Merge f204150 into 7704d21

.gitignore

@@ -1,5 +1,6 @@
-.secret/*
-.serverless/*
-node_modules/*
-coverage/*
+.secrets/**
+!.secrets/*.enc
+.serverless/**
+node_modules/**
+coverage/**
 npm-debug.log

.travis.yml

@@ -11,6 +11,9 @@ after_success:
   - 'cat ./coverage/lcov.info | ./node_modules/.bin/coveralls'
 deploy:
   - provider: script
-    script: npm install --production && npm run deploy:dev
+    script:
+      - openssl aes-256-cbc -K $encrypted_3d599e52b404_key -iv $encrypted_3d599e52b404_iv -in .secret/private.key.enc -out .secret/private.key -d
+      - openssl aes-256-cbc -K $encrypted_3d599e52b404_key -iv $encrypted_3d599e52b404_iv -in .secret/public.key.enc -out .secret/public.key -d
+      - npm install --production && npm run deploy:dev
     on:
       branch: develop

README.md

@@ -16,7 +16,7 @@ npm install serverless -g
 npm install
 
 # Generate RSA Keys
-npm run secret:generate
+npm run secrets:generate
 
 # Deploy to dev environment
 npm deploy:dev

config/default.json

@@ -14,8 +14,8 @@
         "refreshTokenExpiration": "30m"
     },
     "certs": {
-        "privateKey": "./.secret/private.key",
-        "publicKey": "./.secret/public.key"
+        "privateKey": "./.secrets/private.key",
+        "publicKey": "./.secrets/public.key"
     },
     "dynamodb": {
         "tables": {

events/tokenPasswordEvent.json

@@ -1,6 +1,6 @@
 {
   "pathParameters": {
-    "realm": "test"
+    "realm": "demo:demo"
   },
   "headers": {
     "Content-Type": "application/x-www-form-urlencoded"

package.json

@@ -37,7 +37,8 @@
     "invoke:tokenRefresh": "SLS_DEBUG=* serverless invoke local --function token --path events/tokenRefreshEvent.json --stage dev",
     "invoke:authorize": "SLS_DEBUG=* serverless invoke local --function authorize --path events/authorizeEvent.json --stage dev",
     "invoke:openid-configuration": "SLS_DEBUG=* serverless invoke local --function openidConfiguration --path events/openid-configuration.json --stage dev",
-    "secret:generate": "node ./tools/generate-private-key.js",
+    "secrets:generate": "node ./tools/generate-private-key.js",
+    "secrets:encrypt": "travis encrypt-file .secrets/private.key .secrets/private.key.enc && travis encrypt-file .secrets/public.key .secrets/public.key.enc",
     "static:up": "aws s3 sync static s3://social-core-dev-files/auth --acl public-read --delete"
   },
   "author": "",

serverless.yml

@@ -7,19 +7,28 @@ service: lambda-auth
 provider:
   name: aws
   runtime: nodejs6.10
+  memorySize: 128
   environment:
     STAGE: dev
 
 # you can overwrite defaults here
   stage: dev
   region: us-west-2
 
-
-# you can add packaging information here
-#package:
-#  exclude:
-#    - exclude-me.js
-#  artifact: my-service-code.zip
+package:
+  exclude:
+    - "**/__tests__/**"
+    - .vscode/**
+    - coverage/**
+    - events/**
+    - migrations/**
+    - static/**
+    - tools/**
+    - .eslintignore
+    - .eslintrc.yml
+    - .npmignore
+    - .travis.yml
+    - README.md
 
 functions:
   openidConfiguration:
@@ -104,6 +113,8 @@ resources:
                 - dynamodb:PutItem
                 - dynamodb:UpdateItem
                 - dynamodb:DeleteItem
-              Resource: arn:aws:dynamodb:*:*:table/${opt:stage}-auth-*
+              Resource:
+                - arn:aws:dynamodb:*:*:table/${opt:stage}-auth-*
+                - arn:aws:dynamodb:*:*:table/social-${opt:stage}-users
         Roles:
           - Ref: IamRoleLambdaExecution

tools/generate-private-key.js

@@ -1,7 +1,7 @@
 const keypair = require('keypair')
 const fs = require('fs')
 
-const path = './.secret'
+const path = './.secrets'
 const pair = keypair()
 
 fs.existsSync(path) || fs.mkdirSync(path)