MHV-68149 Migration to new MHV API Gateway

config/features.yml

@@ -1079,6 +1079,10 @@ features:
     actor_type: user
     description: Show/hide content related to Vitals in Medical Records
     enable_in_development: true
+  mhv_medical_records_migrate_to_api_gateway:
+    actor_type: user
+    description: Enables the switch to the new MHV API Gateway endpoints
+    enable_in_development: true
   mhv_medical_records_phr_refresh_on_login:
     actor_type: user
     description: Enables/disables the PHR refresh for MHV users when logging into VA.gov

lib/bb/client.rb

@@ -21,6 +21,10 @@ class Client < Common::Client::Base
 
     CACHE_TTL = 3600 * 3 # cache for 3 hours
 
+    LEGACY_BASE_PATH = "#{Settings.mhv.rx.host}/mhv-api/patient/".freeze
+    APIGW_BASE_PATH = "#{Settings.mhv.api_gateway.hosts.bluebutton}/".freeze
+    APIGW_AUTH_BASE_PATH = "#{Settings.mhv.api_gateway.hosts.usermgmt}/".freeze
+
     ##
     # PHR (Personal Health Record) refresh
     #
@@ -29,7 +33,14 @@ class Client < Common::Client::Base
     # @return [Common::Collection]
     #
     def get_extract_status
-      json = perform(:get, 'bluebutton/extractstatus', nil, token_headers).body
+      if Flipper.enabled?(:mhv_medical_records_migrate_to_api_gateway)
+        BB::Configuration.custom_base_path = APIGW_BASE_PATH
+        json = perform(:get, 'v1/bluebutton/ess/extractstatus', nil, token_headers).body
+      else
+        BB::Configuration.custom_base_path = LEGACY_BASE_PATH
+        json = perform(:get, 'v1/bluebutton/extractstatus', nil, token_headers).body
+      end
+
       log_refresh_errors(json[:data]) if refresh_final?(json[:data])
       Common::Collection.new(ExtractStatus, **json)
     end
@@ -41,7 +52,13 @@ def get_extract_status
     #
     def get_eligible_data_classes
       Common::Collection.fetch(::EligibleDataClass, cache_key: cache_key('geteligibledataclass'), ttl: CACHE_TTL) do
-        perform(:get, 'bluebutton/geteligibledataclass', nil, token_headers).body
+        if Flipper.enabled?(:mhv_medical_records_migrate_to_api_gateway)
+          BB::Configuration.custom_base_path = APIGW_BASE_PATH
+          perform(:get, 'v1/bluebutton/ess/geteligibledataclass', nil, token_headers).body
+        else
+          BB::Configuration.custom_base_path = LEGACY_BASE_PATH
+          perform(:get, 'v1/bluebutton/geteligibledataclass', nil, token_headers).body
+        end
       end
     end
 
@@ -58,7 +75,13 @@ def post_generate(params)
       form = BB::GenerateReportRequestForm.new(self, params)
       raise Common::Exceptions::ValidationErrors, form unless form.valid?
 
-      perform(:post, 'bluebutton/generate', form.params, token_headers).body
+      if Flipper.enabled?(:mhv_medical_records_migrate_to_api_gateway)
+        BB::Configuration.custom_base_path = APIGW_BASE_PATH
+        perform(:post, 'v1/bluebutton/ess/generate', form.params, token_headers).body
+      else
+        BB::Configuration.custom_base_path = LEGACY_BASE_PATH
+        perform(:post, 'v1/bluebutton/generate', form.params, token_headers).body
+      end
     end
 
     ##
@@ -75,15 +98,23 @@ def get_download_report(doctype, header_callback, yielder)
       # TODO: For testing purposes, use one of the following static URIs:
       # uri = URI("#{Settings.mhv.rx.host}/vetsgov/1mb.file")
       # uri = URI("#{Settings.mhv.rx.host}/vetsgov/90mb.file")
-      uri = URI.join(config.base_path, "bluebutton/bbreport/#{doctype}")
+      if Flipper.enabled?(:mhv_medical_records_migrate_to_api_gateway)
+        BB::Configuration.custom_base_path = APIGW_BASE_PATH
+        uri = URI.join(config.base_path, "v1/bluebutton/ess/bbreport/#{doctype}")
+      else
+        BB::Configuration.custom_base_path = LEGACY_BASE_PATH
+        uri = URI.join(config.base_path, "v1/bluebutton/bbreport/#{doctype}")
+      end
+
       streaming_get(uri, token_headers, header_callback, yielder)
     end
 
     ##
     # Opt user in to VHIE sharing.
     #
     def post_opt_in
-      perform(:post, 'bluebutton/external/optinout/optin', nil, token_headers).body
+      BB::Configuration.custom_base_path = get_base_path
+      perform(:post, 'v1/bluebutton/external/optinout/optin', nil, token_headers).body
     rescue ServiceException => e
       # Ignore the error that the user is already opted in to VHIE sharing.
       raise unless e.message.include? 'already.opted.in'
@@ -93,7 +124,8 @@ def post_opt_in
     # Opt user out of VHIE sharing.
     #
     def post_opt_out
-      perform(:post, 'bluebutton/external/optinout/optout', nil, token_headers).body
+      BB::Configuration.custom_base_path = get_base_path
+      perform(:post, 'v1/bluebutton/external/optinout/optout', nil, token_headers).body
     rescue ServiceException => e
       # Ignore the error that the user is already opted out of VHIE sharing.
       raise unless e.message.include? 'Opt-out consent policy is already set'
@@ -105,11 +137,43 @@ def post_opt_out
     # @return [Hash] an object containing the body of the response
     #
     def get_status
-      perform(:get, 'bluebutton/external/optinout/status', nil, token_headers).body
+      BB::Configuration.custom_base_path = get_base_path
+      perform(:get, 'v1/bluebutton/external/optinout/status', nil, token_headers).body
     end
 
     private
 
+    def get_base_path
+      if Flipper.enabled?(:mhv_medical_records_migrate_to_api_gateway)
+        APIGW_BASE_PATH
+      else
+        LEGACY_BASE_PATH
+      end
+    end
+
+    def token_headers
+      super.merge('x-api-key' => config.x_api_key)
+    end
+
+    def auth_headers
+      super.merge('x-api-key' => config.x_api_key)
+    end
+
+    def get_session_tagged
+      Sentry.set_tags(error: 'mhv_session')
+
+      if Flipper.enabled?(:mhv_medical_records_migrate_to_api_gateway)
+        BB::Configuration.custom_base_path = APIGW_BASE_PATH
+        env = perform(:get, 'v1/usermgmt/auth/session', nil, auth_headers)
+      else
+        BB::Configuration.custom_base_path = LEGACY_BASE_PATH
+        env = perform(:get, '/mhv-api/patient/v1/session', nil, auth_headers)
+      end
+
+      Sentry.get_current_scope.tags.delete(:error)
+      env
+    end
+
     def cache_key(action)
       return nil unless config.caching_enabled?
       return nil if session.user_id.blank?

lib/bb/configuration.rb

@@ -14,18 +14,38 @@ module BB
   # HTTP client configuration for {BB::Client}, sets the token, base path and a service name for breakers and metrics
   #
   class Configuration < Common::Client::Configuration::REST
+    ##
+    # Setter for thread-local variable custom_base_path
+    #
+    def self.custom_base_path=(value)
+      Thread.current[:custom_base_path] = value
+    end
+
+    ##
+    # Getter for thread-local variable custom_base_path
+    #
+    def self.custom_base_path
+      Thread.current[:custom_base_path]
+    end
+
     ##
     # @return [String] Client token set in `settings.yml` via credstash
     #
     def app_token
       Settings.mhv.rx.app_token
     end
 
+    def x_api_key
+      Settings.mhv.medical_records.x_api_key
+    end
+
     ##
     # @return [String] Base path for dependent URLs
     #
     def base_path
-      "#{Settings.mhv.rx.host}/mhv-api/patient/v1/"
+      # We can't use Flipper in this class due to a race condition with Breakers. So we will set
+      # the path in the client and use a thread-local variable here.
+      self.class.custom_base_path || "#{Settings.mhv.rx.host}/mhv-api/patient/v1/"
     end
 
     ##

lib/common/client/concerns/mhv_jwt_session_client.rb

@@ -49,7 +49,11 @@ def get_session
 
         def get_jwt_from_headers(res_headers)
           # Get the JWT token from the headers
-          auth_header = res_headers['authorization']
+          auth_header = if Flipper.enabled?(:mhv_medical_records_migrate_to_api_gateway)
+                          res_headers['x-amzn-remapped-authorization']
+                        else
+                          res_headers['authorization']
+                        end
           if auth_header.nil? || !auth_header.start_with?('Bearer ')
             raise Common::Exceptions::Unauthorized, detail: 'Invalid or missing authorization header'
           end
@@ -78,7 +82,11 @@ def validate_session_params
 
         def get_session_tagged
           Sentry.set_tags(error: 'mhv_session')
-          env = perform(:post, '/mhvapi/security/v1/login', auth_body, auth_headers)
+          env = if Flipper.enabled?(:mhv_medical_records_migrate_to_api_gateway)
+                  perform(:post, '/v1/security/login', auth_body, auth_headers)
+                else
+                  perform(:post, '/mhvapi/security/v1/login', auth_body, auth_headers)
+                end
           Sentry.get_current_scope.tags.delete(:error)
           env
         end
@@ -93,6 +101,9 @@ def patient_fhir_id
 
         def auth_headers
           config.base_request_headers.merge('Content-Type' => 'application/json')
+          if Flipper.enabled?(:mhv_medical_records_migrate_to_api_gateway)
+            config.base_request_headers.merge('x-api-key' => Settings.mhv.medical_records.x_api_key)
+          end
         end
 
         def auth_body