chore: merge develop

.dockerignore

@@ -15,3 +15,5 @@ install-state.gz
 
 # Don't ignore docs markdown files
 !packages/docs/**/*.md
+database.oidc-demo.issuer
+database.oidc-demo.verifier

.eslintrc.cjs

@@ -5,7 +5,7 @@ module.exports = {
     'airbnb-typescript/base',
     'plugin:@typescript-eslint/recommended',
     'plugin:@typescript-eslint/recommended-requiring-type-checking',
-    'plugin:prettier/recommended',
+    'prettier',
   ],
   overrides: [
     {
@@ -21,9 +21,6 @@ module.exports = {
       extends: ['plugin:jest/recommended', 'plugin:jest/style'],
       rules: {
         'jest/prefer-expect-assertions': 'off',
-        '@typescript-eslint/no-unsafe-assignment': 'off',
-        '@typescript-eslint/no-explicit-any': 'off',
-        '@typescript-eslint/no-unsafe-member-access': 'off',
       },
       env: { jest: true },
     },
@@ -43,8 +40,15 @@ module.exports = {
       'LabeledStatement',
       'WithStatement',
     ],
+    'no-param-reassign': [2, { props: false }],
+    'no-await-in-loop': 'off',
+    'no-nested-ternary': 'off',
+    '@typescript-eslint/no-unsafe-assignment': 'off',
+    '@typescript-eslint/no-explicit-any': 'off',
+    '@typescript-eslint/no-unsafe-member-access': 'off',
+    '@typescript-eslint/no-unsafe-argument': 'off',
+    '@typescript-eslint/require-await': 'off',
     // for unused-imports library
-
     '@typescript-eslint/no-unused-vars': 'off',
     'unused-imports/no-unused-imports': 'error',
     'unused-imports/no-unused-vars': [
@@ -64,16 +68,32 @@ module.exports = {
           '**/*.spec.ts',
           '**/*.e2e-spec.ts',
           '**/webpack.config.ts',
+          '**/test/**/*.ts',
+          '**/tests/**/*.ts',
           '**/tsup.config.ts',
           '**/jest.d.ts',
+          '**/test/**',
+          '**/tests/**',
         ],
       },
     ],
-
-    // for prettier
-    'prettier/prettier': ['error', { singleQuote: true }],
     'import/extensions': 'off',
   },
+  overrides: [
+    {
+      // Disable in test files
+      files: [
+        '**/*.spec.ts',
+        '**/*.e2e-spec.ts',
+        '**/test/**/*.ts',
+        '**/tests/**/*.ts',
+      ],
+      rules: {
+        '@typescript-eslint/no-unsafe-member-access': 'off',
+        '@typescript-eslint/no-unsafe-assignment': 'off',
+      },
+    },
+  ],
   ignorePatterns: [
     '**/node_modules/**',
     '**/dist/**',
@@ -85,5 +105,6 @@ module.exports = {
     '**/out',
     '**/.next',
     'tsup.config.ts',
+    'templates',
   ],
 };

.github/workflows/ci.yml

@@ -16,27 +16,27 @@ concurrency:
 jobs:
   main:
     name: Nx Cloud - Main Job
-    uses: nrwl/ci/.github/workflows/nx-cloud-main.yml@v0.11.3
+    uses: nrwl/ci/.github/workflows/nx-cloud-main.yml@v0.13.0
     secrets:
       NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
     with:
-      pnpm-version: 7.30.0
-      node-version: 18.15.0
-      number-of-agents: 3
+      pnpm-version: 8.6.0
+      node-version: 18.16.0
+      number-of-agents: 4
       main-branch-name: 'develop'
       init-commands: |
-        pnpm nx-cloud start-ci-run --stop-agents-after="build" --agent-count=3
+        pnpm exec nx-cloud start-ci-run --stop-agents-after="build" --agent-count=4
       parallel-commands-on-agents: |
-        pnpm nx affected --target=lint --parallel=3
-        pnpm nx affected --target=test:ci --parallel=3
-        pnpm nx affected --target=build --parallel=3
+        pnpm exec nx affected --target=lint --parallel=4
+        pnpm exec nx affected --target=test:ci --parallel=4
+        pnpm exec nx affected --target=build --parallel=4
 
   agents:
     name: Nx Cloud - Agents
-    uses: nrwl/ci/.github/workflows/nx-cloud-agents.yml@v0.11.3
+    uses: nrwl/ci/.github/workflows/nx-cloud-agents.yml@v0.13.0
     secrets:
       NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
     with:
-      number-of-agents: 3
-      pnpm-version: 7.30.0
-      node-version: 18.15.0
+      number-of-agents: 4
+      pnpm-version: 8.6.0
+      node-version: 18.16.0

.github/workflows/deploy_issuer.yml

@@ -0,0 +1,61 @@
+name: Issuer deploy/build action
+
+on:
+  workflow_dispatch:
+  pull_request:
+    branches: [develop]
+    types: [opened, synchronize, reopened]
+    paths:
+      - 'apps/oidc/issuer/**'
+      - 'Dockerfile'
+      - .github/workflows/deploy_issuer.yml
+  push:
+    branches: [develop]
+    paths:
+      - 'packages/oidc/issuer/**'
+      - 'Dockerfile'
+      - .github/workflows/deploy_issuer.yml
+
+jobs:
+  deploy:
+    # Deploy when we PUSH to DEVELOP
+    if: ${{ (github.ref == 'refs/heads/develop') && (github.event_name == 'push') }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - name: Create nx-cloud.env
+        run: echo "NX_CLOUD_ACCESS_TOKEN=$NX_CLOUD_ACCESS_TOKEN" > nx-cloud.env
+        env:
+          NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
+      - name: Build blockchain-lab-um/masca
+        run: docker build . -t blockchain-lab-um/masca
+      - name: Build blockchain-lab-um/issuer
+        run: docker build ./apps/oidc/issuer -t blockchain-lab-um/issuer
+      - name: Change image tag
+        run: docker tag blockchain-lab-um/issuer:latest bclabum.informatika.uni-mb.si/registry/issuer:latest
+      - name: Login to Docker Hub
+        uses: docker/login-action@v2
+        with:
+          registry: bclabum.informatika.uni-mb.si/registry
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: Push to private docker registry
+        run: docker push bclabum.informatika.uni-mb.si/registry/issuer:latest
+  test-build:
+    # Test build on every PR to DEVELOP
+    if: ${{ github.event_name == 'pull_request' }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - name: Create nx-cloud.env
+        run: echo "NX_CLOUD_ACCESS_TOKEN=$NX_CLOUD_ACCESS_TOKEN" > nx-cloud.env
+        env:
+          NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
+      - name: Build blockchain-lab-um/masca
+        run: docker build . -t blockchain-lab-um/masca
+      - name: Build blockchain-lab-um/issuer
+        run: docker build ./apps/oidc/issuer -t blockchain-lab-um/issuer

.github/workflows/deploy_verifier.yml

@@ -0,0 +1,61 @@
+name: Verifier deploy/build action
+
+on:
+  workflow_dispatch:
+  pull_request:
+    branches: [develop]
+    types: [opened, synchronize, reopened]
+    paths:
+      - 'apps/oidc/verifier/**'
+      - 'Dockerfile'
+      - .github/workflows/deploy_verifier.yml
+  push:
+    branches: [develop]
+    paths:
+      - 'packages/oidc/verifier/**'
+      - 'Dockerfile'
+      - .github/workflows/deploy_verifier.yml
+
+jobs:
+  deploy:
+    # Deploy when we PUSH to DEVELOP
+    if: ${{ (github.ref == 'refs/heads/develop') && (github.event_name == 'push') }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - name: Create nx-cloud.env
+        run: echo "NX_CLOUD_ACCESS_TOKEN=$NX_CLOUD_ACCESS_TOKEN" > nx-cloud.env
+        env:
+          NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
+      - name: Build blockchain-lab-um/masca
+        run: docker build . -t blockchain-lab-um/masca
+      - name: Build blockchain-lab-um/verifier
+        run: docker build ./apps/oidc/verifier -t blockchain-lab-um/verifier
+      - name: Change image tag
+        run: docker tag blockchain-lab-um/verifier:latest bclabum.informatika.uni-mb.si/registry/verifier:latest
+      - name: Login to Docker Hub
+        uses: docker/login-action@v2
+        with:
+          registry: bclabum.informatika.uni-mb.si/registry
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: Push to private docker registry
+        run: docker push bclabum.informatika.uni-mb.si/registry/verifier:latest
+  test-build:
+    # Test build on every PR to DEVELOP
+    if: ${{ github.event_name == 'pull_request' }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - name: Create nx-cloud.env
+        run: echo "NX_CLOUD_ACCESS_TOKEN=$NX_CLOUD_ACCESS_TOKEN" > nx-cloud.env
+        env:
+          NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
+      - name: Build blockchain-lab-um/masca
+        run: docker build . -t blockchain-lab-um/masca
+      - name: Build blockchain-lab-um/verifier
+        run: docker build ./apps/oidc/verifier -t blockchain-lab-um/verifier

.github/workflows/publish_core.yaml

@@ -12,11 +12,11 @@ jobs:
       - name: Install pnpm
         uses: pnpm/action-setup@v2
         with:
-          version: 7.30.0
+          version: 8.6.0
       - name: Install node
         uses: actions/setup-node@v3
         with:
-          node-version: 18.15.0
+          node-version: 18.16.0
           registry-url: https://registry.npmjs.org/
           cache: 'pnpm'
       - name: Install deps

.github/workflows/publish_did_ebsi.yaml

@@ -12,11 +12,11 @@ jobs:
       - name: Install pnpm
         uses: pnpm/action-setup@v2
         with:
-          version: 7.30.0
+          version: 8.6.0
       - name: Install node
         uses: actions/setup-node@v3
         with:
-          node-version: 18.15.0
+          node-version: 18.16.0
           registry-url: https://registry.npmjs.org/
           cache: 'pnpm'
       - name: Install deps

.github/workflows/publish_did_key.yaml

@@ -0,0 +1,31 @@
+name: Publish KEY DID Provider
+
+on:
+  workflow_dispatch:
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Install pnpm
+        uses: pnpm/action-setup@v2
+        with:
+          version: 8.6.0
+      - name: Install node
+        uses: actions/setup-node@v3
+        with:
+          node-version: 18.16.0
+          registry-url: https://registry.npmjs.org/
+          cache: 'pnpm'
+      - name: Install deps
+        run: pnpm install --frozen-lockfile
+      - name: Build
+        run: pnpm release-build:did-provider-key
+        env:
+          NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
+      - name: Publish
+        run: npm publish -w @blockchain-lab-um/did-provider-key
+        env:
+          NODE_AUTH_TOKEN: ${{secrets.NPM_AUTH_TOKEN}}

.github/workflows/publish_utils.yaml

@@ -12,11 +12,11 @@ jobs:
       - name: Install pnpm
         uses: pnpm/action-setup@v2
         with:
-          version: 7.30.0
+          version: 8.6.0
       - name: Install node
         uses: actions/setup-node@v3
         with:
-          node-version: 18.15.0
+          node-version: 18.16.0
           registry-url: https://registry.npmjs.org/
           cache: 'pnpm'
       - name: Install deps