-specs/gatekeeper/swagger-ui.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | Swagger UI 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 |
15 | 16 | 17 | 18 | 19 | -------------------------------------------------------------------------------- /images/ace-rp-rest/Dockerfile: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ARG GO_VER 8 | ARG ALPINE_VER 9 | 10 | FROM golang:${GO_VER}-alpine${ALPINE_VER} as golang 11 | RUN apk add --no-cache \ 12 | gcc \ 13 | musl-dev \ 14 | git \ 15 | libtool \ 16 | bash \ 17 | make; 18 | ADD . /opt/workspace/sandbox 19 | WORKDIR /opt/workspace/sandbox 20 | ENV EXECUTABLES go git 21 | 22 | FROM golang as sandbox 23 | RUN make ace-rp-rest 24 | 25 | 26 | FROM alpine:${ALPINE_VER} 27 | LABEL org.opencontainers.image.source https://github.com/trustbloc/sandbox 28 | 29 | RUN apk add --no-cache \ 30 | bash \ 31 | curl \ 32 | jq; 33 | 34 | # copy build artifacts from build container 35 | COPY --from=sandbox /opt/workspace/sandbox/.build/bin/ace-rp /usr/local/bin 36 | 37 | WORKDIR /usr/local/bin 38 | ENTRYPOINT ["ace-rp-rest"] 39 | -------------------------------------------------------------------------------- /images/issuer-rest/Dockerfile: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | ARG GO_VER 8 | ARG ALPINE_VER 9 | 10 | FROM golang:${GO_VER}-alpine${ALPINE_VER} as golang 11 | RUN apk add --no-cache \ 12 | gcc \ 13 | musl-dev \ 14 | git \ 15 | libtool \ 16 | bash \ 17 | make; 18 | ADD . /opt/workspace/sandbox 19 | WORKDIR /opt/workspace/sandbox 20 | ENV EXECUTABLES go git 21 | 22 | FROM golang as sandbox 23 | RUN make issuer-rest 24 | 25 | 26 | FROM alpine:${ALPINE_VER} 27 | LABEL org.opencontainers.image.source https://github.com/trustbloc/sandbox 28 | 29 | RUN apk add --no-cache \ 30 | bash \ 31 | curl \ 32 | jq; 33 | 34 | # copy build artifacts from build container 35 | COPY --from=sandbox /opt/workspace/sandbox/.build/bin/issuer /usr/local/bin 36 | 37 | WORKDIR /usr/local/bin 38 | ENTRYPOINT ["issuer-rest"] 39 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/overlays/local/oathkeeper/update-local-cert-store.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | apiVersion: apps/v1 8 | kind: Deployment 9 | metadata: 10 | name: oathkeeper 11 | spec: 12 | template: 13 | spec: 14 | securityContext: 15 | runAsUser: 0 16 | volumes: 17 | - name: ca-cert 18 | configMap: 19 | name: oathkeeper-ca-cert 20 | containers: 21 | - name: oathkeeper 22 | command: ["/bin/sh"] 23 | args: 24 | - "-c" 25 | - | 26 | cp /opt/ca.crt /usr/local/share/ca-certificates/; 27 | update-ca-certificates; 28 | oathkeeper serve --config /etc/config/config.yml; 29 | volumeMounts: 30 | - name: ca-cert 31 | mountPath: /opt 32 | -------------------------------------------------------------------------------- /docs/openapi-specs/confidential-storage-hub/swagger-ui.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | Swagger UI 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 |
15 | 16 | 17 | 18 | 19 | -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | # Labels to add to all resources and selectors. 8 | #commonLabels: 9 | # someName: someValue 10 | 11 | # Annotations to add to all resources 12 | #commonAnnotations: 13 | # someName: someValue 14 | 15 | generatorOptions: {} 16 | 17 | configMapGenerator: 18 | - envs: 19 | - comparator/config.env 20 | name: comparator-env 21 | 22 | secretGenerator: 23 | - envs: 24 | - comparator/secret.env 25 | name: comparator-env-secret 26 | 27 | resources: 28 | - comparator/deployment.yml 29 | - comparator/service.yml 30 | 31 | 32 | apiVersion: kustomize.config.k8s.io/v1beta1 33 | kind: Kustomization 34 | images: 35 | - name: comparator-server 36 | newName: ghcr.io/trustbloc-cicd/comparator-server 37 | newTag: 0.1.9-snapshot-d5992d5 38 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/overlays/common/config.env: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # Copyright Gen Digital Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | DATABASE_PREFIX=verifierrest 9 | RP_VCS_URL=https://verifier-vcs.||DOMAIN|| 10 | RP_VCS_V1_URL=https://vcs-awskms.||DOMAIN|| 11 | RP_OIDC_OPURL=https://adapter-hydra.||DOMAIN||/ 12 | RP_OIDC_CALLBACK=https://demo-rp.||DOMAIN|| 13 | RP_WACI_OIDC_OPURL=https://adapter-hydra.||DOMAIN||/ 14 | RP_WACI_OIDC_CALLBACK=https://demo-rp.||DOMAIN|| 15 | RP_WALLET_AUTH_URL=https://wallet.||DOMAIN||/oidc/share 16 | RP_TLS_SYSTEMCERTPOOL=true 17 | RP_ACCESS_TOKEN_URL=https://auth-hydra.||DOMAIN|| 18 | RP_API_GATEWAY_URL=https://api-gateway.||DOMAIN|| 19 | RP_PROFILES_MAPPING_FILE_PATH=/etc/rp/config/profiles-mapping.json 20 | 21 | #RP_TLS_CERT_FILE=/etc/rp/tls/tls.crt 22 | #RP_TLS_KEY_FILE=/etc/rp/tls/tls.key 23 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # Copyright Gen Digital Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # Labels to add to all resources and selectors. 9 | #commonLabels: 10 | # someName: someValue 11 | 12 | # Annotations to add to all resources 13 | #commonAnnotations: 14 | # someName: someValue 15 | 16 | generatorOptions: {} 17 | 18 | configMapGenerator: 19 | - envs: 20 | - login-consent.env 21 | name: login-consent-env 22 | - files: 23 | - claims-config.json 24 | name: login-consent-claims-config 25 | 26 | resources: 27 | - login-consent.yml 28 | 29 | apiVersion: kustomize.config.k8s.io/v1beta1 30 | kind: Kustomization 31 | images: 32 | - name: login-consent-server 33 | newName: ghcr.io/trustbloc-cicd/sandbox-login-consent-server 34 | newTag: 0.1.9-snapshot-e951846 35 | -------------------------------------------------------------------------------- /pkg/restapi/issuer/controller.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | package issuer 8 | 9 | import ( 10 | "github.com/trustbloc/sandbox/pkg/restapi/issuer/operation" 11 | ) 12 | 13 | // New returns new controller instance. 14 | func New(config *operation.Config) (*Controller, error) { 15 | var allHandlers []operation.Handler 16 | 17 | issuerService, err := operation.New(config) 18 | if err != nil { 19 | return nil, err 20 | } 21 | 22 | allHandlers = append(allHandlers, issuerService.GetRESTHandlers()...) 23 | 24 | return &Controller{handlers: allHandlers}, nil 25 | } 26 | 27 | // Controller contains handlers for controller 28 | type Controller struct { 29 | handlers []operation.Handler 30 | } 31 | 32 | // GetOperations returns all controller endpoints 33 | func (c *Controller) GetOperations() []operation.Handler { 34 | return c.handlers 35 | } 36 | -------------------------------------------------------------------------------- /test/cmd/cms/testdata/mdls.json: -------------------------------------------------------------------------------- 1 | [ 2 | { 3 | "userid":"100", 4 | "metadata":{ 5 | "contexts":[ 6 | "https://trustbloc.github.io/context/vc/examples/mdl-v1.jsonld" 7 | ], 8 | "scopes":[ 9 | "mDL" 10 | ], 11 | "name":"Drivers License", 12 | "description":"Drivers License for John Smith (Issued by Government of Castleham)" 13 | }, 14 | "data":{ 15 | "given_name":"John", 16 | "family_name":"Smith", 17 | "document_number":"123-456-789", 18 | "birthdate":"1990-01-01", 19 | "driving_privileges":"G2", 20 | "issuing_country":"Canada", 21 | "issuing_authority":"Ministry of Transport Ontario", 22 | "issue_date":"2020-05-27", 23 | "expiry_date":"2025-05-26", 24 | "resident_address":"4726 Pine Street", 25 | "resident_city":"Toronto", 26 | "resident_postal_code":"A1B 2C3", 27 | "resident_state":"Ontario" 28 | } 29 | } 30 | ] -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # Copyright Gen Digital Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # Labels to add to all resources and selectors. 9 | #commonLabels: 10 | # someName: someValue 11 | 12 | # Annotations to add to all resources 13 | #commonAnnotations: 14 | # someName: someValue 15 | 16 | commonLabels: 17 | component: rp 18 | 19 | configMapGenerator: 20 | - envs: 21 | - config.env 22 | name: rp-env 23 | - files: 24 | - profiles-mapping.json 25 | name: rp-profiles-mapping-config 26 | 27 | secretGenerator: 28 | - envs: 29 | - secret.env 30 | name: rp-env-secret 31 | 32 | resources: 33 | - deployment.yml 34 | - service.yml 35 | 36 | apiVersion: kustomize.config.k8s.io/v1beta1 37 | kind: Kustomization 38 | images: 39 | - name: sandbox-rp 40 | newName: ghcr.io/trustbloc-cicd/sandbox-rp 41 | newTag: 0.1.9-snapshot-e951846 42 | -------------------------------------------------------------------------------- /pkg/internal/common/support/httphandler_test.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | package support 8 | 9 | import ( 10 | "net/http" 11 | "testing" 12 | "time" 13 | 14 | "github.com/stretchr/testify/require" 15 | ) 16 | 17 | func TestNewHTTPHandler(t *testing.T) { 18 | path := "/sample-path" 19 | method := "GET" 20 | handled := make(chan bool) 21 | handlerFn := func(w http.ResponseWriter, r *http.Request) { 22 | // do nothing 23 | handled <- true 24 | } 25 | 26 | handler := NewHTTPHandler(path, method, handlerFn) 27 | require.Equal(t, path, handler.Path()) 28 | require.Equal(t, method, handler.Method()) 29 | require.NotNil(t, handler.Handle()) 30 | 31 | go handler.Handle()(nil, nil) 32 | 33 | select { 34 | case res := <-handled: 35 | require.True(t, res) 36 | case <-time.After(2 * time.Second): 37 | t.Fatal("handler function didn't get executed") 38 | } 39 | } 40 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/overlays/common/oathkeeper/process-template.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: apps/v1 9 | kind: Deployment 10 | metadata: 11 | name: oathkeeper 12 | spec: 13 | template: 14 | spec: 15 | volumes: 16 | - name: script 17 | configMap: 18 | name: process-template-script 19 | - name: access-rules-template 20 | configMap: 21 | name: access-rules-template 22 | initContainers: 23 | - name: process-oathkeeper-template 24 | image: "alpine:latest" 25 | imagePullPolicy: IfNotPresent 26 | command: ["/bin/sh"] 27 | args: ["/opt/process_template.sh"] 28 | volumeMounts: 29 | - name: script 30 | mountPath: /opt 31 | - name: access-rules-template 32 | mountPath: /oathkeeper/template 33 | -------------------------------------------------------------------------------- /pkg/restapi/acerp/controller.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | package acerp 8 | 9 | import ( 10 | "fmt" 11 | 12 | "github.com/trustbloc/sandbox/pkg/restapi/acerp/operation" 13 | ) 14 | 15 | // New returns new controller instance. 16 | func New(config *operation.Config) (*Controller, error) { 17 | var allHandlers []operation.Handler 18 | 19 | aceRpService, err := operation.New(config) 20 | if err != nil { 21 | return nil, fmt.Errorf("create ace-rp operation : %w", err) 22 | } 23 | 24 | allHandlers = append(allHandlers, aceRpService.GetRESTHandlers()...) 25 | 26 | return &Controller{handlers: allHandlers}, nil 27 | } 28 | 29 | // Controller contains handlers for controller 30 | type Controller struct { 31 | handlers []operation.Handler 32 | } 33 | 34 | // GetOperations returns all controller endpoints 35 | func (c *Controller) GetOperations() []operation.Handler { 36 | return c.handlers 37 | } 38 | -------------------------------------------------------------------------------- /pkg/restapi/rp/controller.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | package rp 8 | 9 | import ( 10 | "fmt" 11 | 12 | "github.com/trustbloc/sandbox/pkg/restapi/rp/operation" 13 | ) 14 | 15 | // New returns new controller instance. 16 | func New(config *operation.Config) (*Controller, error) { 17 | var allHandlers []operation.Handler 18 | 19 | rpService, err := operation.New(config) 20 | if err != nil { 21 | return nil, fmt.Errorf("failed to initialize rp-rest operations : %w", err) 22 | } 23 | 24 | allHandlers = append(allHandlers, rpService.GetRESTHandlers()...) 25 | 26 | return &Controller{handlers: allHandlers}, nil 27 | } 28 | 29 | // Controller contains handlers for controller 30 | type Controller struct { 31 | handlers []operation.Handler 32 | } 33 | 34 | // GetOperations returns all controller endpoints 35 | func (c *Controller) GetOperations() []operation.Handler { 36 | return c.handlers 37 | } 38 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/overlays/common/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | # Adds namespace to all resources. 8 | #namespace: edge-sandbox-system 9 | 10 | # Value of this field is prepended to the 11 | # names of all resources, e.g. a deployment named 12 | # "wordpress" becomes "alices-wordpress". 13 | # Note that it should also match with the prefix (text before '-') of the namespace 14 | # field above. 15 | commonLabels: 16 | group: demo 17 | project: trustbloc 18 | 19 | apiVersion: kustomize.config.k8s.io/v1beta1 20 | kind: Kustomization 21 | 22 | configMapGenerator: 23 | - behavior: merge 24 | envs: 25 | - config.env 26 | name: gatekeeper-env 27 | 28 | secretGenerator: 29 | - behavior: merge 30 | envs: 31 | - secret.env 32 | name: gatekeeper-env-secret 33 | 34 | resources: 35 | - ../../base 36 | 37 | transformers: 38 | - sedtransform.yml 39 | - sedb64transform.yml 40 | -------------------------------------------------------------------------------- /docs/issuer/README.md: -------------------------------------------------------------------------------- 1 | ## Issuer 2 | 3 | Issuer is a sample application that demonstrates creation of verifiable credentials. 4 | 5 | Issuer application will: 6 | - authenticate user 7 | - ask for user consent for data sharing 8 | - retrieve user data from content management system 9 | - call [vc service](https://github.com/trustbloc/vcs) to create student card verifiable credential on behalf of the issuer 10 | - present student card verifiable credential to the user 11 | - create the QR Code for retrieving the verifiable credential 12 | 13 | Note: In order to scan the QR code from your phone browser you need to be in the same network where your application is running. 14 | - Replace "127.0.0.1" in the following files to your machine's IP address: 15 | - test/bdd/fixtures/demo/docker-compose-demo-applications.yml 16 | - test/bdd/fixtures/demo/docker-compose-third-party.yml 17 | - test/bdd/fixtures/scripts/hydra_configure.sh 18 | - scan the QRcode from any camera facing device. 19 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/issuer/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # Copyright Avast Software. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # Labels to add to all resources and selectors. 9 | #commonLabels: 10 | # someName: someValue 11 | 12 | # Annotations to add to all resources 13 | #commonAnnotations: 14 | # someName: someValue 15 | 16 | commonLabels: 17 | component: issuer 18 | 19 | configMapGenerator: 20 | - envs: 21 | - config.env 22 | name: issuer-env 23 | - files: 24 | - profiles-mapping.json 25 | name: issuer-profiles-mapping-config 26 | 27 | secretGenerator: 28 | - envs: 29 | - secret.env 30 | name: issuer-env-secret 31 | 32 | resources: 33 | - deployment.yml 34 | - service.yml 35 | 36 | 37 | apiVersion: kustomize.config.k8s.io/v1beta1 38 | kind: Kustomization 39 | images: 40 | - name: sandbox-issuer 41 | newName: ghcr.io/trustbloc-cicd/sandbox-issuer 42 | newTag: 0.1.9-snapshot-e951846 43 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/plugin/svceng/sedb64transformer/SedB64Transformer: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # https://github.com/kubernetes-sigs/kustomize/blob/master/plugin/someteam.example.com/v1/sedtransformer/SedTransformer 9 | # Skip the config file name argument. 10 | shift 11 | args=() 12 | sed_expression="" 13 | for arg in "$@"; do 14 | env_expanded=${arg@P} 15 | if [[ "${env_expanded}" =~ "^^" ]]; 16 | then 17 | continue; 18 | fi 19 | IFS_TEMP=${IFS} 20 | IFS='^' 21 | for word in ${env_expanded}; 22 | do 23 | if [ "${word}" == "s" ]; 24 | then 25 | sed_expression+="s^" 26 | else 27 | sed_expression+=$(echo -n $word | base64 -w0) 28 | sed_expression+='^' 29 | fi 30 | done 31 | IFS=${IFS_TEMP} 32 | args+=(-e "$sed_expression") 33 | sed_expression="" 34 | done 35 | if [ ${#args[@]} -ne 0 ]; 36 | then 37 | sed "${args[@]}" 38 | else 39 | sed "" 40 | fi -------------------------------------------------------------------------------- /k8s/demo-dbs/kustomize/demo-dbs/components/mongodb/deployment.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: apps/v1 9 | kind: Deployment 10 | metadata: 11 | creationTimestamp: null 12 | labels: 13 | app: mongodb-demo 14 | name: mongodb-demo 15 | spec: 16 | replicas: 1 17 | selector: 18 | matchLabels: 19 | app: mongodb-demo 20 | strategy: {} 21 | template: 22 | metadata: 23 | creationTimestamp: null 24 | labels: 25 | app: mongodb-demo 26 | spec: 27 | hostname: mongodb-demo 28 | containers: 29 | - image: mongo:latest 30 | imagePullPolicy: IfNotPresent 31 | ports: 32 | - name: mongodb-port 33 | protocol: TCP 34 | containerPort: 27017 35 | name: mongodb 36 | env: 37 | - name: MONGO_INITDB_ROOT_USERNAME 38 | value: 'mongoroot' 39 | - name: MONGO_INITDB_ROOT_PASSWORD 40 | value: 'secret' 41 | resources: {} 42 | status: {} 43 | -------------------------------------------------------------------------------- /pkg/internal/common/support/httphandler.go: -------------------------------------------------------------------------------- 1 | /* 2 | Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | 4 | SPDX-License-Identifier: Apache-2.0 5 | */ 6 | 7 | package support 8 | 9 | import ( 10 | "net/http" 11 | ) 12 | 13 | // NewHTTPHandler returns instance of HTTPHandler which can be used to handle http requests 14 | func NewHTTPHandler(path, method string, handle http.HandlerFunc) *HTTPHandler { 15 | return &HTTPHandler{path: path, method: method, handle: handle} 16 | } 17 | 18 | // HTTPHandler contains REST API handling details which can be used to build routers 19 | // for http requests for given path 20 | type HTTPHandler struct { 21 | path string 22 | method string 23 | handle http.HandlerFunc 24 | } 25 | 26 | // Path returns http request path 27 | func (h *HTTPHandler) Path() string { 28 | return h.path 29 | } 30 | 31 | // Method returns http request method type 32 | func (h *HTTPHandler) Method() string { 33 | return h.method 34 | } 35 | 36 | // Handle returns http request handle func 37 | func (h *HTTPHandler) Handle() http.HandlerFunc { 38 | return h.handle 39 | } 40 | -------------------------------------------------------------------------------- /test/cmd/cms/testdata/creditcardstatements.json: -------------------------------------------------------------------------------- 1 | [ 2 | { 3 | "userid":"100", 4 | "metadata":{ 5 | "contexts":[ 6 | "https://trustbloc.github.io/context/vc/examples/credit-card-v1.jsonld" 7 | ], 8 | "scopes":[ 9 | "CreditCardStatement" 10 | ] 11 | }, 12 | "data":{ 13 | "stmt":{ 14 | "description":"June 2020 CreditCardStatement", 15 | "url":"http://acmebank.com/invoice.pdf", 16 | "accountId":"xxxx-xxxx-xxxx-1234", 17 | "customer":{ 18 | "@type":"Person", 19 | "name":"Jane Doe" 20 | }, 21 | "paymentDueDate":"2020-06-30T12:00:00", 22 | "minimumPaymentDue":{ 23 | "@type":"PriceSpecification", 24 | "price":15.00, 25 | "priceCurrency":"CAD" 26 | }, 27 | "totalPaymentDue":{ 28 | "@type":"PriceSpecification", 29 | "price":200.00, 30 | "priceCurrency":"CAD" 31 | }, 32 | "billingPeriod":"P30D", 33 | "paymentStatus":"http://schema.org/PaymentDue" 34 | } 35 | } 36 | } 37 | ] -------------------------------------------------------------------------------- /k8s/comparator/kustomize/comparator/base/comparator/deployment.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | kind: Deployment 9 | apiVersion: apps/v1 10 | metadata: 11 | name: comparator 12 | spec: 13 | replicas: 1 14 | selector: 15 | matchLabels: 16 | app: comparator 17 | template: 18 | metadata: 19 | labels: 20 | app: comparator 21 | spec: 22 | containers: 23 | - name: comparator 24 | envFrom: 25 | - configMapRef: 26 | name: comparator-env 27 | - secretRef: 28 | name: comparator-env-secret 29 | image: comparator-server:latest 30 | args: ["start"] 31 | ports: 32 | - containerPort: 8081 33 | protocol: TCP 34 | name: http-port 35 | livenessProbe: 36 | httpGet: 37 | path: /healthcheck 38 | port: http-port 39 | initialDelaySeconds: 30 40 | periodSeconds: 10 41 | failureThreshold: 5 42 | -------------------------------------------------------------------------------- /k8s/gatekeeper/kustomize/gatekeeper/base/deployment.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | kind: Deployment 9 | apiVersion: apps/v1 10 | metadata: 11 | name: gatekeeper 12 | spec: 13 | replicas: 1 14 | selector: 15 | matchLabels: 16 | app: gatekeeper 17 | template: 18 | metadata: 19 | labels: 20 | app: gatekeeper 21 | spec: 22 | containers: 23 | - name: gatekeeper 24 | envFrom: 25 | - configMapRef: 26 | name: gatekeeper-env 27 | - secretRef: 28 | name: gatekeeper-env-secret 29 | image: gatekeeper:latest 30 | imagePullPolicy: IfNotPresent 31 | args: ["start"] 32 | ports: 33 | - containerPort: 8081 34 | protocol: TCP 35 | name: http-port 36 | livenessProbe: 37 | httpGet: 38 | path: /healthcheck 39 | port: http-port 40 | initialDelaySeconds: 30 41 | periodSeconds: 10 42 | failureThreshold: 5 43 | -------------------------------------------------------------------------------- /k8s/ace-rp/kustomize/ace-rp/base/deployment.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | kind: Deployment 9 | apiVersion: apps/v1 10 | metadata: 11 | name: ace-rp 12 | spec: 13 | replicas: 1 14 | selector: 15 | matchLabels: 16 | app: ace-rp 17 | template: 18 | metadata: 19 | labels: 20 | app: ace-rp 21 | spec: 22 | containers: 23 | - name: ace-rp 24 | envFrom: 25 | - configMapRef: 26 | name: ace-rp-env 27 | - secretRef: 28 | name: ace-rp-env-secret 29 | image: sandbox-ace-rp:latest 30 | imagePullPolicy: IfNotPresent 31 | args: ["start", "--host-url", "0.0.0.0:8081"] 32 | ports: 33 | - containerPort: 8081 34 | protocol: TCP 35 | name: http-port 36 | livenessProbe: 37 | httpGet: 38 | path: /healthcheck 39 | port: http-port 40 | initialDelaySeconds: 30 41 | periodSeconds: 10 42 | failureThreshold: 5 43 | -------------------------------------------------------------------------------- /test/bdd/issuer/Makefile: -------------------------------------------------------------------------------- 1 | # Copyright Avast Software. 2 | # 3 | # SPDX-License-Identifier: Apache-2.0 4 | 5 | DEPLOYMENT_ENV ?= local 6 | DOMAIN ?= ${DEPLOYMENT_ENV}.trustbloc.dev 7 | BLOC_DOMAIN ?= orb-1.${DOMAIN} 8 | ISSUER_PRE_AUTHORIZE_URL ?= https://demo-issuer.${DOMAIN}/pre-authorize 9 | CONTEXT_PROVIDER_URL ?= https://static-file-server.${DOMAIN}/ld-contexts.json 10 | DID_DOMAIN ?= https://${BLOC_DOMAIN} 11 | DID_SERVICE_AUTH_TOKEN ?= ADMIN_TOKEN 12 | UNI_RESOLVER_URL ?= https://did-resolver.${DOMAIN}/1.0/identifiers 13 | 14 | 15 | .PHONY: all 16 | all: clean bdd-test 17 | 18 | .PHONY: bdd-test 19 | bdd-test: 20 | ISSUER_PRE_AUTHORIZE_URL=${ISSUER_PRE_AUTHORIZE_URL} CONTEXT_PROVIDER_URL=${CONTEXT_PROVIDER_URL} DID_DOMAIN=${DID_DOMAIN} \ 21 | DID_SERVICE_AUTH_TOKEN=${DID_SERVICE_AUTH_TOKEN} UNI_RESOLVER_URL=${UNI_RESOLVER_URL} INSECURE_TLS=true \ 22 | VC_FORMAT=jwt_vc_json-ld VC_TYPE=VerifiedEmployee DID_METHOD=jwk DID_KEY_TYPE=ECDSAP384DER \ 23 | go test -count=1 -v -cover . -p 1 -timeout=3m -race 24 | 25 | .PHONY: clean 26 | clean: 27 | @rm -rf ./build 28 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/overlays/common/profiles-mapping.json: -------------------------------------------------------------------------------- 1 | [ 2 | { 3 | "name": "Verified Employee Verifier", 4 | "id": "jwt-web-ED25519-JsonWebSignature2020", 5 | "support_well_known_config": true, 6 | "vcs_url_suffix": "" 7 | }, 8 | { 9 | "name": "PR Card Verifier", 10 | "id": "pr-card-jwtsd-verifier", 11 | "support_well_known_config": true, 12 | "vcs_url_suffix": "" 13 | }, 14 | { 15 | "name": "Medical Clinic Verifier", 16 | "id": "medical-clinic-verifier", 17 | "support_well_known_config": false, 18 | "vcs_url_suffix": "" 19 | }, 20 | { 21 | "name": "University Degree Verifier BBS+", 22 | "id": "v_ldp_university_degree_sd_bbs", 23 | "support_well_known_config": false, 24 | "vcs_url_suffix": "/vcs-localkms" 25 | }, 26 | { 27 | "name": "Utopian Background Check", 28 | "id": "utopian_background_check_verifier", 29 | "support_well_known_config": false, 30 | "vcs_url_suffix": "" 31 | }, 32 | { 33 | "name": "True Identity", 34 | "id": "true-id-verifier", 35 | "support_well_known_config": true, 36 | "vcs_url_suffix": "" 37 | } 38 | ] 39 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/overlays/common/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # Copyright Gen Digital Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # Adds namespace to all resources. 9 | #namespace: edge-sandbox-system 10 | 11 | # Value of this field is prepended to the 12 | # names of all resources, e.g. a deployment named 13 | # "wordpress" becomes "alices-wordpress". 14 | # Note that it should also match with the prefix (text before '-') of the namespace 15 | # field above. 16 | commonLabels: 17 | group: demo 18 | project: trustbloc 19 | 20 | 21 | apiVersion: kustomize.config.k8s.io/v1beta1 22 | kind: Kustomization 23 | 24 | configMapGenerator: 25 | - behavior: merge 26 | envs: 27 | - config.env 28 | name: rp-env 29 | - behavior: replace 30 | files: 31 | - profiles-mapping.json 32 | name: rp-profiles-mapping-config 33 | 34 | secretGenerator: 35 | - behavior: merge 36 | envs: 37 | - secret.env 38 | name: rp-env-secret 39 | 40 | resources: 41 | - ../../base 42 | 43 | transformers: 44 | - sedtransform.yml 45 | - sedb64transform.yml 46 | -------------------------------------------------------------------------------- /test/cmd/cms/testdata/vaccinationcertificates.json: -------------------------------------------------------------------------------- 1 | [ 2 | { 3 | "userid":"100", 4 | "vcmetadata":{ 5 | "@context":[ 6 | "https://www.w3.org/2018/credentials/v1", 7 | "https://w3id.org/vaccination/v1" 8 | ], 9 | "name":"COVID-19 Vaccination Certificate", 10 | "description":"COVID-19 Vaccination Certificate for Mr.Louis Pasteur" 11 | }, 12 | "vccredentialsubject":{ 13 | "type":"VaccinationEvent", 14 | "batchNumber":"1183738569", 15 | "administeringCentre":"FEMA", 16 | "healthProfessional":"FEMA", 17 | "countryOfVaccination":"US", 18 | "dateOfVaccination":"2021-02-01", 19 | "recipient":{ 20 | "type":"VaccineRecipient", 21 | "givenName":"Louis", 22 | "familyName":"Pasteur", 23 | "gender":"Male", 24 | "birthDate":"1958-07-17" 25 | }, 26 | "vaccine":{ 27 | "type":"Vaccine", 28 | "disease":"COVID-19", 29 | "atcCode":"J07BX03", 30 | "medicinalProductName":"COVID-19 Vaccine Moderna", 31 | "marketingAuthorizationHolder":"Moderna Biotech" 32 | } 33 | } 34 | } 35 | ] -------------------------------------------------------------------------------- /cmd/login-consent-server-vue/package.json: -------------------------------------------------------------------------------- 1 | { 2 | "name": "login-consent-server-vue", 3 | "version": "0.1.0", 4 | "private": true, 5 | "scripts": { 6 | "serve": "vue-cli-service serve", 7 | "build": "vue-cli-service build", 8 | "lint": "vue-cli-service lint" 9 | }, 10 | "dependencies": { 11 | "core-js": "^3.6.5", 12 | "vue": "^2.6.11" 13 | }, 14 | "devDependencies": { 15 | "@vue/cli-plugin-babel": "~4.5.0", 16 | "@vue/cli-plugin-eslint": "~4.5.0", 17 | "@vue/cli-service": "~4.5.0", 18 | "babel-eslint": "^10.1.0", 19 | "eslint": "^6.7.2", 20 | "eslint-plugin-vue": "^6.2.2", 21 | "vue-template-compiler": "^2.6.11", 22 | "highlight.js": ">=10.4.1", 23 | "elliptic": ">=6.5.4" 24 | }, 25 | "eslintConfig": { 26 | "root": true, 27 | "env": { 28 | "node": true 29 | }, 30 | "extends": [ 31 | "plugin:vue/essential", 32 | "eslint:recommended" 33 | ], 34 | "parserOptions": { 35 | "parser": "babel-eslint" 36 | }, 37 | "rules": {} 38 | }, 39 | "browserslist": [ 40 | "> 1%", 41 | "last 2 versions", 42 | "not dead" 43 | ] 44 | } 45 | -------------------------------------------------------------------------------- /docs/dev_steps.md: -------------------------------------------------------------------------------- 1 | ## Component update in Sandbox 2 | 3 | 1. Fork the [TrustBloc k8s repo](https://github.com/trustbloc/k8s). 4 | 2. Link the k8s repo to sandbox repo as described [here](../k8s/scripts/core_deployment.sh). 5 | 3. Update the component details in k8s repo or sandbox repo as applicable ie, docker image tag, configurations etc. 6 | 4. If there is no sandbox code changes, then run `make setup-deploy`, if not `make build-setup-deploy`. 7 | 5. Once all the components are up, run the test automation script `make automation-test`. Not: The tests run in headless chrome mode. To change it 8 | to chrome, comment the headless chrome options in (./../test/ui-automation/wdio.shared.conf.js). 9 | 6. Create a PR in [TrustBloc k8s repo](https://github.com/trustbloc/k8s). 10 | 7. Update the k8s commit version in sandbox repo and create a PR in sandbox repo - [Reference PR](https://github.com/trustbloc/sandbox/pull/1027/files). 11 | 8. The CI will build the sandbox components, deploy and run the automation tests. 12 | 9. Once merged, update the sandbox docker version in the repo and create a PR - [Reference PR](https://github.com/trustbloc/sandbox/pull/1029/files) 13 | -------------------------------------------------------------------------------- /k8s/issuer/kustomize/issuer/overlays/common/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # Copyright Avast Software. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # Adds namespace to all resources. 9 | #namespace: edge-sandbox-system 10 | 11 | # Value of this field is prepended to the 12 | # names of all resources, e.g. a deployment named 13 | # "wordpress" becomes "alices-wordpress". 14 | # Note that it should also match with the prefix (text before '-') of the namespace 15 | # field above. 16 | commonLabels: 17 | group: demo 18 | project: trustbloc 19 | 20 | apiVersion: kustomize.config.k8s.io/v1beta1 21 | kind: Kustomization 22 | 23 | configMapGenerator: 24 | - behavior: merge 25 | envs: 26 | - config.env 27 | name: issuer-env 28 | - behavior: replace 29 | files: 30 | - profiles-mapping.json 31 | name: issuer-profiles-mapping-config 32 | 33 | secretGenerator: 34 | - behavior: merge 35 | envs: 36 | - secret.env 37 | name: issuer-env-secret 38 | 39 | resources: 40 | - ../../base 41 | 42 | transformers: 43 | - sedtransform.yml 44 | - sedb64transform.yml 45 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/components/strapi/bootstrap.js: -------------------------------------------------------------------------------- 1 | "use strict"; 2 | /** 3 | * An asynchronous bootstrap function that runs before 4 | * your application gets started. 5 | * 6 | * This gives you an opportunity to set up your data model, 7 | * run jobs, or perform some special logic. 8 | * 9 | * See more details here: https://strapi.io/documentation/3.0.0-beta.x/concepts/configurations.html#bootstrap 10 | */ 11 | const findAuthenticatedRole = async () => { 12 | const result = await strapi 13 | .query("role", "users-permissions") 14 | .findOne({type: "authenticated"}); 15 | return result; 16 | }; 17 | 18 | const setDefaultPermissions = async () => { 19 | const role = await findAuthenticatedRole(); 20 | const permissions = await strapi 21 | .query("permission", "users-permissions") 22 | .find({type: "application", role: role.id}); 23 | await Promise.all( 24 | permissions.map(p => 25 | strapi 26 | .query("permission", "users-permissions") 27 | .update({id: p.id}, {enabled: true}) 28 | ) 29 | ); 30 | }; 31 | 32 | module.exports = async () => { 33 | await setDefaultPermissions(); 34 | }; -------------------------------------------------------------------------------- /docs/index.md: -------------------------------------------------------------------------------- 1 | 2 | # OpenAPI specifications 3 | 4 | | Component | YAML | Swagger UI | 5 | |-----------------------------------------------|-----------------------------------------------------------------------|-----------------------------------------------------------------------| 6 | | Gatekeeper | [Click Here](openapi-specs/gatekeeper/openapi-spec.yml) | [Click Here](openapi-specs/gatekeeper/swagger-ui.html) | 7 | | Comparator | [Click Here](openapi-specs/comparator/openapi-spec.yml) | [Click Here](openapi-specs/comparator/swagger-ui.html) | 8 | | Confidential Storage Hub | [Click Here](openapi-specs/confidential-storage-hub/openapi-spec.yml) | [Click Here](openapi-specs/confidential-storage-hub/swagger-ui.html) | 9 | | Vault | [Click Here](openapi-specs/vault/openapi-spec.yml) | [Click Here](openapi-specs/vault/swagger-ui.html) | 10 | 11 | -------------------------------------------------------------------------------- /scripts/check_lint.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | set -e 9 | 10 | echo "Running $0" 11 | 12 | DOCKER_CMD=${DOCKER_CMD:-docker} 13 | 14 | if [ ! $(command -v ${DOCKER_CMD}) ]; then 15 | exit 0 16 | fi 17 | 18 | 19 | golangci_image="golangci/golangci-lint:v1.42.1" 20 | 21 | # these are useful for adjusting the linter's root directory, to allow linting while using local replaces 22 | root_dir=$(pwd) 23 | # root_dir=$(pwd)/../../ 24 | internal_root_dir="." 25 | # internal_root_dir="trustbloc/edge-sandbox" 26 | 27 | shopt -s globstar 28 | for i in **/*.mod; do 29 | mod_dir=$(dirname ${i}) 30 | 31 | echo "linting ${mod_dir}" 32 | 33 | ${DOCKER_CMD} run --rm -e GOPROXY=${GOPROXY} -v ${root_dir}:/opt/workspace -w /opt/workspace/${internal_root_dir}/${mod_dir} ${golangci_image} golangci-lint run -c /opt/workspace/${internal_root_dir}/.golangci.yml --path-prefix "${mod_dir}" 34 | done 35 | 36 | # this isn't covered by the loop, as there's no go.mod file in test/cmd 37 | ${DOCKER_CMD} run --rm -e GOPROXY=${GOPROXY} -v $(pwd):/opt/workspace -w /opt/workspace/test/cmd ${golangci_image} golangci-lint run -c ../../.golangci.yml 38 | -------------------------------------------------------------------------------- /k8s/jobs/kustomize/jobs/overlays/common/rp/register-tenant.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | kind: Job 9 | apiVersion: batch/v1 10 | metadata: 11 | name: rp-register-tenant 12 | labels: 13 | group: demo 14 | spec: 15 | template: 16 | spec: 17 | volumes: 18 | - name: script 19 | configMap: 20 | name: rp-register-tenant-script 21 | restartPolicy: Never 22 | # serviceAccountName: oathkeeper 23 | initContainers: 24 | # - name: wait 25 | # image: busybox 26 | # imagePullPolicy: IfNotPresent 27 | # command: ["sh"] 28 | # args: ["-c", "sleep 90"] 29 | - name: healthcheck-ready 30 | image: busybox 31 | imagePullPolicy: IfNotPresent 32 | command: ["wget"] 33 | args: ["-S", "http://verifier", "-O-"] 34 | containers: 35 | - name: register-tenant 36 | image: "alpine:latest" 37 | imagePullPolicy: IfNotPresent 38 | command: ["/bin/sh"] 39 | args: ["/opt/register-tenant.sh"] 40 | volumeMounts: 41 | - name: script 42 | mountPath: /opt 43 | -------------------------------------------------------------------------------- /k8s/cms/README.md: -------------------------------------------------------------------------------- 1 | # [CMS](https://github.com/trustbloc/sandbox) k8s deployment # 2 | 3 | 4 | ## pre-requisits 5 | * [Minikube](https://minikube.sigs.k8s.io/docs/start/) with ingress addon. 6 | * GNU sed 7 | * (Optional: Gets installed by make) [kustomize](https://kubectl.docs.kubernetes.io/installation/kustomize/). 8 | 9 | ## Quick Run 10 | * `make all` 11 | * `make deploy-sandbox` 12 | 13 | ## Cleanup 14 | * `make undeploy-sandbox` 15 | * `make clean` 16 | 17 | ## options and features 18 | * By default dns domain is `local.trustboc.dev`. To run with different domain (See next), run with: `make DOMAIN=ali.trustbloc.dev` 19 | * Will create an Ingress for external access. When running with unregistered dns domains, create records (/etc/hosts) for: 20 | - `cms.DOMAIN` 21 | - `oathkeeper-proxy.DOMAIN` 22 | * Will deploy Sandbox CMS (strapi) and oathkeeper. 23 | * if running `podman` pass `CONTAINER_CMD=podman` as option to make 24 | * Running with none self-signed certificates: place certs into kustomize/cms/overlays/sandbox/certs, then run with: `make setup-no-certs`. 25 | >files: 26 | - ca.crt 27 | - tls.crt 28 | - tls.key 29 | 30 | ## TODO: 31 | * create a dedicated service account for the oathkeeper job to run under; adjust the role binding accordingly 32 | -------------------------------------------------------------------------------- /k8s/jobs/kustomize/jobs/overlays/common/issuer/register-tenant.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | kind: Job 9 | apiVersion: batch/v1 10 | metadata: 11 | name: issuer-register-tenant 12 | labels: 13 | group: demo 14 | spec: 15 | template: 16 | spec: 17 | volumes: 18 | - name: script 19 | configMap: 20 | name: issuer-register-tenant-script 21 | restartPolicy: Never 22 | # serviceAccountName: oathkeeper 23 | initContainers: 24 | # - name: wait 25 | # image: busybox 26 | # imagePullPolicy: IfNotPresent 27 | # command: ["sh"] 28 | # args: ["-c", "sleep 90"] 29 | - name: healthcheck-ready 30 | image: busybox 31 | imagePullPolicy: IfNotPresent 32 | command: ["wget"] 33 | args: ["-S", "http://issuer", "-O-"] 34 | containers: 35 | - name: register-tenant 36 | image: "alpine:latest" 37 | imagePullPolicy: IfNotPresent 38 | command: ["/bin/sh"] 39 | args: ["/opt/register-tenant.sh"] 40 | volumeMounts: 41 | - name: script 42 | mountPath: /opt 43 | -------------------------------------------------------------------------------- /ci/version_var.sh: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | 8 | # Release Parameters 9 | BASE_VERSION=0.1.9 10 | IS_RELEASE=false 11 | 12 | BASE_RP_PKG_NAME=sandbox-rp 13 | BASE_ACE_RP_PKG_NAME=sandbox-ace-rp 14 | BASE_ISSUER_PKG_NAME=sandbox-issuer 15 | BASE_LOGIN_PKG_NAME=sandbox-login-consent-server 16 | BASE_CMS_PKG_NAME=sandbox-cms 17 | BASE_CLI_NAME=sandbox-cli 18 | RELEASE_REPO=ghcr.io/trustbloc 19 | SNAPSHOT_REPO=ghcr.io/trustbloc-cicd 20 | 21 | if [ ${IS_RELEASE} = false ] 22 | then 23 | EXTRA_VERSION=snapshot-$(git rev-parse --short=7 HEAD) 24 | PROJECT_VERSION=${BASE_VERSION}-${EXTRA_VERSION} 25 | PROJECT_PKG_REPO=${SNAPSHOT_REPO} 26 | else 27 | PROJECT_VERSION=${BASE_VERSION} 28 | PROJECT_PKG_REPO=${RELEASE_REPO} 29 | fi 30 | 31 | export EDGE_SANDBOX_TAG=$PROJECT_VERSION 32 | export RP_REST_PKG=${PROJECT_PKG_REPO}/${BASE_RP_PKG_NAME} 33 | export ACE_RP_REST_PKG=${PROJECT_PKG_REPO}/${BASE_ACE_RP_PKG_NAME} 34 | export ISSUER_REST_PKG=${PROJECT_PKG_REPO}/${BASE_ISSUER_PKG_NAME} 35 | export LOGIN_PKG=${PROJECT_PKG_REPO}/${BASE_LOGIN_PKG_NAME} 36 | export CMS_PKG=${PROJECT_PKG_REPO}/${BASE_CMS_PKG_NAME} 37 | export CLI_PKG=${PROJECT_PKG_REPO}/${BASE_CLI_NAME} 38 | -------------------------------------------------------------------------------- /k8s/demo-dbs/kustomize/demo-dbs/components/postgres/deployment.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | apiVersion: apps/v1 9 | kind: Deployment 10 | metadata: 11 | creationTimestamp: null 12 | labels: 13 | app: postgres-demo 14 | name: postgres-demo 15 | spec: 16 | replicas: 1 17 | selector: 18 | matchLabels: 19 | app: postgres-demo 20 | strategy: {} 21 | template: 22 | metadata: 23 | creationTimestamp: null 24 | labels: 25 | app: postgres-demo 26 | spec: 27 | containers: 28 | - image: postgres:latest 29 | imagePullPolicy: IfNotPresent 30 | name: postgres-demo 31 | env: 32 | - name: POSTGRES_PASSWORD 33 | value: secret 34 | volumeMounts: 35 | - mountPath: /docker-entrypoint-initdb.d 36 | name: postgres-configure 37 | ports: 38 | - name: postgres-port 39 | protocol: TCP 40 | containerPort: 5432 41 | resources: {} 42 | volumes: 43 | - configMap: 44 | defaultMode: 420 45 | name: postgres-configure 46 | name: postgres-configure 47 | status: {} 48 | -------------------------------------------------------------------------------- /k8s/issuer/README.md: -------------------------------------------------------------------------------- 1 | # [Demo Applications](https://github.com/trustbloc/sandbox) k8s deployment # 2 | 3 | 4 | ## pre-requisits 5 | * [Minikube](https://minikube.sigs.k8s.io/docs/start/) with ingress addon. 6 | * GNU sed 7 | * (Optional: Gets installed by make) [kustomize](https://kubectl.docs.kubernetes.io/installation/kustomize/). 8 | 9 | ## Quick Run 10 | * `make all` 11 | * `make deploy-issuer` 12 | 13 | ## Cleanup 14 | * `make undeploy-issuer` 15 | * `make clean` 16 | 17 | ## options and features 18 | * By default dns domain is `local.trustboc.dev`. To run with different domain (See next), run with: `make DOMAIN=ali.trustbloc.dev` 19 | * Will create an Ingress for external access. When running with unregistered dns domains, create records (/etc/hosts) for: 20 | - `issuer.DOMAIN` 21 | * Will deploy Sandbox Demo Applications, pointing to an already provisioned MongoDB specified with `MONGODB_URL` 22 | - `make deploy MONGODB_URL=mongodb://mongoroot:secret@mongodb-demo:27017` 23 | * if running `podman` pass `CONTAINER_CMD=podman` as option to make 24 | * Running with none self-signed certificates: place certs into kustomize/demo-applications/overlays/sandbox/certs, then run with: `make setup-no-certs`. 25 | >files: 26 | - ca.crt 27 | - tls.crt 28 | - tls.key 29 | -------------------------------------------------------------------------------- /k8s/cms/kustomize/cms/overlays/common/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | # Adds namespace to all resources. 8 | #namespace: edge-sandbox-system 9 | 10 | # Value of this field is prepended to the 11 | # names of all resources, e.g. a deployment named 12 | # "wordpress" becomes "alices-wordpress". 13 | # Note that it should also match with the prefix (text before '-') of the namespace 14 | # field above. 15 | commonLabels: 16 | component: cms 17 | group: demo 18 | project: trustbloc 19 | 20 | 21 | apiVersion: kustomize.config.k8s.io/v1beta1 22 | kind: Kustomization 23 | 24 | transformers: 25 | - sedtransform.yml 26 | - sedb64transform.yml 27 | 28 | components: 29 | - ../../components/strapi 30 | - ../../components/oathkeeper 31 | 32 | configMapGenerator: 33 | - behavior: replace 34 | files: 35 | - oathkeeper/config.yml 36 | name: oathkeeper-config 37 | - files: 38 | - oathkeeper/process_template.sh 39 | name: process-template-script 40 | - files: 41 | - oathkeeper/access-rules.tmpl 42 | name: access-rules-template 43 | 44 | 45 | resources: 46 | - oathkeeper/role.yml 47 | - oathkeeper/rolebinding.yml 48 | 49 | patchesStrategicMerge: 50 | - oathkeeper/process-template.yml 51 | -------------------------------------------------------------------------------- /k8s/ace-rp/README.md: -------------------------------------------------------------------------------- 1 | # [Demo Applications](https://github.com/trustbloc/sandbox) k8s deployment # 2 | 3 | 4 | ## pre-requisits 5 | * [Minikube](https://minikube.sigs.k8s.io/docs/start/) with ingress addon. 6 | * GNU sed 7 | * (Optional: Gets installed by make) [kustomize](https://kubectl.docs.kubernetes.io/installation/kustomize/). 8 | 9 | ## Quick Run 10 | * `make all` 11 | * `make deploy-ace-rp` 12 | 13 | ## Cleanup 14 | * `make undeploy-ace-rp` 15 | * `make clean` 16 | 17 | ## options and features 18 | * By default dns domain is `local.trustboc.dev`. To run with different domain (See next), run with: `make DOMAIN=ali.trustbloc.dev` 19 | * Will create an Ingress for external access. When running with unregistered dns domains, create records (/etc/hosts) for: 20 | - `issuer.DOMAIN` 21 | - `rp.DOMAIN` 22 | * Will deploy Sandbox Demo Applications, pointing to an already provisioned MongoDB specified with `MONGODB_URL` 23 | - `make deploy MONGODB_URL=mongodb://mongoroot:secret@mongodb:27017` 24 | * if running `podman` pass `CONTAINER_CMD=podman` as option to make 25 | * Running with none self-signed certificates: place certs into kustomize/demo-applications/overlays/sandbox/certs, then run with: `make setup-no-certs`. 26 | >files: 27 | - ca.crt 28 | - tls.crt 29 | - tls.key 30 | 31 | ## TODO 32 | * Anonymous Comparator RPs 33 | -------------------------------------------------------------------------------- /k8s/rp/README.md: -------------------------------------------------------------------------------- 1 | # [Demo Applications](https://github.com/trustbloc/sandbox) k8s deployment # 2 | 3 | 4 | ## pre-requisits 5 | * [Minikube](https://minikube.sigs.k8s.io/docs/start/) with ingress addon. 6 | * GNU sed 7 | * (Optional: Gets installed by make) [kustomize](https://kubectl.docs.kubernetes.io/installation/kustomize/). 8 | 9 | ## Quick Run 10 | * `make all` 11 | * `make deploy-rp` 12 | 13 | ## Cleanup 14 | * `make undeploy-rp` 15 | * `make clean` 16 | 17 | ## options and features 18 | * By default dns domain is `local.trustboc.dev`. To run with different domain (See next), run with: `make DOMAIN=ali.trustbloc.dev` 19 | * Will create an Ingress for external access. When running with unregistered dns domains, create records (/etc/hosts) for: 20 | - `rp.DOMAIN` 21 | * Will deploy Sandbox Demo Applications, pointing to an already provisioned MongoDB specified with `MONGODB_URL` 22 | - `make deploy MONGODB_URL=mongodb://mongoroot:secret@mongodb-demo:27017` 23 | * if running `podman` pass `CONTAINER_CMD=podman` as option to make 24 | * Running with none self-signed certificates: place certs into kustomize/demo-applications/overlays/sandbox/certs, then run with: `make setup-no-certs`. 25 | >files: 26 | - ca.crt 27 | - tls.crt 28 | - tls.key 29 | 30 | ## Known issues 31 | * RP fails to start without VCS connectivity. 32 | -------------------------------------------------------------------------------- /k8s/rp/kustomize/rp/base/deployment.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # Copyright Gen Digital Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | --- 9 | kind: Deployment 10 | apiVersion: apps/v1 11 | metadata: 12 | name: rp 13 | spec: 14 | replicas: 1 15 | selector: 16 | matchLabels: 17 | app: rp 18 | template: 19 | metadata: 20 | labels: 21 | app: rp 22 | spec: 23 | volumes: 24 | - name: config 25 | configMap: 26 | name: rp-profiles-mapping-config 27 | containers: 28 | - name: rp 29 | envFrom: 30 | - configMapRef: 31 | name: rp-env 32 | - secretRef: 33 | name: rp-env-secret 34 | image: sandbox-rp:latest 35 | imagePullPolicy: IfNotPresent 36 | args: ["start"] 37 | ports: 38 | - containerPort: 8081 39 | protocol: TCP 40 | name: http-port 41 | volumeMounts: 42 | - name: config 43 | mountPath: /etc/rp/config 44 | livenessProbe: 45 | httpGet: 46 | path: /healthcheck 47 | port: http-port 48 | initialDelaySeconds: 30 49 | periodSeconds: 10 50 | failureThreshold: 5 51 | -------------------------------------------------------------------------------- /k8s/jobs/kustomize/jobs/overlays/common/cms/strapi/user-data.yml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # 4 | # SPDX-License-Identifier: Apache-2.0 5 | # 6 | 7 | --- 8 | kind: Job 9 | apiVersion: batch/v1 10 | metadata: 11 | name: user-data 12 | spec: 13 | template: 14 | spec: 15 | volumes: 16 | - name: script 17 | configMap: 18 | name: strapi-user-data-script 19 | restartPolicy: Never 20 | initContainers: 21 | # - name: wait 22 | # image: busybox 23 | # imagePullPolicy: IfNotPresent 24 | # command: ["sh"] 25 | # args: ["-c", "sleep 90"] 26 | - name: healthcheck-ready 27 | image: busybox 28 | imagePullPolicy: IfNotPresent 29 | command: ["/bin/sh"] 30 | args: 31 | - "-c" 32 | - | 33 | while [ "$(wget http://strapi/admin -O- -S >/dev/null 2>&1; echo $?)" -ne 0 ]; 34 | do echo "waiting for strapi/admin endpoint"; 35 | done 36 | containers: 37 | - name: user-data 38 | image: "alpine:latest" 39 | imagePullPolicy: IfNotPresent 40 | command: ["/bin/sh"] 41 | args: ["/opt/user_data.sh"] 42 | volumeMounts: 43 | - name: script 44 | mountPath: /opt 45 | -------------------------------------------------------------------------------- /k8s/login-consent/README.md: -------------------------------------------------------------------------------- 1 | # [login-consent](https://github.com/trustbloc/sandbox) k8s deployment # 2 | 3 | 4 | ## pre-requisits 5 | * [Minikube](https://minikube.sigs.k8s.io/docs/start/) with ingress addon. 6 | * GNU sed 7 | * (Optional: Gets installed by make) [kustomize](https://kubectl.docs.kubernetes.io/installation/kustomize/). 8 | 9 | ## Quick Run 10 | * `make all` 11 | * `make deploy-sandbox` 12 | 13 | ## Cleanup 14 | * `make undeploy-sandbox` 15 | * `make clean` 16 | 17 | ## options and features 18 | * By default dns domain is `local.trustboc.dev`. To run with different domain (See next), run with: `make DOMAIN=ali.trustbloc.dev` 19 | * Will create an Ingress for external access. When running with unregistered dns domains, create records (/etc/hosts) for: 20 | - `login-consent.DOMAIN` 21 | - `hydra.DOMAIN` 22 | - `hydra-admin.DOMAIN` 23 | * Will deploy Sandbox login-consent with [Hydra](https://github.com/ory/hydra), pointing to an already provisioned PostgreSQL specified with `HYDRA_POSTGRES_DSN` 24 | - `make deploy HYDRA_POSTGRES_DSN=postgres://user:pass@host:5432/dbname` 25 | * if running `podman` pass `CONTAINER_CMD=podman` as option to make 26 | * Running with none self-signed certificates: place certs into kustomize/login-consent/overlays/sandbox/certs, then run with: `make setup-no-certs`. 27 | >files: 28 | - ca.crt 29 | - tls.crt 30 | - tls.key 31 | -------------------------------------------------------------------------------- /k8s/login-consent/kustomize/login-consent/overlays/common/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # 2 | # Copyright SecureKey Technologies Inc. All Rights Reserved. 3 | # Copyright Gen Digital Inc. All Rights Reserved. 4 | # 5 | # SPDX-License-Identifier: Apache-2.0 6 | # 7 | 8 | # Adds namespace to all resources. 9 | #namespace: edge-sandbox-system 10 | 11 | # Value of this field is prepended to the 12 | # names of all resources, e.g. a deployment named 13 | # "wordpress" becomes "alices-wordpress". 14 | # Note that it should also match with the prefix (text before '-') of the namespace 15 | # field above. 16 | commonLabels: 17 | component: login-consent 18 | group: demo 19 | project: trustbloc 20 | 21 | 22 | apiVersion: kustomize.config.k8s.io/v1beta1 23 | kind: Kustomization 24 | 25 | secretGenerator: 26 | - behavior: merge 27 | envs: 28 | - hydra/hydra-secret.env 29 | name: hydra-secret 30 | 31 | configMapGenerator: 32 | - behavior: merge 33 | envs: 34 | - hydra/hydra-env.env 35 | name: hydra-env 36 | - behavior: merge 37 | envs: 38 | - login-consent/login-consent.env 39 | name: login-consent-env 40 | - behavior: replace 41 | files: 42 | - claims-config.json 43 | name: login-consent-claims-config 44 | 45 | resources: 46 | - ../../base 47 | 48 | transformers: 49 | - sedtransform.yml 50 | - sedb64transform.yml 51 | 52 | components: 53 | - ../../components/hydra 54 | --------------------------------------------------------------------------------