serverless.yml

service: easy-tfa-server-aws

frameworkVersion: '3'

provider:
  name: aws
  runtime: nodejs14.x
  httpApi:
    cors: true
  iam:
    role:
      statements:
        - Effect: Allow
          Action:
            - dynamodb:Query
            - dynamodb:GetItem
            - dynamodb:PutItem
            - dynamodb:DeleteItem
            - dynamodb:BatchWriteItem
          Resource:
            Fn::GetAtt:
              - dynamoDbTable
              - Arn
        - Effect: Allow
          Action:
            - dynamodb:Query
          Resource:
            Fn::Join:
              - /
              - - Fn::GetAtt:
                    - dynamoDbTable
                    - Arn
                - index
                - NotificationEndpointIndex
  websocketsApiRouteSelectionExpression: $request.body.event
  environment:
    AWS_NODEJS_CONNECTION_REUSE_ENABLED: 1
    DYNAMODB_TABLE_NAME:
      Ref: dynamoDbTable
    WS_ENDPOINT:
      Fn::Join:
        -
        - - https://
          - Ref: WebsocketsApi
          - .execute-api.
          - Ref: AWS::Region
          - .
          - Ref: AWS::URLSuffix
          - /
          - ${opt:stage, 'dev'}
  region: ${opt:region, 'eu-central-1'}
  stage: ${opt:stage, 'dev'}
  logRetentionInDays: 14
  versionFunctions: false
  architecture: arm64

plugins:
  - serverless-webpack

functions:
  healthcheck:
    handler: src/handler/healthcheck.handler
    memorySize: 128
    events:
      - httpApi:
          method: GET
          path: /healthcheck
  config:
    handler: src/handler/config.handler
    memorySize: 128
    events:
      - httpApi:
          method: GET
          path: /config
    environment:
      NOTIFICATION_API_KEY: ${ssm:/easytfa/${opt:stage, 'dev'}/push-notifications/api-key, ''}
      NOTIFICATION_APPLICATION_ID: ${ssm:/easytfa/${opt:stage, 'dev'}/push-notifications/application-id, ''}
      NOTIFICATION_PROJECT_ID: ${ssm:/easytfa/${opt:stage, 'dev'}/push-notifications/project-id, ''}
  publicKey:
    handler: src/handler/publicKey.handler
    memorySize: 512
    events:
      - httpApi:
          method: POST
          path: /public-key-by-hash
  codeQueries:
    handler: src/handler/codeQueries.handler
    memorySize: 512
    events:
      - httpApi:
          method: POST
          path: /code-queries-by-hashes
  message:
    handler: src/handler/message.handler
    memorySize: 512
    events:
      - httpApi:
          method: POST
          path: /message
  registerNotificationEndpoint:
    handler: src/handler/registerNotificationEndpoint.handler
    memorySize: 512
    events:
      - httpApi:
          method: POST
          path: /register-notification-endpoint

  websocketLinking:
    handler: src/handler/websocketLinking.handler
    memorySize: 512
    events:
      - websocket:
          route: 'start-linking'
          routeResponseSelectionExpression: $default
  websocketQuery:
    handler: src/handler/websocketQuery.handler
    memorySize: 512
    events:
      - websocket:
          route: 'query-code'
          routeResponseSelectionExpression: $default
    environment:
      NOTIFICATION_PROJECT_ID: ${ssm:/easytfa/${opt:stage, 'dev'}/push-notifications/project-id, ''}
      NOTIFICATION_FIREBASE_ADMINSDK: ${ssm(raw):/easytfa/${opt:stage, 'dev'}/push-notifications/firebase-adminsdk, ''}

resources:
  Resources:
    dynamoDbTable:
      Type: AWS::DynamoDB::Table
      Properties:
        AttributeDefinitions:
          - AttributeName: primaryKey
            AttributeType: S
          - AttributeName: notificationEndpoint
            AttributeType: S
        KeySchema:
          - AttributeName: primaryKey
            KeyType: HASH
        ProvisionedThroughput:
          ReadCapacityUnits: 1
          WriteCapacityUnits: 1
        TimeToLiveSpecification:
          AttributeName: expirationTime
          Enabled: true
        GlobalSecondaryIndexes:
          - IndexName: NotificationEndpointIndex
            KeySchema:
              - AttributeName: notificationEndpoint
                KeyType: HASH
            Projection:
              ProjectionType: KEYS_ONLY
            ProvisionedThroughput:
              ReadCapacityUnits: 1
              WriteCapacityUnits: 1

custom:
  dynamodb:
    stages:
      - dev
  webpack:
    webpackConfig: './webpack.config.js'
    includeModules:
      forceExclude:
        - aws-sdk
        - fast-crc32c
        - request
package:
  individually: true