deploy-to-s3.yml

name: Deploy to S3

on:
  push:
    branches:
      - dev
    tags:        
      - '*' 

env: 
  environment: ${{ startsWith(github.ref, 'refs/tags/v') && 'UN' || 'dev' }}

jobs:
  install_and_build:
    runs-on: ubuntu-latest

    env:
      CI: false

    environment:
      name: ${{ startsWith(github.ref, 'refs/tags/v') && 'UN' || 'dev' }}
      url: ${{ env.environment == 'UN' && 'https://test.uncefact.org/vckit/explorer/' || 'https://explorer.vckit.showthething.com/' }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v3

      - name: Cache dependencies
        id: cache
        uses: actions/cache@v3
        with:
          path: ~/.pnpm-store
          key: ${{ runner.os }}-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}

      - name: Install Node.js
        uses: actions/setup-node@v3
        with:
          node-version: '18'

      - name: Install pnpm
        run: npm install -g pnpm@8.14.0

      - name: pnpm version
        run: pnpm --version

      - name: Install dependencies
        run: pnpm install

      - name: 'Create env file'
        run: |
          touch packages/demo-explorer/.env
          echo REACT_APP_WALLET_ENDPOINT=${{ vars.REACT_APP_WALLET_ENDPOINT }} >> packages/demo-explorer/.env
          echo REACT_APP_ENCRYPTED_ENDPOINT=${{ vars.REACT_APP_ENCRYPTED_ENDPOINT}} >> packages/demo-explorer/.env
          echo REACT_APP_QRCODE_VERIFY_ENDPOINT=${{ vars.REACT_APP_QRCODE_VERIFY_ENDPOINT }} >> packages/demo-explorer/.env
          echo REACT_APP_SCHEMA_URL=${{ vars.REACT_APP_SCHEMA_URL }} >> packages/demo-explorer/.env
          echo REACT_APP_REMOTE_AGENT_API_KEY=${{ vars.REACT_APP_REMOTE_AGENT_API_KEY }} >> packages/demo-explorer/.env
          echo REACT_APP_DEFAULT_AGENT_ID=${{ vars.REACT_APP_DEFAULT_AGENT_ID }} >> packages/demo-explorer/.env
          cat packages/demo-explorer/.env

      - name: Build explorer
        run: PUBLIC_URL=${{ env.environment == 'UN' && '/vckit/explorer/' || '/' }} pnpm build:js

      - name: Archive artifacts
        uses: actions/upload-artifact@v3
        with:
          name: explorer
          path: packages/demo-explorer/build/explorer

  deploy_to_s3:
    needs: install_and_build
    runs-on: ubuntu-latest

    permissions:
      id-token: write

    environment:
      name: ${{ startsWith(github.ref, 'refs/tags/v') && 'UN' || 'dev' }}
      url: ${{ env.environment == 'UN' && 'https://test.uncefact.org/vckit/explorer/' || 'https://explorer.vckit.showthething.com/' }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v3

      - name: Download artifacts
        uses: actions/download-artifact@v3
        with:
          name: explorer
          path: packages/demo-explorer/build/explorer

      - name: Install AWS CLI
        run: |
          sudo apt-get -q install -y python3-pip
          pip3 install awscli --upgrade --user

      - name: Configure AWS Credentials
        if: ${{ env.environment == 'dev' }}
        uses: aws-actions/configure-aws-credentials@v3
        with:
          role-to-assume: ${{ secrets.AWS_ROLE_GITHUB_ACTION_ARN }}
          aws-region: ${{ vars.AWS_REGION }}
      
      - name: Configure AWS Credentials
        if: ${{ env.environment == 'UN' }}
        uses: aws-actions/configure-aws-credentials@v3
        with:
          role-to-assume: ${{ secrets.AWS_ROLE_GITHUB_ACTION_ARN }}
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ vars.AWS_REGION }}

      - name: Deploy to S3
        run: |
          S3_PATH=${{ env.environment == 'UN' && '/vckit/explorer/' || '/'}}
          aws s3 sync packages/demo-explorer/build/explorer/ s3://${{ vars.AWS_S3_BUCKET_NAME }}$S3_PATH --delete

      - name: Invalidate CloudFront
        run: |
          DISTRIBUTION_ID=${{ vars.AWS_CLOUDFRONT_DISTRIBUTION_ID }}
          INVALIDATION_PATH=${{ env.environment == 'UN' && '/vckit/explorer/*' || '/*'}}

          # Create a new CloudFront invalidation
          aws cloudfront create-invalidation --distribution-id $DISTRIBUTION_ID --paths $INVALIDATION_PATH