update cassandra auth

Author: ohdoking

Dockerfile

@@ -16,6 +16,8 @@ RUN npm install --production
 # Copy the rest of the project files
 COPY . .
 
+COPY certs/sf-class2-root.crt /app/sf-class2-root.crt
+
 # Expose the application port
 EXPOSE 3000
 

certs/sf-class2-root.crt

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

src/lib/cassandra.ts

@@ -3,6 +3,8 @@
 import { Client } from 'cassandra-driver';
 import * as AWS from 'aws-sdk';
 import { SigV4AuthProvider } from 'aws-sigv4-auth-cassandra-plugin'; // Import the SigV4AuthProvider
+import fs from 'fs';
+import path from 'path';
 
 // Load credentials manually if needed
 console.log(AWS.config.credentials)
@@ -11,12 +13,13 @@ if (!AWS.config.credentials) {
   console.log(process.env.AWS_ACCESS_KEY_ID)
   console.log("access_secret_key")
   console.log(process.env.AWS_SECRET_ACCESS_KEY)
-  const credentials = new AWS.Credentials({
+  AWS.config.update({
     accessKeyId: process.env.AWS_ACCESS_KEY_ID,
     secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY,
+    region: process.env.AWS_REGION || 'us-east-1',  // Optionally, you can also configure the region
   });
 
-  AWS.config.credentials = credentials;
+  // AWS.config.credentials = credentials;
 }
 
 // Set up AWS SDK credentials for AWS Keyspaces (only used if connecting to AWS)
@@ -35,15 +38,31 @@ console.log(isAwsKeyspaces)
 console.log(process.env.DB_CONTACT_POINTS, process.env.DB_LOCAL_DATACENTER, process.env.DB_KEYSPACE)
 // Set up Cassandra connection configuration for local and AWS Keyspaces
 if (isAwsKeyspaces) {
+  const certPath = path.resolve(process.cwd(), 'sf-class2-root.crt'); // This points to the file inside the container
+
   console.log("Aws athenticate way")
   console.log(AWS.config.credentials)
+
+  const auth = new SigV4AuthProvider({
+    region: process.env.AWS_REGION, 
+    accessKeyId: process.env.AWS_ACCESS_KEY_ID,
+    secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY
+  });
+
+  const sslOptions = {
+    ca: [fs.readFileSync(certPath, 'utf-8')], // Load the certificate file
+    host: process.env.DB_CONTACT_POINTS,
+    rejectUnauthorized: true,
+  };
+
   // AWS Keyspaces connection setup
   client = new Client({
     contactPoints: [process.env.DB_CONTACT_POINTS || 'cassandra.us-east-1.amazonaws.com'],  // AWS Keyspaces endpoint
     localDataCenter: process.env.DB_LOCAL_DATACENTER || 'us-east-1',
     keyspace: process.env.DB_KEYSPACE || 'your_keyspace',
-    authProvider: new SigV4AuthProvider(AWS.config.credentials), // AWS IAM for authentication
-    sslOptions: { rejectUnauthorized: true }, // Enable SSL for AWS Keyspaces
+    authProvider: auth,
+    sslOptions: sslOptions,
+    protocolOptions: { port: 9142 },
   });
 } else {
   // Local Cassandra connection setup