feat: implement create demo organization (#2009)

Author: hvn2k1

api-description/apidocs.swagger.yaml

@@ -5112,6 +5112,7 @@ definitions:
       - ORGANIZATION_TRIAL_CONVERTED
       - ORGANIZATION_OWNER_EMAIL_CHANGED
       - ORGANIZATION_UPDATED
+      - DEMO_ORGANIZATION_CREATED
       - FLAG_TRIGGER_CREATED
       - FLAG_TRIGGER_RESET
       - FLAG_TRIGGER_DESCRIPTION_CHANGED

api-description/web-api.swagger.yaml

@@ -2929,6 +2929,64 @@ paths:
             $ref: '#/definitions/environmentConvertTrialProjectRequest'
       tags:
         - Project
+  /v1/environment/create_demo_organization:
+    post:
+      summary: Create Demo Organization
+      description: Create a demo organization. To call this API, you need an `SYSTEM_ADMIN` role.
+      operationId: web.v1.environment.create_demo_organization
+      responses:
+        "200":
+          description: A successful response.
+          schema:
+            $ref: '#/definitions/environmentCreateDemoOrganizationResponse'
+        "400":
+          description: Returned for bad requests that may have failed validation.
+          schema:
+            $ref: '#/definitions/googlerpcStatus'
+          examples:
+            application/json:
+              code: 3
+              details: []
+              message: invalid arguments error
+        "401":
+          description: Request could not be authenticated (authentication required).
+          schema:
+            $ref: '#/definitions/googlerpcStatus'
+          examples:
+            application/json:
+              code: 16
+              details: []
+              message: not authenticated
+        "403":
+          description: Request does not have permission to access the resource.
+          schema:
+            $ref: '#/definitions/googlerpcStatus'
+          examples:
+            application/json:
+              code: 7
+              details: []
+              message: not authorized
+        "503":
+          description: Returned for internal errors.
+          schema:
+            $ref: '#/definitions/googlerpcStatus'
+          examples:
+            application/json:
+              code: 13
+              details: []
+              message: internal
+        default:
+          description: An unexpected error response.
+          schema:
+            $ref: '#/definitions/googlerpcStatus'
+      parameters:
+        - name: body
+          in: body
+          required: true
+          schema:
+            $ref: '#/definitions/environmentCreateDemoOrganizationRequest'
+      tags:
+        - Organization
   /v1/environment/create_environment:
     post:
       summary: Create
@@ -10600,6 +10658,7 @@ definitions:
       - ORGANIZATION_TRIAL_CONVERTED
       - ORGANIZATION_OWNER_EMAIL_CHANGED
       - ORGANIZATION_UPDATED
+      - DEMO_ORGANIZATION_CREATED
       - FLAG_TRIGGER_CREATED
       - FLAG_TRIGGER_RESET
       - FLAG_TRIGGER_DESCRIPTION_CHANGED
@@ -10710,6 +10769,23 @@ definitions:
         $ref: '#/definitions/environmentConvertTrialProjectCommand'
   environmentConvertTrialProjectResponse:
     type: object
+  environmentCreateDemoOrganizationRequest:
+    type: object
+    properties:
+      name:
+        type: string
+      urlCode:
+        type: string
+      description:
+        type: string
+    required:
+      - name
+      - urlCode
+  environmentCreateDemoOrganizationResponse:
+    type: object
+    properties:
+      organization:
+        $ref: '#/definitions/bucketeerenvironmentOrganization'
   environmentCreateEnvironmentV2Command:
     type: object
     properties:

pkg/account/api/account_test.go

@@ -2023,5 +2023,5 @@ func setToken(ctx context.Context, isSystemAdmin bool) context.Context {
 		Email:         "email",
 		IsSystemAdmin: isSystemAdmin,
 	}
-	return context.WithValue(ctx, rpc.Key, t)
+	return context.WithValue(ctx, rpc.AccessTokenKey, t)
 }

pkg/account/api/api_test.go

@@ -82,7 +82,7 @@ func createContextWithEmailToken(t *testing.T, email string, isSystemAdmin bool)
 		IsSystemAdmin: isSystemAdmin,
 	}
 	ctx := context.TODO()
-	return context.WithValue(ctx, rpc.Key, token)
+	return context.WithValue(ctx, rpc.AccessTokenKey, token)
 }
 
 func createContextWithInvalidEmailToken(t *testing.T) context.Context {
@@ -95,5 +95,5 @@ func createContextWithInvalidEmailToken(t *testing.T) context.Context {
 		Email:    "bucketeer@",
 	}
 	ctx := context.TODO()
-	return context.WithValue(ctx, rpc.Key, token)
+	return context.WithValue(ctx, rpc.AccessTokenKey, token)
 }

pkg/auditlog/api/api_test.go

@@ -737,7 +737,7 @@ func createContextWithToken(t *testing.T, isSystemAdmin bool) context.Context {
 		IsSystemAdmin: isSystemAdmin,
 	}
 	ctx := context.TODO()
-	return context.WithValue(ctx, rpc.Key, token)
+	return context.WithValue(ctx, rpc.AccessTokenKey, token)
 }
 
 func createContextWithTokenRoleUnassigned(t *testing.T) context.Context {
@@ -746,5 +746,5 @@ func createContextWithTokenRoleUnassigned(t *testing.T) context.Context {
 		Email: "test@example.com",
 	}
 	ctx := context.TODO()
-	return context.WithValue(ctx, rpc.Key, token)
+	return context.WithValue(ctx, rpc.AccessTokenKey, token)
 }

pkg/auth/google/authenticator.go

@@ -44,7 +44,7 @@ type googleUserInfo struct {
 	FamilyName    string `json:"family_name"`
 	Picture       string `json:"picture"`
 	Email         string `json:"email"`
-	EmailVerified bool   `json:"email_verified"`
+	EmailVerified bool   `json:"verified_email"`
 }
 
 type Authenticator struct {
@@ -110,6 +110,7 @@ func (a Authenticator) getGoogleUserInfo(
 ) (googleUserInfo, error) {
 	var userInfo googleUserInfo
 	client := config.Client(ctx, t)
+	// API doc: https://googleoauth2.apidog.io/
 	resp, err := client.Get("https://www.googleapis.com/oauth2/v2/userinfo")
 	if err != nil {
 		a.logger.Error("auth/google: failed to get user info", zap.Error(err))

pkg/autoops/api/api_test.go

@@ -1937,7 +1937,7 @@ func createContextWithTokenRoleUnassigned(t *testing.T) context.Context {
 		Email:    "email",
 	}
 	ctx := context.TODO()
-	return context.WithValue(ctx, rpc.Key, token)
+	return context.WithValue(ctx, rpc.AccessTokenKey, token)
 }
 
 func createContextWithTokenRoleOwner(t *testing.T) context.Context {
@@ -1951,5 +1951,5 @@ func createContextWithTokenRoleOwner(t *testing.T) context.Context {
 		IsSystemAdmin: true,
 	}
 	ctx := context.TODO()
-	return context.WithValue(ctx, rpc.Key, token)
+	return context.WithValue(ctx, rpc.AccessTokenKey, token)
 }

pkg/domainevent/domain/message.go

@@ -1311,6 +1311,14 @@ func LocalizedMessage(eventType proto.Event_Type, localizer locale.Localizer) *p
 				localizer.MustLocalizeWithTemplate(locale.Organization),
 			),
 		}
+	case proto.Event_DEMO_ORGANIZATION_CREATED:
+		return &proto.LocalizedMessage{
+			Locale: localizer.GetLocale(),
+			Message: localizer.MustLocalizeWithTemplate(
+				locale.CreatedTemplate,
+				localizer.MustLocalizeWithTemplate(locale.Organization),
+			),
+		}
 	case proto.Event_ORGANIZATION_NAME_CHANGED:
 		return &proto.LocalizedMessage{
 			Locale: localizer.GetLocale(),

pkg/environment/api/api.go

@@ -29,6 +29,7 @@ import (
 	accountclient "github.com/bucketeer-io/bucketeer/pkg/account/client"
 	accdomain "github.com/bucketeer-io/bucketeer/pkg/account/domain"
 	accstorage "github.com/bucketeer-io/bucketeer/pkg/account/storage/v2"
+	v2acc "github.com/bucketeer-io/bucketeer/pkg/account/storage/v2"
 	"github.com/bucketeer-io/bucketeer/pkg/auth"
 	"github.com/bucketeer-io/bucketeer/pkg/auth/google"
 	v2 "github.com/bucketeer-io/bucketeer/pkg/environment/storage/v2"
@@ -79,6 +80,7 @@ type EnvironmentService struct {
 	projectStorage      v2.ProjectStorage
 	orgStorage          v2.OrganizationStorage
 	environmentStorage  v2.EnvironmentStorage
+	accountStorage      v2acc.AccountStorage
 	publisher           publisher.Publisher
 	googleAuthenticator auth.Authenticator
 	verifier            token.Verifier
@@ -110,6 +112,7 @@ func NewEnvironmentService(
 		projectStorage:     v2.NewProjectStorage(mysqlClient),
 		orgStorage:         v2.NewOrganizationStorage(mysqlClient),
 		environmentStorage: v2.NewEnvironmentStorage(mysqlClient),
+		accountStorage:     v2acc.NewAccountStorage(mysqlClient),
 		publisher:          publisher,
 		googleAuthenticator: google.NewAuthenticator(
 			&config.GoogleConfig, logger,

pkg/environment/api/api_test.go

@@ -25,6 +25,7 @@ import (
 	"go.uber.org/zap"
 
 	acmock "github.com/bucketeer-io/bucketeer/pkg/account/client/mock"
+	accstoragemock "github.com/bucketeer-io/bucketeer/pkg/account/storage/v2/mock"
 	"github.com/bucketeer-io/bucketeer/pkg/auth"
 	storagemock "github.com/bucketeer-io/bucketeer/pkg/environment/storage/v2/mock"
 	"github.com/bucketeer-io/bucketeer/pkg/log"
@@ -60,7 +61,20 @@ func createContextWithToken(t *testing.T) context.Context {
 		IsSystemAdmin: true,
 	}
 	ctx := context.TODO()
-	return context.WithValue(ctx, rpc.Key, token)
+	return context.WithValue(ctx, rpc.AccessTokenKey, token)
+}
+
+func createDemoContextWithToken(t *testing.T) context.Context {
+	t.Helper()
+	token := &token.DemoCreationToken{
+		Issuer:   "issuer",
+		Audience: "audience",
+		Expiry:   time.Now().AddDate(100, 0, 0),
+		IssuedAt: time.Now(),
+		Email:    "test@example.com",
+	}
+	ctx := context.TODO()
+	return context.WithValue(ctx, rpc.DemoCreationTokenKey, token)
 }
 
 func createContextWithTokenRoleUnassigned(t *testing.T) context.Context {
@@ -73,7 +87,7 @@ func createContextWithTokenRoleUnassigned(t *testing.T) context.Context {
 		Email:    "email",
 	}
 	ctx := context.TODO()
-	return context.WithValue(ctx, rpc.Key, token)
+	return context.WithValue(ctx, rpc.AccessTokenKey, token)
 }
 func newEnvironmentService(t *testing.T, mockController *gomock.Controller, s storage.Client) *EnvironmentService {
 	t.Helper()
@@ -85,7 +99,28 @@ func newEnvironmentService(t *testing.T, mockController *gomock.Controller, s st
 		orgStorage:         storagemock.NewMockOrganizationStorage(mockController),
 		projectStorage:     storagemock.NewMockProjectStorage(mockController),
 		environmentStorage: storagemock.NewMockEnvironmentStorage(mockController),
+		accountStorage:     accstoragemock.NewMockAccountStorage(mockController),
+		publisher:          publishermock.NewMockPublisher(mockController),
+		logger:             logger.Named("api"),
+	}
+}
+
+func newDemoEnvironmentService(t *testing.T, mockController *gomock.Controller, s storage.Client) *EnvironmentService {
+	t.Helper()
+	logger, err := log.NewLogger()
+	require.NoError(t, err)
+	return &EnvironmentService{
+		accountClient:      acmock.NewMockClient(mockController),
+		mysqlClient:        mysqlmock.NewMockClient(mockController),
+		orgStorage:         storagemock.NewMockOrganizationStorage(mockController),
+		projectStorage:     storagemock.NewMockProjectStorage(mockController),
+		environmentStorage: storagemock.NewMockEnvironmentStorage(mockController),
+		accountStorage:     accstoragemock.NewMockAccountStorage(mockController),
 		publisher:          publishermock.NewMockPublisher(mockController),
 		logger:             logger.Named("api"),
+		opts: &options{
+			logger:            logger,
+			isDemoSiteEnabled: true,
+		},
 	}
 }