mirror of
https://github.com/Sea-Haven-Industries/shoc-backend.git
synced 2026-09-30 20:03:11 +00:00
dc251c42d4
The Elastic Beanstalk nginx proxy kept its 1 MB default body limit, so every media upload over ~1 MB got an nginx 413 before reaching the API. Ship a .platform nginx override (120M) in the bundle and assert it in the bundle contract. Apply the client-confirmed contract: photos up to 10 MB (JPEG/PNG/HEIC), videos up to 100 MB (MP4/MOV), at most 10 photos and 3 videos per work order, with stable generic rejection messages. The request ceiling (110 MB) sits between the per-kind caps and the proxy so oversize files get the generic message. The vendor portal accepts the same photo/video types and caps.
40 lines
1.4 KiB
Bash
Executable file
40 lines
1.4 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
#
|
|
# Validate the exact Elastic Beanstalk bundle that a release will upload.
|
|
set -euo pipefail
|
|
|
|
BUNDLE="${1:-.artifacts/elastic-beanstalk/site.zip}"
|
|
|
|
die() {
|
|
printf 'ERR %s\n' "$1" >&2
|
|
exit 1
|
|
}
|
|
|
|
[[ -f "$BUNDLE" ]] || die "bundle does not exist: $BUNDLE"
|
|
[[ "$BUNDLE" == *.zip ]] || die "bundle must be a .zip file"
|
|
|
|
contents_file="$(mktemp)"
|
|
webhook_file="$(mktemp)"
|
|
nginx_file="$(mktemp)"
|
|
trap 'rm -f "$contents_file" "$webhook_file" "$nginx_file"' EXIT
|
|
|
|
unzip -tq "$BUNDLE"
|
|
unzip -Z1 "$BUNDLE" > "$contents_file"
|
|
grep -Fxq "efbundle" "$contents_file"
|
|
grep -Fxq ".ebextensions/01_migrations.config" "$contents_file"
|
|
grep -Fxq ".ebextensions/02_webhook_config.config" "$contents_file"
|
|
grep -Fxq ".platform/nginx/conf.d/01_upload_body_size.conf" "$contents_file"
|
|
|
|
unzip -p "$BUNDLE" .ebextensions/02_webhook_config.config > "$webhook_file"
|
|
grep -Fxq ' WorkOrderWebhook__Enabled: "true"' "$webhook_file"
|
|
grep -Fxq ' WorkOrderWebhook__Region: us-east-1' "$webhook_file"
|
|
grep -Fxq \
|
|
' WorkOrderWebhook__SecretId: arn:aws:secretsmanager:us-east-1:011934824531:secret:workorder-ingest/shoc-webhook-hmac-puYTcB' \
|
|
"$webhook_file"
|
|
|
|
# Without this override the platform nginx caps request bodies at 1 MB (SH-383).
|
|
unzip -p "$BUNDLE" .platform/nginx/conf.d/01_upload_body_size.conf > "$nginx_file"
|
|
grep -Fxq 'client_max_body_size 120M;' "$nginx_file"
|
|
|
|
printf 'PASS: Elastic Beanstalk bundle contract (%s bytes)\n' \
|
|
"$(wc -c < "$BUNDLE" | tr -d ' ')"
|