Add Service

clients/client-git/build.gradle.kts

@@ -0,0 +1,7 @@
+dependencies {
+    implementation("org.springframework.boot:spring-boot-starter-web")
+
+    api("io.jsonwebtoken:jjwt-api:${property("jjwtVersion")}")
+    runtimeOnly("io.jsonwebtoken:jjwt-impl:${property("jjwtVersion")}")
+    runtimeOnly("io.jsonwebtoken:jjwt-jackson:${property("jjwtVersion")}")
+}

clients/client-git/src/main/kotlin/kr/proxia/client/git/GitConfig.kt

@@ -0,0 +1,17 @@
+package kr.proxia.client.git
+
+import org.springframework.boot.context.properties.EnableConfigurationProperties
+import org.springframework.context.annotation.Bean
+import org.springframework.context.annotation.Configuration
+import org.springframework.web.client.RestClient
+
+@Configuration
+@EnableConfigurationProperties(GitProperties::class)
+class GitConfig {
+    @Bean
+    fun githubWebRestClient(): RestClient =
+        RestClient
+            .builder()
+            .baseUrl("https://api.github.com")
+            .build()
+}

clients/client-git/src/main/kotlin/kr/proxia/client/git/GitProperties.kt

@@ -0,0 +1,9 @@
+package kr.proxia.client.git
+
+import kr.proxia.client.git.github.GitHubProperties
+import org.springframework.boot.context.properties.ConfigurationProperties
+
+@ConfigurationProperties(prefix = "git")
+data class GitProperties(
+    val github: GitHubProperties,
+)

clients/client-git/src/main/kotlin/kr/proxia/client/git/github/GitHubAppJwtProvider.kt

@@ -0,0 +1,45 @@
+package kr.proxia.client.git.github
+
+import io.jsonwebtoken.Jwts
+import org.springframework.stereotype.Component
+import java.security.KeyFactory
+import java.security.PrivateKey
+import java.security.spec.PKCS8EncodedKeySpec
+import java.util.Base64
+import java.util.Date
+
+@Component
+class GitHubAppJwtProvider {
+    fun createJwt(
+        appId: String,
+        privateKeyPem: String,
+    ): String {
+        val now = System.currentTimeMillis()
+        val issuedAt = Date(now - 60_000)
+        val expiration = Date(now + 600_000)
+
+        return Jwts
+            .builder()
+            .issuer(appId)
+            .issuedAt(issuedAt)
+            .expiration(expiration)
+            .signWith(decodePrivateKey(privateKeyPem))
+            .compact()
+    }
+
+    private fun decodePrivateKey(pem: String): PrivateKey {
+        val cleanPem =
+            pem
+                .replace("-----BEGIN RSA PRIVATE KEY-----", "")
+                .replace("-----END RSA PRIVATE KEY-----", "")
+                .replace("-----BEGIN PRIVATE KEY-----", "")
+                .replace("-----END PRIVATE KEY-----", "")
+                .replace("\\s".toRegex(), "")
+
+        val decoded = Base64.getDecoder().decode(cleanPem)
+        val spec = PKCS8EncodedKeySpec(decoded)
+        val kf = KeyFactory.getInstance("RSA")
+
+        return kf.generatePrivate(spec)
+    }
+}

clients/client-git/src/main/kotlin/kr/proxia/client/git/github/GitHubConnectionClient.kt

@@ -0,0 +1,25 @@
+package kr.proxia.client.git.github
+
+import kr.proxia.client.git.GitProperties
+import org.springframework.stereotype.Component
+import org.springframework.web.client.RestClient
+import org.springframework.web.client.body
+
+@Component
+class GitHubConnectionClient(
+    private val githubWebRestClient: RestClient,
+    private val jwtProvider: GitHubAppJwtProvider,
+    private val properties: GitProperties,
+) {
+    fun getInstallationToken(installationId: String): InstallationTokenResponse {
+        val jwt = jwtProvider.createJwt(properties.github.appId, properties.github.privateKey)
+
+        return githubWebRestClient
+            .post()
+            .uri("/app/installations/$installationId/access_tokens")
+            .header("Authorization", "Bearer $jwt")
+            .header("Accept", "application/vnd.github+json")
+            .retrieve()
+            .body<InstallationTokenResponse>()!!
+    }
+}

clients/client-git/src/main/kotlin/kr/proxia/client/git/github/GitHubProperties.kt

@@ -0,0 +1,6 @@
+package kr.proxia.client.git.github
+
+data class GitHubProperties(
+    val appId: String,
+    val privateKey: String,
+)

clients/client-git/src/main/kotlin/kr/proxia/client/git/github/GitHubRepositoriesApiResponse.kt

@@ -0,0 +1,10 @@
+package kr.proxia.client.git.github
+
+import com.fasterxml.jackson.annotation.JsonProperty
+
+data class GitHubRepositoriesApiResponse(
+    @JsonProperty("total_count")
+    val totalCount: Int,
+    @JsonProperty("repositories")
+    val repositories: List<GitHubRepository>,
+)

clients/client-git/src/main/kotlin/kr/proxia/client/git/github/GitHubRepositoriesResponse.kt

@@ -0,0 +1,6 @@
+package kr.proxia.client.git.github
+
+data class GitHubRepositoriesResponse(
+    val repositories: List<GitHubRepository>,
+    val hasNext: Boolean,
+)

clients/client-git/src/main/kotlin/kr/proxia/client/git/github/GitHubRepository.kt

@@ -0,0 +1,15 @@
+package kr.proxia.client.git.github
+
+import com.fasterxml.jackson.annotation.JsonProperty
+
+data class GitHubRepository(
+    val id: Long,
+    val name: String,
+    @JsonProperty("full_name")
+    val fullName: String,
+    @JsonProperty("default_branch")
+    val defaultBranch: String,
+    val private: Boolean,
+    @JsonProperty("html_url")
+    val htmlUrl: String,
+)

clients/client-git/src/main/kotlin/kr/proxia/client/git/github/GitHubRepositoryClient.kt

@@ -0,0 +1,61 @@
+package kr.proxia.client.git.github
+
+import org.springframework.http.HttpHeaders
+import org.springframework.stereotype.Component
+import org.springframework.web.client.RestClient
+
+@Component
+class GitHubRepositoryClient(
+    private val githubWebRestClient: RestClient,
+) {
+    fun getGithubRepositories(
+        accessToken: String,
+        page: Int,
+        perPage: Int,
+    ): GitHubRepositoriesResponse {
+        val entity =
+            githubWebRestClient
+                .get()
+                .uri {
+                    it
+                        .path("/installation/repositories")
+                        .queryParam("page", page)
+                        .queryParam("per_page", perPage)
+                        .build()
+                }.header("Authorization", "Bearer $accessToken")
+                .header("Accept", "application/vnd.github+json")
+                .retrieve()
+                .toEntity(GitHubRepositoriesApiResponse::class.java)
+
+        return GitHubRepositoriesResponse(
+            repositories = entity.body!!.repositories,
+            hasNext = entity.headers.hasNextPage(),
+        )
+    }
+
+    fun verifyRepositoryAccess(
+        token: String,
+        repoFullName: String,
+    ): Boolean =
+        try {
+            githubWebRestClient
+                .get()
+                .uri("/repos/$repoFullName")
+                .header("Authorization", "Bearer $token")
+                .header("Accept", "application/vnd.github+json")
+                .retrieve()
+                .toBodilessEntity()
+                .statusCode.is2xxSuccessful
+        } catch (_: Exception) {
+            false
+        }
+
+    private fun HttpHeaders.hasNextPage(): Boolean {
+        val link = getFirst("Link") ?: return false
+        return NEXT_PAGE_REGEX.containsMatchIn(link)
+    }
+
+    companion object {
+        private val NEXT_PAGE_REGEX = Regex("""<([^>]+)>\s*;\s*rel="next"""")
+    }
+}

clients/client-git/src/main/kotlin/kr/proxia/client/git/github/InstallationTokenResponse.kt

@@ -0,0 +1,15 @@
+package kr.proxia.client.git.github
+
+import com.fasterxml.jackson.annotation.JsonFormat
+import com.fasterxml.jackson.annotation.JsonProperty
+import java.time.LocalDateTime
+
+data class InstallationTokenResponse(
+    val token: String,
+    @JsonProperty("expires_at")
+    @JsonFormat(shape = JsonFormat.Shape.STRING, pattern = "yyyy-MM-dd'T'HH:mm:ss'Z'", timezone = "UTC")
+    val expiresAt: LocalDateTime,
+    val permissions: Map<String, String>? = null,
+    @JsonProperty("repository_selection")
+    val repositorySelection: String? = null,
+)

clients/client-git/src/main/resources/client-git.yml

@@ -0,0 +1,4 @@
+git:
+  github:
+    app-id: ${GITHUB_APP_ID:}
+    private-key: ${GITHUB_PRIVATE_KEY:}

clients/client-oauth/src/main/kotlin/kr/proxia/client/oauth/github/GitHubOAuthClient.kt

@@ -6,6 +6,7 @@ import org.springframework.http.MediaType
 import org.springframework.stereotype.Component
 import org.springframework.util.LinkedMultiValueMap
 import org.springframework.web.client.RestClient
+import org.springframework.web.client.body
 
 @Component
 class GitHubOAuthClient(
@@ -29,7 +30,7 @@ class GitHubOAuthClient(
             .accept(MediaType.APPLICATION_JSON)
             .body(params)
             .retrieve()
-            .body(GitHubTokenResponse::class.java)!!
+            .body<GitHubTokenResponse>()!!
     }
 
     fun getUserInfo(accessToken: String): GitHubUserInfo =
@@ -38,7 +39,7 @@ class GitHubOAuthClient(
             .uri("/user")
             .header("Authorization", "Bearer $accessToken")
             .retrieve()
-            .body(GitHubUserInfo::class.java)!!
+            .body<GitHubUserInfo>()!!
 
     fun getUserEmails(accessToken: String): List<GitHubEmail> =
         githubApiRestClient

clients/client-oauth/src/main/kotlin/kr/proxia/client/oauth/google/GoogleOAuthClient.kt

@@ -5,6 +5,7 @@ import org.springframework.http.MediaType
 import org.springframework.stereotype.Component
 import org.springframework.util.LinkedMultiValueMap
 import org.springframework.web.client.RestClient
+import org.springframework.web.client.body
 
 @Component
 class GoogleOAuthClient(
@@ -28,7 +29,7 @@ class GoogleOAuthClient(
             .contentType(MediaType.APPLICATION_FORM_URLENCODED)
             .body(params)
             .retrieve()
-            .body(GoogleTokenResponse::class.java)!!
+            .body<GoogleTokenResponse>()!!
     }
 
     fun getUserInfo(accessToken: String): GoogleUserInfo =
@@ -37,5 +38,5 @@ class GoogleOAuthClient(
             .uri("/oauth2/v2/userinfo")
             .header("Authorization", "Bearer $accessToken")
             .retrieve()
-            .body(GoogleUserInfo::class.java)!!
+            .body<GoogleUserInfo>()!!
 }

core/core-api/build.gradle.kts

@@ -21,6 +21,7 @@ dependencies {
     implementation(project(":storage:db-core"))
     implementation(project(":clients:client-oauth"))
     implementation(project(":clients:client-aws"))
+    implementation(project(":clients:client-git"))
     implementation(project(":clients:client-docker"))
     implementation(project(":support:logging"))
     implementation(project(":support:monitoring"))