feat: allow login via admin ui on safari

[johnpc]

Description of changes

Currently, when pulling a project via amplify pull, it is possible to use Amplify Studio to fetch authentication tokens in browser and pass them off to the CLI's admin-login express server.

However, the local express server cannot be reached in certain browsers due to security settings (including Safari, Brave, and others).

[Warning] [blocked] The page at https://us-east-2.admin.amplifyapp.com/admin/d1v4tl0j988su7/dev/verify/ was not allowed to display insecure content from http://127.0.0.1:4242/amplifyadmin/. (main.aa9ff9bc.chunk.js, line 1)

Currently, this is "solved" with a warning banner, alerting the user to switch to Chrome, Firefox, or Edge (browsers that do not [yet] enforce this policy).

This PR proposes a new solution this problem. First, the browser will hit a GET /ping endpoint to check whether communication with the local express server is possible from the given context, which can be used instead of a known list of working browsers. This also makes SSH authentication workflows possible.

If communication is possible, it will continue to work by passing tokens to the express server.

If communication is not possible, the browser will instead display a "copy code" button that copies the authorization context encoded as a base64 string of the json blob that would typically be passed to the express server. The end user would then paste that base64 string into the terminal prompt where Amplify CLI is running to fetch the tokens.

Before:

After:

If the tokens are passed off via the express server, the express server kills the prompt. If the prompt is used to pass the base64 tokens along, the prompt promise kills the express server.

Issue #, if available

N/A

Description of how you validated changes

• Pulled project, authenticated by pasting base64 string
• Pulled project, authenticated normally via express server

Both paths work as expected.

Checklist

• PR description included
• yarn test passes
• Tests are changed or added
• Relevant documentation is changed or added (and PR referenced)

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[lazpavel]

LGTM

[lazpavel]

nit: for this is probably better to add a lint ignore that adding to the dictionary

[johnpc]

Ideally our spell checker would allow names of dependencies or exports of dependencies

[jhockett]

TIL: https://www.merriam-webster.com/words-at-play/canceled-or-cancelled

[johnpc]

This will require careful alignment with the Studio team. If they don't roll out at the same time, either the code will presented in the web ui (with nowhere to paste it) or the CLI will prompt for a code that does not appear anywhere in the web ui.

[lgtm-com]

This pull request introduces 1 alert when merging 1469b0c into 59c6422 - view on LGTM.com

new alerts:

• 1 for Unused variable, import, function or class

[lgtm-com]

This pull request introduces 1 alert when merging 3820a94 into 59c6422 - view on LGTM.com

new alerts:

• 1 for Unused variable, import, function or class

[lgtm-com]

This pull request introduces 1 alert when merging af36419 into 59c6422 - view on LGTM.com

new alerts:

• 1 for Unused variable, import, function or class

[lgtm-com]

This pull request introduces 1 alert when merging e0eeff9 into d9bdcd8 - view on LGTM.com

new alerts:

• 1 for Unused variable, import, function or class

[lgtm-com]

This pull request introduces 1 alert when merging 83b0589 into 59089dd - view on LGTM.com

new alerts:

• 1 for Unused variable, import, function or class

[johnpc]

I will merge this when the backend is ready

[lgtm-com]

This pull request introduces 1 alert when merging ac06145 into 21ceba1 - view on LGTM.com

new alerts:

• 1 for Unused variable, import, function or class

[codecov-commenter]

Codecov Report

Merging #10407 (ac06145) into master (714f2fa) will decrease coverage by 0.01%.
The diff coverage is 33.33%.

@@            Coverage Diff             @@
##           master   #10407      +/-   ##
==========================================
- Coverage   46.57%   46.56%   -0.02%     
==========================================
  Files         703      703              
  Lines       35246    35256      +10     
  Branches     7134     7134              
==========================================
+ Hits        16417    16418       +1     
- Misses      17042    17051       +9     
  Partials     1787     1787              

Impacted Files	Coverage Δ
...vider-awscloudformation/src/utils/admin-helpers.ts	20.33% <0.00%> (ø)
...lify-provider-awscloudformation/src/admin-login.ts	14.28% <13.63%> (-4.24%)	⬇️
...-awscloudformation/src/utils/admin-login-server.ts	42.85% <62.50%> (+0.21%)	⬆️

📣 Codecov can now indicate which changes are the most critical in Pull Requests. Learn more

[ammarkarachi]

fixes #6965