add optional authorized team configuration #88
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This pull request introduces an option to configure an
AUTHORIZED_TEAM
which the application will check the users membership of in order to act. The changes are centered around theapp.js
file, with corresponding updates to theREADME.md
,template.yml
, andtest.js
files to reflect the new functionality.The main changes include:
Authorization Mechanism:
app.js
: Added an authorization check to various actions such as opening a pull request, adding a comment, and adding theEMERGENCY_LABEL
. This check verifies if the user performing the action is a member of the authorized team specified in theAUTHORIZED_TEAM
environment variable. If the user is not authorized, a comment is posted on the PR and the emergency label is removed if it was added. This authorization mechanism is implemented in theisAuthorized()
function. [1] [2] [3] [4] [5] [6]README.md
: Updated the documentation to explain the newAUTHORIZED_TEAM
environment variable and the authorization mechanism.template.yml
: Added theAUTHORIZED_TEAM
parameter to the AWS SAM template. [1] [2]Test Cases:
test.js
: Updated and added new test cases to cover the new authorization mechanism. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] [20] [21] [22] [23] [24] [25] [26] [27]