Merge branch 'alpha' into maxgfr/skill-refacto

maxgfr · maxgfr · commit eb1096bf1d56 · 2026-03-31T12:06:23.000+02:00
diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
@@ -21,6 +21,7 @@ jobs:
       EGAPRO_PROCONNECT_ISSUER: ${{ secrets.EGAPRO_PROCONNECT_ISSUER }}
       EGAPRO_WEEZ_API_URL: ${{ secrets.EGAPRO_WEEZ_API_URL }}
       EGAPRO_SUIT_API_URL: ${{ secrets.EGAPRO_SUIT_API_URL }}
+      EGAPRO_SUIT_API_KEY: ${{ secrets.EGAPRO_SUIT_API_KEY }}
       S3_ENDPOINT: http://localhost:9000
       S3_REGION: us-east-1
       S3_ACCESS_KEY_ID: minioadmin
diff --git a/.kontinuous/env/dev/templates/suit.sealed-secret.yaml b/.kontinuous/env/dev/templates/suit.sealed-secret.yaml
@@ -0,0 +1,15 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: 'true'
+  name: suit
+spec:
+  encryptedData:
+    EGAPRO_SUIT_API_KEY: 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
+  template:
+    metadata:
+      annotations:
+        sealedsecrets.bitnami.com/cluster-wide: 'true'
+      name: suit
+    type: Opaque
diff --git a/.kontinuous/env/preprod/templates/suit.sealed-secret.yaml b/.kontinuous/env/preprod/templates/suit.sealed-secret.yaml
@@ -0,0 +1,15 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: 'true'
+  name: suit
+spec:
+  encryptedData:
+    EGAPRO_SUIT_API_KEY: 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
+  template:
+    metadata:
+      annotations:
+        sealedsecrets.bitnami.com/cluster-wide: 'true'
+      name: suit
+    type: Opaque
diff --git a/.kontinuous/env/prod/templates/suit.sealed-secret.yaml b/.kontinuous/env/prod/templates/suit.sealed-secret.yaml
@@ -0,0 +1,16 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    sealedsecrets.bitnami.com/namespace-wide: 'true'
+  name: suit
+  namespace: egapro
+spec:
+  encryptedData:
+    EGAPRO_SUIT_API_KEY: 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
+  template:
+    metadata:
+      annotations:
+        sealedsecrets.bitnami.com/namespace-wide: 'true'
+      name: suit
+    type: Opaque
diff --git a/.kontinuous/values.yaml b/.kontinuous/values.yaml
@@ -19,6 +19,8 @@ app:
         name: "api"
     - configMapRef:
         name: "suit"
+    - secretRef:
+        name: "suit"
     - secretRef:
         name: "next-auth"
     - configMapRef:
diff --git a/packages/app/.env.example b/packages/app/.env.example
@@ -11,6 +11,7 @@ NEXT_PUBLIC_MATOMO_URL=""
 NEXT_PUBLIC_MATOMO_SITE_ID=""
 EGAPRO_GIP_MDS_API_URL="http://localhost:3000/api/gip-mds/mock"
 EGAPRO_SUIT_API_URL=""
+EGAPRO_SUIT_API_KEY="dev-suit-api-key-minimum-32-chars-long"
 EGAPRO_MOCK_SUIT_SANCTION="true"
 NEXT_PUBLIC_EGAPRO_ENV="dev"
 S3_ENDPOINT="http://localhost:9000"
diff --git a/packages/app/CLAUDE.md b/packages/app/CLAUDE.md
@@ -385,6 +385,4 @@ pnpm db:studio    # opens Drizzle Studio (UI to inspect the database)
 
 All schema properties are **camelCase** in TypeScript, automatically mapped to `snake_case` in the database via `casing: "snake_case"` in both `src/server/db/index.ts` and `drizzle.config.ts`. Never specify explicit column names.
 
-**Exception:** the `accounts` table uses snake_case properties (`refresh_token`, `access_token`, etc.) because `@auth/drizzle-adapter` requires these exact names.
-
 > Full DB rules (transactions, no module-scope Date) → `.claude/rules/database-drizzle.md`
diff --git a/packages/app/drizzle/0015_drop_account_table.sql b/packages/app/drizzle/0015_drop_account_table.sql
@@ -0,0 +1 @@
+DROP TABLE IF EXISTS "app_account";
diff --git a/packages/app/drizzle/meta/_journal.json b/packages/app/drizzle/meta/_journal.json
@@ -106,6 +106,13 @@
 			"when": 1774195200000,
 			"tag": "0014_drop_session_tables",
 			"breakpoints": true
+		},
+		{
+			"idx": 15,
+			"version": "7",
+			"when": 1774281600000,
+			"tag": "0015_drop_account_table",
+			"breakpoints": true
 		}
 	]
 }
diff --git a/packages/app/package.json b/packages/app/package.json
@@ -31,7 +31,6 @@
 		"generate:mock-gip": "tsx scripts/generate-mock-gip-data.ts"
 	},
 	"dependencies": {
-		"@auth/drizzle-adapter": "^1.11.1",
 		"@aws-sdk/client-s3": "^3.1006.0",
 		"@gouvfr/dsfr": "^1.14.3",
 		"@hookform/resolvers": "^5.2.2",
diff --git a/packages/app/playwright.config.ts b/packages/app/playwright.config.ts
@@ -12,7 +12,9 @@ export default defineConfig({
 	fullyParallel: true,
 	forbidOnly: !!process.env.CI,
 	retries: process.env.CI ? 2 : 0,
-	workers: process.env.CI ? 1 : undefined,
+	// All tests share the same database record (SIREN 130025265), so parallel
+	// execution causes race conditions between declaration and compliance tests.
+	workers: 1,
 	reporter: process.env.CI ? "github" : "list",
 	timeout: 60_000,
 	use: {
diff --git a/packages/app/src/app/api/auth/logout/route.ts b/packages/app/src/app/api/auth/logout/route.ts
@@ -1,7 +1,7 @@
 import { type NextRequest, NextResponse } from "next/server";
+import { getToken } from "next-auth/jwt";
 
 import { env } from "~/env";
-import { auth } from "~/server/auth";
 import { terminateProConnectSession } from "~/server/auth/proconnect-logout";
 
 /**
@@ -11,14 +11,14 @@ import { terminateProConnectSession } from "~/server/auth/proconnect-logout";
  * The browser is always redirected to / (home page) — the ProConnect end_session
  * is called server-side to avoid post_logout_redirect_uri registration issues.
  */
-export async function GET(_request: NextRequest) {
-	const session = await auth();
+export async function GET(request: NextRequest) {
+	const token = await getToken({ req: request });
 	// Use the public origin from NEXTAUTH_URL to avoid localhost redirects behind reverse proxies
 	const baseUrl = new URL(env.NEXTAUTH_URL).origin;
 
-	if (session?.user?.id) {
+	if (token?.id_token) {
 		// Terminate ProConnect OIDC session server-side (fire-and-forget)
-		await terminateProConnectSession(session.user.id);
+		await terminateProConnectSession(token.id_token);
 	}
 
 	const response = NextResponse.redirect(new URL("/", baseUrl));
diff --git a/packages/app/src/app/api/v1/export/declarations/route.ts b/packages/app/src/app/api/v1/export/declarations/route.ts
@@ -6,15 +6,20 @@ import {
 	fetchSubmittedDeclarations,
 } from "~/modules/export/fetchDeclarations";
 import { exportDeclarationsQuerySchema } from "~/modules/export/schemas";
+import { verifySuitApiKey } from "~/server/services/suitApiAuth";
 
 /**
  * GET /api/v1/export/declarations?date_begin=YYYY-MM-DD&date_end=YYYY-MM-DD
  *
- * Public REST API returning submitted declarations as JSON.
+ * Secured REST API returning submitted declarations as JSON.
+ * Requires a valid SUIT API key in the Authorization: Bearer header.
  * - date_begin (required): start date (inclusive), filters on submission date (updatedAt, UTC)
  * - date_end (optional): end date (exclusive). If omitted, returns only date_begin day.
  */
 export async function GET(request: Request) {
+	const authResult = verifySuitApiKey(request);
+	if (authResult !== true) return authResult;
+
 	try {
 		const url = new URL(request.url);
 		const parsed = exportDeclarationsQuerySchema.safeParse({
diff --git a/packages/app/src/e2e/declaration.e2e.ts b/packages/app/src/e2e/declaration.e2e.ts
@@ -13,8 +13,7 @@ async function goToStep(page: Page, step: number) {
 test.describe("Declaration workflow", () => {
 	test.describe.configure({ mode: "serial" });
 
-	// Reset DB state before this suite runs — guards against compliance tests
-	// interleaving and setting the declaration to 'submitted'.
+	// Reset DB state before this suite runs so it starts from a clean slate.
 	test.beforeAll(async () => {
 		await resetDeclarationToDraft();
 	});
diff --git a/packages/app/src/env.js b/packages/app/src/env.js
@@ -46,6 +46,7 @@ export const env = createEnv({
 		EGAPRO_PROCONNECT_ISSUER: z.string().url(),
 		EGAPRO_WEEZ_API_URL: z.string().url(),
 		EGAPRO_SUIT_API_URL: z.string().url(),
+		EGAPRO_SUIT_API_KEY: z.string().min(32),
 		S3_ENDPOINT: z.string().url(),
 		S3_REGION: z.string(),
 		S3_ACCESS_KEY_ID: z.string(),
@@ -88,6 +89,7 @@ export const env = createEnv({
 		EGAPRO_PROCONNECT_ISSUER: process.env.EGAPRO_PROCONNECT_ISSUER,
 		EGAPRO_WEEZ_API_URL: process.env.EGAPRO_WEEZ_API_URL,
 		EGAPRO_SUIT_API_URL: process.env.EGAPRO_SUIT_API_URL,
+		EGAPRO_SUIT_API_KEY: process.env.EGAPRO_SUIT_API_KEY,
 		S3_ENDPOINT: process.env.S3_ENDPOINT,
 		S3_REGION: process.env.S3_REGION,
 		S3_ACCESS_KEY_ID: process.env.S3_ACCESS_KEY_ID,
diff --git a/packages/app/src/modules/declarationPdf/TransmittedPdfDocument.tsx b/packages/app/src/modules/declarationPdf/TransmittedPdfDocument.tsx
@@ -1,10 +1,9 @@
 import { Document, Page, Text, View } from "@react-pdf/renderer";
-
+import { formatLongDate } from "~/modules/domain";
 import type {
 	TransmittedPdfData,
 	TransmittedPdfOpinion,
 } from "./buildTransmittedPdfData";
-import { formatLongDate } from "~/modules/domain";
 import { ensurePdfFontsRegistered } from "./pdfFonts";
 import { styles } from "./pdfStyles";
 
diff --git a/packages/app/src/modules/export/__tests__/SwaggerUI.test.tsx b/packages/app/src/modules/export/__tests__/SwaggerUI.test.tsx
@@ -13,7 +13,7 @@ vi.mock("next/script", () => ({
 		strategy?: string;
 	}) => {
 		if (onLoad) onLoadCallbacks.push(onLoad);
-		return <script data-testid="next-script" data-src={src} />;
+		return <script data-src={src} data-testid="next-script" />;
 	},
 }));
 
diff --git a/packages/app/src/modules/export/__tests__/exportApi.test.ts b/packages/app/src/modules/export/__tests__/exportApi.test.ts
@@ -15,6 +15,14 @@ vi.mock("~/modules/export/queries", () => ({
 	fetchCseOpinionsByDeclaration: (...args: unknown[]) => mockFetchCse(...args),
 }));
 
+const VALID_AUTH_HEADER = "Bearer test-suit-api-key-that-is-at-least-32-chars";
+
+function authedRequest(url: string): Request {
+	return new Request(url, {
+		headers: { Authorization: VALID_AUTH_HEADER },
+	});
+}
+
 describe("GET /api/v1/export/declarations", () => {
 	beforeEach(() => {
 		vi.clearAllMocks();
@@ -24,19 +32,40 @@ describe("GET /api/v1/export/declarations", () => {
 		mockFetchCse.mockResolvedValue(new Map());
 	});
 
-	it("should return 400 when date_begin param is missing", async () => {
+	it("should return 401 when Authorization header is missing", async () => {
 		const { GET } = await import("~/app/api/v1/export/declarations/route");
 		const request = new Request("http://localhost/api/v1/export/declarations");
 		const response = await GET(request);
 
+		expect(response.status).toBe(401);
+	});
+
+	it("should return 401 when API key is invalid", async () => {
+		const { GET } = await import("~/app/api/v1/export/declarations/route");
+		const request = new Request(
+			"http://localhost/api/v1/export/declarations?date_begin=2027-03-15",
+			{ headers: { Authorization: "Bearer wrong-key" } },
+		);
+		const response = await GET(request);
+
+		expect(response.status).toBe(401);
+	});
+
+	it("should return 400 when date_begin param is missing", async () => {
+		const { GET } = await import("~/app/api/v1/export/declarations/route");
+		const request = authedRequest(
+			"http://localhost/api/v1/export/declarations",
+		);
+		const response = await GET(request);
+
 		expect(response.status).toBe(400);
 		const body = await response.json();
 		expect(body.error).toContain("date_begin");
 	});
 
 	it("should return 400 when date_begin format is invalid", async () => {
 		const { GET } = await import("~/app/api/v1/export/declarations/route");
-		const request = new Request(
+		const request = authedRequest(
 			"http://localhost/api/v1/export/declarations?date_begin=2027-3-5",
 		);
 		const response = await GET(request);
@@ -46,7 +75,7 @@ describe("GET /api/v1/export/declarations", () => {
 
 	it("should return 400 when date_end format is invalid", async () => {
 		const { GET } = await import("~/app/api/v1/export/declarations/route");
-		const request = new Request(
+		const request = authedRequest(
 			"http://localhost/api/v1/export/declarations?date_begin=2027-03-15&date_end=bad",
 		);
 		const response = await GET(request);
@@ -58,7 +87,7 @@ describe("GET /api/v1/export/declarations", () => {
 
 	it("should return empty declarations when no match", async () => {
 		const { GET } = await import("~/app/api/v1/export/declarations/route");
-		const request = new Request(
+		const request = authedRequest(
 			"http://localhost/api/v1/export/declarations?date_begin=2027-03-15",
 		);
 		const response = await GET(request);
@@ -74,7 +103,7 @@ describe("GET /api/v1/export/declarations", () => {
 
 	it("should use date_end when provided", async () => {
 		const { GET } = await import("~/app/api/v1/export/declarations/route");
-		const request = new Request(
+		const request = authedRequest(
 			"http://localhost/api/v1/export/declarations?date_begin=2027-03-15&date_end=2027-03-20",
 		);
 		const response = await GET(request);
@@ -89,7 +118,7 @@ describe("GET /api/v1/export/declarations", () => {
 		mockFetchSubmitted.mockRejectedValue(new Error("DB connection failed"));
 
 		const { GET } = await import("~/app/api/v1/export/declarations/route");
-		const request = new Request(
+		const request = authedRequest(
 			"http://localhost/api/v1/export/declarations?date_begin=2027-03-15",
 		);
 		const response = await GET(request);
@@ -150,7 +179,7 @@ describe("GET /api/v1/export/declarations", () => {
 		]);
 
 		const { GET } = await import("~/app/api/v1/export/declarations/route");
-		const request = new Request(
+		const request = authedRequest(
 			"http://localhost/api/v1/export/declarations?date_begin=2027-01-01&date_end=2027-01-03",
 		);
 		const response = await GET(request);
@@ -198,7 +227,7 @@ describe("GET /api/v1/export/declarations", () => {
 		]);
 
 		const { GET } = await import("~/app/api/v1/export/declarations/route");
-		const request = new Request(
+		const request = authedRequest(
 			"http://localhost/api/v1/export/declarations?date_begin=2027-03-15",
 		);
 		const response = await GET(request);
diff --git a/packages/app/src/modules/export/fetchDeclarations.ts b/packages/app/src/modules/export/fetchDeclarations.ts
@@ -1,14 +1,14 @@
 // Types and pure functions for building the declaration JSON response.
 // DB queries are in queries.ts (server-only, not unit-testable).
 
+export type { DeclarationRow } from "./queries";
 // Re-export queries for route handler convenience
 export {
 	fetchCategoriesByDeclaration,
 	fetchCseOpinionsByDeclaration,
 	fetchIndicatorGByDeclaration,
 	fetchSubmittedDeclarations,
 } from "./queries";
-export type { DeclarationRow } from "./queries";
 
 import type { DeclarationRow } from "./queries";
 
diff --git a/packages/app/src/modules/export/openapi.ts b/packages/app/src/modules/export/openapi.ts
@@ -191,13 +191,24 @@ export const openApiSpec = {
 	info: {
 		title: "EGAPRO — API d'export des déclarations",
 		description:
-			"API REST publique permettant de consulter les déclarations d'égalité professionnelle soumises sur la plateforme EGAPRO, filtrées par date de soumission.",
+			"API REST sécurisée permettant de consulter les déclarations d'égalité professionnelle soumises sur la plateforme EGAPRO, filtrées par date de soumission. L'accès nécessite une clé API (Bearer token).",
 		version: "1.0.0",
 		contact: {
 			name: "Équipe EGAPRO — DNUM",
 		},
 	},
 	servers: [{ url: "/" }],
+	components: {
+		securitySchemes: {
+			bearerAuth: {
+				type: "http",
+				scheme: "bearer",
+				description:
+					"Clé API SUIT. Utiliser le header : Authorization: Bearer <clé>",
+			},
+		},
+	},
+	security: [{ bearerAuth: [] }],
 	paths: {
 		"/api/v1/export/declarations": {
 			get: {
@@ -254,6 +265,22 @@ export const openApiSpec = {
 							},
 						},
 					},
+					"401": {
+						description: "Clé API manquante ou invalide",
+						content: {
+							"application/json": {
+								schema: {
+									type: "object",
+									properties: {
+										error: {
+											type: "string",
+											example: "Clé API invalide",
+										},
+									},
+								},
+							},
+						},
+					},
 					"400": {
 						description: "Paramètres invalides",
 						content: {
diff --git a/packages/app/src/server/auth/__tests__/config.test.ts b/packages/app/src/server/auth/__tests__/config.test.ts
diff --git a/packages/app/src/server/auth/__tests__/logout-route.test.ts b/packages/app/src/server/auth/__tests__/logout-route.test.ts
diff --git a/packages/app/src/server/auth/__tests__/proconnect-logout.test.ts b/packages/app/src/server/auth/__tests__/proconnect-logout.test.ts
diff --git a/packages/app/src/server/auth/config.ts b/packages/app/src/server/auth/config.ts
diff --git a/packages/app/src/server/auth/proconnect-logout.ts b/packages/app/src/server/auth/proconnect-logout.ts
diff --git a/packages/app/src/server/db/schema.ts b/packages/app/src/server/db/schema.ts
diff --git a/packages/app/src/server/services/__tests__/suitApiAuth.test.ts b/packages/app/src/server/services/__tests__/suitApiAuth.test.ts
diff --git a/packages/app/src/server/services/suitApiAuth.ts b/packages/app/src/server/services/suitApiAuth.ts
diff --git a/packages/app/src/test/setup.ts b/packages/app/src/test/setup.ts
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

Original file line number	Diff line number	Diff line change
`@@ -106,6 +106,13 @@`
`106`	`106`	`"when": 1774195200000,`
`107`	`107`	`"tag": "0014_drop_session_tables",`
`108`	`108`	`"breakpoints": true`
	`109`	`+ },`
	`110`	`+ {`
	`111`	`+ "idx": 15,`
	`112`	`+ "version": "7",`
	`113`	`+ "when": 1774281600000,`
	`114`	`+ "tag": "0015_drop_account_table",`
	`115`	`+ "breakpoints": true`
`109`	`116`	`}`
`110`	`117`	`]`
`111`	`118`	`}`