Deploy admin web on production

.changeset/admin-web-env.md

@@ -0,0 +1,5 @@
+---
+'admin-web': patch
+---
+
+edit .env for admin-web

.changeset/change.md

@@ -0,0 +1,6 @@
+---
+'admin-api': major
+'admin-web': major
+---
+
+init admin-api and admin-web

.changeset/enhance-search-engine.md

@@ -0,0 +1,5 @@
+---
+'api': minor
+---
+
+Enhance search engine with Elasticsearch

.changeset/fix-health-check.md

@@ -0,0 +1,5 @@
+---
+'admin-api': patch
+---
+
+Fix health check path in admin-api

.changeset/old-insects-sit.md

@@ -0,0 +1,7 @@
+---
+'admin-web': patch
+'admin-api': patch
+'web': patch
+---
+
+fix broken build in previous release

.changeset/pre.json

@@ -0,0 +1,27 @@
+{
+  "mode": "exit",
+  "tag": "beta",
+  "initialVersions": {
+    "admin-api": "0.1.1",
+    "admin-web": "0.1.1",
+    "api": "1.5.0",
+    "reg-scraper": "1.1.3",
+    "web": "1.6.0",
+    "web-e2e": "0.0.1",
+    "@cgr/codegen": "1.2.0",
+    "@cgr/course-utils": "1.0.2",
+    "@cgr/project-config": "1.0.0",
+    "@cgr/schema": "1.1.1"
+  },
+  "changesets": [
+    "admin-web-env",
+    "change",
+    "enhance-search-engine",
+    "fix-health-check",
+    "old-insects-sit",
+    "spotty-gifts-flash",
+    "thin-houses-rhyme",
+    "unlucky-cars-hang",
+    "violet-sloths-reply"
+  ]
+}

.changeset/spotty-gifts-flash.md

@@ -0,0 +1,5 @@
+---
+'reg-scraper': minor
+---
+
+use cas url instead

.changeset/thin-houses-rhyme.md

@@ -0,0 +1,5 @@
+---
+'web': minor
+---
+
+feat: explicit warning not reg chula at first page (Close #623)

.changeset/unlucky-cars-hang.md

@@ -0,0 +1,13 @@
+---
+'@cgr/project-config': patch
+'@cgr/course-utils': patch
+'reg-scraper': patch
+'@cgr/codegen': patch
+'@cgr/schema': patch
+'admin-api': patch
+'admin-web': patch
+'api': patch
+'web': patch
+---
+
+bump eslint and fix ci

.changeset/violet-sloths-reply.md

@@ -0,0 +1,8 @@
+---
+'reg-scraper': minor
+'@cgr/schema': minor
+'admin-api': minor
+'api': minor
+---
+
+bump mongoose to 6.12 (fix vulnerabilities)

.dockerignore

@@ -32,3 +32,5 @@ Dockerfile
 # turbo cache
 .turbo
 **/.turbo
+
+volumes/

.gitignore

@@ -51,3 +51,8 @@ data/
 .turbo
 
 out
+
+# opensearch-cli
+.idea
+opensearch.yaml
+apps/opensearch-cli/index/local

.prettierignore

@@ -9,5 +9,6 @@
 pnpm-lock.yaml
 
 # Generate files
+apps/admin-api/src/graphql.ts
 apps/api/src/graphql.ts
 packages/codegen/src/generated/**/*

apps/admin-api/.env.template

@@ -5,9 +5,16 @@ ENV=development
 
 GOOGLE_OAUTH_ID=<insert_client_id>
 GOOGLE_OAUTH_SECRET=<insert_client_secret>
+CLIENT_ID=<inset_client_id>
+CLIENT_SECRET=<insert_client_secret>
+AUTHORIZATION_URL=<insert_authorization_url>
+TOKEN_URL=<insert_token_url>
+USERINFO_URL=<insert_userinfo_url>
+REDIRECT_URI=<insert_redirect_uri(backend_url with validate token path)>
+CORS_ORIGIN=<insert_frontend_url>
 JWT_SECRET=<insert_jwt_secret>
 
-ADMIN_TOKEN=<insert_admin_token>
-
 DASHBOARD_URL=https://appsmith.internal.cugetreg.com/applications/6155d8914a99086ac822a925/pages/61b73ebe0599052fee9c8295
+# don't forget /slack suffix if using discord webhook url
+SLACK_WEBHOOK_URL=https://discord.com/api/webhooks/xxxx/xxxx/slack
 

apps/admin-api/.gitignore

@@ -0,0 +1,11 @@
+# ENV files
+.env.local
+
+.env.development
+.env.production
+.env.local.development
+.env.local.production
+
+generate-typings.js
+
+dist

apps/admin-api/CHANGELOG.md

@@ -1,5 +1,33 @@
 # admin-api
 
+## 1.0.0-beta.3
+
+### Patch Changes
+
+- 7fe7a910: Fix health check path in admin-api
+
+## 1.0.0-beta.2
+
+### Patch Changes
+
+- 02c4acbe: fix broken build in previous release
+
+## 1.0.0-beta.1
+
+### Major Changes
+
+- f771ad38: init admin-api and admin-web
+
+## 0.2.0-beta.0
+
+### Minor Changes
+
+- 79af67e9: bump mongoose to 6.12 (fix vulnerabilities)
+
+### Patch Changes
+
+- 8d9d304b: bump eslint and fix ci
+
 ## 0.1.1
 
 ### Patch Changes

apps/admin-api/Dockerfile

@@ -0,0 +1,45 @@
+# When copying this Dockerfile for use in other apps, don't forget to change the scope (api, web, etc.) in RUN commands
+
+FROM node:18-alpine AS pnpm
+# Check https://github.com/nodejs/docker-node/tree/b4117f9333da4138b03a546ec926ef50a31506c3#nodealpine to understand why libc6-compat might be needed.
+RUN apk add --no-cache libc6-compat
+RUN apk update
+
+ENV PNPM_HOME="/root/.local/share/pnpm"
+ENV PATH="${PATH}:${PNPM_HOME}"
+RUN npm install -g pnpm
+
+# --------------------------------------------------------
+
+FROM pnpm AS pruner
+WORKDIR /app
+RUN pnpm install -g turbo
+COPY . .
+RUN turbo prune --scope=admin-api --docker
+
+# --------------------------------------------------------
+
+FROM pnpm AS builder
+WORKDIR /app
+
+COPY --from=pruner /app/out/json/ .
+COPY --from=pruner /app/out/pnpm-lock.yaml ./pnpm-lock.yaml
+RUN pnpm install --frozen-lockfile
+
+COPY --from=pruner /app/out/full/ .
+COPY turbo.json turbo.json
+RUN pnpm turbo build --filter=admin-api...
+
+# --------------------------------------------------------
+
+FROM pnpm AS runner
+WORKDIR /app
+
+COPY --from=pruner /app/out/json/ .
+COPY --from=pruner /app/out/pnpm-lock.yaml ./pnpm-lock.yaml
+RUN pnpm install --frozen-lockfile --production
+
+COPY --from=builder /app/apps/admin-api/dist/ apps/admin-api/dist/
+COPY --from=builder /app/packages/ packages/
+
+CMD node apps/admin-api/dist/main.js

apps/admin-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "admin-api",
-  "version": "0.1.1",
+  "version": "1.0.0-beta.3",
   "description": "",
   "author": "",
   "private": true,
@@ -14,27 +14,34 @@
     "prebuild": "rimraf dist"
   },
   "dependencies": {
+    "@apollo/server": "^4.7.1",
+    "@cgr/schema": "workspace:*",
+    "@nestjs/apollo": "^11.0.5",
+    "@nestjs/axios": "^2.0.0",
     "@nestjs/cli": "^9.0.0",
     "@nestjs/common": "9.4.0",
     "@nestjs/config": "2.2.0",
     "@nestjs/core": "9.4.0",
-    "@nestjs/graphql": "7.9.8",
+    "@nestjs/graphql": "11.0.5",
+    "@nestjs/jwt": "7.2.0",
     "@nestjs/mongoose": "9.2.1",
     "@nestjs/platform-express": "9.4.0",
     "@nestjs/schedule": "2.1.0",
     "@slack/webhook": "6.0.0",
-    "@thinc-org/chula-courses": "^2.3.0",
+    "axios": "0.23.0",
     "class-transformer": "0.3.1",
     "class-validator": "0.14.0",
-    "graphql": "15.5.0",
-    "mongoose": "6.5.2",
+    "cookie-parser": "1.4.6",
+    "graphql": "16.6.0",
+    "mongoose": "6.12.0",
     "rxjs": "^7.8.0"
   },
   "devDependencies": {
+    "@types/cookie-parser": "^1.4.3",
     "@types/express": "^4.17.16",
     "@types/jest": "28.1.8",
     "@types/node": "^18.11.18",
-    "eslint": "8.34.0",
+    "eslint": "8.49.0",
     "jest": "28.1.3",
     "ts-jest": "28.0.8",
     "ts-morph": "^18.0.0",

apps/admin-api/src/app/app.controller.ts

@@ -1,13 +1,36 @@
-import { Controller, Get } from '@nestjs/common'
+import { Controller, Get, Req, UnauthorizedException, UseGuards } from '@nestjs/common'
+import { Query } from '@nestjs/graphql'
+
+import { Request } from 'express'
+
+import { AuthService } from '@admin-api/auth/auth.service'
+import { JwtAuthGuard } from '@admin-api/auth/oidc.guard'
+import { SkipAuth } from '@admin-api/common/decorators/SkipAuth'
 
 import { AppService } from './app.service'
 
 @Controller()
 export class AppController {
-  constructor(private readonly appService: AppService) {}
+  constructor(
+    private readonly appService: AppService,
+    private readonly authService: AuthService
+  ) {}
 
   @Get()
+  @SkipAuth()
   getHello(): string {
     return this.appService.getHello()
   }
+
+  @Query('me')
+  @UseGuards(JwtAuthGuard)
+  async getMe(@Req() req: Request) {
+    if (!req.cookies['accessToken']) {
+      throw new UnauthorizedException('No access token')
+    }
+
+    return {
+      success: true,
+    }
+  }
 }