[Auto Generated]

Author: jigardafda

azure-pipelines.yml

@@ -12,65 +12,128 @@ pool:
   docker-new
 
 variables:
-- group: pipeline
+- group: ado-gh-sync-vg   # contains GITHUB_APP_ID and GITHUB_APP_INSTALLATION_ID
 
 jobs:
 - job: GitHubSync
   container: node18
   steps:
   - checkout: self
 
+  - task: DownloadSecureFile@1
+    name: githubAppKey
+    inputs:
+      secureFile: 'ado-gh-sync.pem'
+
   - script: |
-      if [ "$(Build.SourceBranch)" != "refs/tags/*" ]; then
-
-        echo "This is a tag push. Sync starting..."
-        BRANCH_NAME=main
-
-        git config --global user.email "jigar.dafda@gmail.com"
-        git config --global user.name "Jigar Dafda"
-
-        git clone https://$(GITHUB_USERNAME):$(GITHUB_PERSONAL_TOKEN)@github.com/gofynd/fdk-store-gql.git
-        cd fdk-store-gql
-        git checkout $BRANCH_NAME
-        rm -rf ./*
-        cd ..
-
-        cp -R `ls | grep -v "fdk-store-gql"` ./fdk-store-gql
-        cp .gitignore.ci ./fdk-store-gql/.gitignore
-
-        cd fdk-store-gql
-        NODE_ENV=development npm i
-        npm run build
-
-        git add .
-        git commit -m "[Auto Generated]"
-        git push origin $BRANCH_NAME
-
-        git tag $(Build.SourceBranchName)
-        git push origin $(Build.SourceBranchName)
-
-        # Create GitHub release
-        RELEASE_TITLE="Release_$(Build.SourceBranchName)"
-        echo $(Build.SourceBranchName)
-        echo $RELEASE_TITLE
-        echo $BRANCH_NAME
-        POST_DATA=$(printf '{
-          "tag_name": "%s",
-          "target_commitish": "%s",
-          "name": "%s",
-          "body": "%s",
-          "draft": false,
-          "prerelease": false
-        }' $(Build.SourceBranchName) $BRANCH_NAME $RELEASE_TITLE "$RELEASE_TITLE")
-        echo $POST_DATA
-        curl -X POST -H "Authorization: token $(GITHUB_PERSONAL_TOKEN)" \
-             -H "Content-Type: application/json" \
-             -d "$POST_DATA" \
-             "https://api.github.com/repos/gofynd/fdk-store-gql/releases"
-
-
-      else
-        echo "This is not a tag push. Exiting..."
-        exit 0
+      set -euo pipefail
+
+      echo "Tag build: $(Build.SourceBranchName)"
+      BRANCH_NAME=main
+
+      git config --global user.email "jigar.dafda@gmail.com"
+      git config --global user.name "Jigar Dafda"
+
+      # ---- Generate GitHub App JWT (RS256) ----
+      export GITHUB_APP_PEM_PATH="$(githubAppKey.secureFilePath)"
+
+      node <<'NODE'
+      const fs = require('fs');
+      const crypto = require('crypto');
+
+      function b64url(input) {
+        return Buffer.from(input).toString('base64')
+          .replace(/=/g, '').replace(/\+/g, '-').replace(/\//g, '_');
+      }
+
+      const appId = process.env.GITHUB_APP_ID;
+      const pemPath = process.env.GITHUB_APP_PEM_PATH;
+
+      if (!appId || !pemPath) {
+        console.error("Missing env: GITHUB_APP_ID / GITHUB_APP_PEM_PATH");
+        process.exit(1);
+      }
+
+      const privateKey = fs.readFileSync(pemPath, 'utf8');
+
+      const now = Math.floor(Date.now() / 1000);
+      const header = { alg: "RS256", typ: "JWT" };
+      const payload = {
+        iat: now - 30,
+        exp: now + 9 * 60, // <= 10 minutes
+        iss: appId
+      };
+
+      const unsigned = `${b64url(JSON.stringify(header))}.${b64url(JSON.stringify(payload))}`;
+      const sign = crypto.createSign('RSA-SHA256');
+      sign.update(unsigned);
+      const signature = sign.sign(privateKey);
+      const jwt = `${unsigned}.${b64url(signature)}`;
+
+      fs.writeFileSync('github_app_jwt.txt', jwt);
+      NODE
+
+      JWT="$(cat github_app_jwt.txt)"
+
+      # ---- Exchange JWT for Installation Access Token ----
+      INSTALL_TOKEN="$(
+        curl -sS -X POST \
+          -H "Authorization: Bearer ${JWT}" \
+          -H "Accept: application/vnd.github+json" \
+          "https://api.github.com/app/installations/${GITHUB_APP_INSTALLATION_ID}/access_tokens" \
+        | node -pe "JSON.parse(require('fs').readFileSync(0,'utf8')).token"
+      )"
+
+      if [ -z "$INSTALL_TOKEN" ] || [ "$INSTALL_TOKEN" = "undefined" ]; then
+        echo "Failed to get installation token"
+        exit 1
       fi
-    displayName: 'Sync with GitHub'
+
+      # Build header for git HTTPS auth with GitHub App token
+      BASIC_B64="$(printf '%s:%s' "x-access-token" "$INSTALL_TOKEN" | base64 | tr -d '\n')"
+      AUTH_HEADER="Authorization: Basic ${BASIC_B64}"
+
+      # ---- Sync flow ----
+      git -c http.extraheader="$AUTH_HEADER" clone https://github.com/gofynd/fdk-store-gql.git
+      cd fdk-store-gql
+      git checkout "$BRANCH_NAME"
+
+      rm -rf ./*
+      cd ..
+
+      cp -R $(ls | grep -v "fdk-store-gql") ./fdk-store-gql
+      cp .gitignore.ci ./fdk-store-gql/.gitignore
+
+      cd fdk-store-gql
+      NODE_ENV=development npm install
+      npm run build
+
+      git add -A
+      git commit -m "[Auto Generated]" || echo "No changes to commit"
+
+      git -c http.extraheader="$AUTH_HEADER" push origin "$BRANCH_NAME"
+
+      git tag "$(Build.SourceBranchName)" || echo "Tag already exists locally"
+      git -c http.extraheader="$AUTH_HEADER" push origin "$(Build.SourceBranchName)"
+
+      # Create GitHub release using installation token
+      RELEASE_TITLE="Release_$(Build.SourceBranchName)"
+      POST_DATA=$(printf '{
+        "tag_name": "%s",
+        "target_commitish": "%s",
+        "name": "%s",
+        "body": "%s",
+        "draft": false,
+        "prerelease": false
+      }' "$(Build.SourceBranchName)" "$BRANCH_NAME" "$RELEASE_TITLE" "$RELEASE_TITLE")
+
+      curl -sS -X POST \
+        -H "Authorization: token ${INSTALL_TOKEN}" \
+        -H "Accept: application/vnd.github+json" \
+        -H "Content-Type: application/json" \
+        -d "$POST_DATA" \
+        "https://api.github.com/repos/gofynd/fdk-store-gql/releases"
+    displayName: 'Sync with GitHub (GitHub App auth)'
+    env:
+      GITHUB_APP_ID: $(GITHUB_APP_ID)
+      GITHUB_APP_INSTALLATION_ID: $(GITHUB_APP_INSTALLATION_ID)

github_app_jwt.txt

@@ -0,0 +1 @@
+eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJpYXQiOjE3NzM2NTMyOTUsImV4cCI6MTc3MzY1Mzg2NSwiaXNzIjoiMzA1NjEyNSJ9.e1xabP3tRDLh5VpODonhNT_qNaJUF8dXvFTmpO9yBihjylorU3bzfVxFpL4QklsQ-gdu6qdgPh_fi8HxW7FTcp5jqDXOAx2DIyqXieQn3r17WcXfjWaheG5MoHzv4GROWQk4YTpjZWMCwjMRP8yoS1Tdhzb_HCcZruFkeWWSzi0EMgMGdWnSgUvEgWht5J2q0AmCojc_wMKp_029LCpgMjW9a3rVI_qiOsDb-eVar14uRVQmApGRkji5evMpV_MG8qpKZS4mx7D0ZNmnV_DgXyZy8-nvQCD6dO9N7ohQDv8-QTBufMZGwACmwuYchr732TOrepLBh3DMpXYofj8VAw

lib/store/index.d.ts

@@ -16,9 +16,7 @@ declare class ApplicationStore {
     PaymentGateways: Record<string, any>;
     private domain;
     private authorizationHeader;
-    orderingSource: string;
-    /** orderingSourceType — set to 'storefront' when orderingSource is set. */
-    orderingSourceType: string;
+    private orderingSource;
     private serverCookies;
     private start_upload_query;
     private complete_upload_query;