PLATFORM-3053 Get scanii secrets from AWS SM

mmz-srf · Sep 21, 2023 · e0581ce · e0581ce
1 parent 0e32912
commit e0581ce
Showing 1 changed file with 23 additions and 6 deletions.
diff --git a/lib/config.js b/lib/config.js
@@ -5,6 +5,19 @@ if (process.env.AWS_SAM_LOCAL !== undefined) {
   console.log(process.env);
 }
 
+const headers = {"X-Aws-Parameters-Secrets-Token": process.env.AWS_SESSION_TOKEN}
+const scaniiAPISecrets = process.env.SCANII_API_SECRETS_NAME;
+
+async function getScaniiAPISecrets () {
+    let response = await fetch(`http://localhost:2773/secretsmanager/get?secretId=${scaniiAPISecrets}`, {
+        method: 'GET',
+        headers: headers
+    });
+    let data = await response.json();
+
+    return data.SecretString;
+}
+
 function defaults() {
   CONFIG.KEY = null;
   CONFIG.SECRET = null;
@@ -15,13 +28,17 @@ function defaults() {
   CONFIG.MAX_ATTEMPTS = 10;
   CONFIG.MAX_ATTEMPT_DELAY_MSEC = 30_000;
 
+  const SCANII_API_SECRETS = getScaniiAPISecrets();
+  CONFIG.KEY = SCANII_API_SECRETS['API_KEY'];
+  CONFIG.SECRET = SCANII_API_SECRETS['API_SECRET'];
+
 // extracting config overwrites from the environment:
-  if (process.env.API_KEY) {
-    CONFIG.KEY = process.env.API_KEY;
-  }
-  if (process.env.API_SECRET) {
-    CONFIG.SECRET = process.env.API_SECRET;
-  }
+  // if (process.env.API_KEY) {
+  //   CONFIG.KEY = process.env.API_KEY;
+  // }
+  // if (process.env.API_SECRET) {
+  //   CONFIG.SECRET = process.env.API_SECRET;
+  // }
 
   if (process.env.API_ENDPOINT) {
     CONFIG.API_ENDPOINT = process.env.API_ENDPOINT;