unleash.unleash/src/lib/features/frontend-api/frontend-api-service.ts

import crypto from 'node:crypto';
import type {
    IAuditUser,
    IFlagResolver,
    IUnleashConfig,
    IUser,
} from '../../types/index.js';
import type { Logger } from '../../logger.js';
import type {
    ClientMetricsSchema,
    FrontendApiFeatureSchema,
} from '../../openapi/index.js';
import ApiUser from '../../types/api-user.js';
import type { IApiUser } from '../../types/api-user.js';
import {
    type Context,
    InMemStorageProvider,
    Unleash,
    UnleashEvents,
} from 'unleash-client';
import { ApiTokenType } from '../../types/model.js';
import {
    type FrontendSettings,
    frontendSettingsKey,
} from '../../types/settings/frontend-settings.js';
import { validateOrigins } from '../../util/index.js';
import { BadDataError, InvalidTokenError } from '../../error/index.js';
import { FRONTEND_API_REPOSITORY_CREATED } from '../../metric-events.js';
import { FrontendApiRepository } from './frontend-api-repository.js';
import type { GlobalFrontendApiCache } from './global-frontend-api-cache.js';
import type { IUnleashServices } from '../../services/index.js';

export type Config = Pick<
    IUnleashConfig,
    | 'getLogger'
    | 'frontendApi'
    | 'frontendApiOrigins'
    | 'eventBus'
    | 'flagResolver'
>;

export type Services = Pick<
    IUnleashServices,
    'clientMetricsServiceV2' | 'settingService' | 'clientInstanceService'
>;

export class FrontendApiService {
    private readonly config: Config;

    private readonly logger: Logger;

    private readonly services: Services;

    private flagResolver: IFlagResolver;

    private readonly globalFrontendApiCache: GlobalFrontendApiCache;

    /**
     * This is intentionally a Promise because we want to be able to await
     * until the client (which might be being created by a different request) is ready
     * Check this test that fails if we don't use a Promise: frontend-api.concurrency.e2e.test.ts
     */
    private readonly clients: Map<ApiUser['secret'], Promise<Unleash>> =
        new Map();

    private cachedFrontendSettings: FrontendSettings;

    constructor(
        config: Config,
        services: Services,
        globalFrontendApiCache: GlobalFrontendApiCache,
    ) {
        this.config = config;
        this.logger = config.getLogger('services/frontend-api-service.ts');
        this.services = services;
        this.flagResolver = config.flagResolver;
        this.globalFrontendApiCache = globalFrontendApiCache;
    }

    async getFrontendApiFeatures(
        token: IApiUser,
        context: Context,
    ): Promise<FrontendApiFeatureSchema[]> {
        const client = await this.clientForFrontendApiToken(token);
        const definitions = client.getFeatureToggleDefinitions() || [];
        const sessionId =
            context.sessionId || crypto.randomBytes(18).toString('hex');

        const resultDefinitions = definitions
            .filter((feature) => {
                const enabled = client.isEnabled(feature.name, {
                    ...context,
                    sessionId,
                });
                return enabled;
            })
            .map((feature) => ({
                name: feature.name,
                enabled: Boolean(feature.enabled),
                variant: client.getVariant(feature.name, {
                    ...context,
                    sessionId,
                }),
                impressionData: Boolean(feature.impressionData),
            }));
        return resultDefinitions;
    }

    private resolveProject(user: IUser | IApiUser) {
        if (user instanceof ApiUser) {
            return user.projects;
        }
        return ['default'];
    }

    async registerFrontendApiMetrics(
        token: IApiUser,
        metrics: ClientMetricsSchema,
        ip: string,
        sdkVersion?: string | string[],
    ): Promise<void> {
        FrontendApiService.assertExpectedTokenType(token);

        const environment =
            this.services.clientMetricsServiceV2.resolveMetricsEnvironment(
                token as ApiUser,
                metrics,
            );

        await this.services.clientMetricsServiceV2.registerClientMetrics(
            {
                ...metrics,
                environment,
            },
            ip,
        );

        if (
            metrics.instanceId &&
            typeof sdkVersion === 'string' &&
            this.flagResolver.isEnabled('registerFrontendClient')
        ) {
            const client = {
                appName: metrics.appName,
                instanceId: metrics.instanceId,
                sdkVersion: sdkVersion,
                sdkType: 'frontend' as const,
                environment: environment,
                projects: this.resolveProject(token),
            };
            this.services.clientInstanceService.registerFrontendClient(client);
        }
    }

    private async clientForFrontendApiToken(token: IApiUser): Promise<Unleash> {
        FrontendApiService.assertExpectedTokenType(token);

        let client = this.clients.get(token.secret);
        if (!client) {
            client = this.createClientForFrontendApiToken(token);
            this.clients.set(token.secret, client);
            this.config.eventBus.emit(FRONTEND_API_REPOSITORY_CREATED);
        }

        return client;
    }

    private async createClientForFrontendApiToken(
        token: IApiUser,
    ): Promise<Unleash> {
        const repository = new FrontendApiRepository(
            this.config,
            this.globalFrontendApiCache,
            token,
        );
        const client = new Unleash({
            appName: 'frontend-api',
            url: 'unused',
            storageProvider: new InMemStorageProvider(),
            disableMetrics: true,
            repository,
            disableAutoStart: true,
            skipInstanceCountWarning: true,
        });

        client.on(UnleashEvents.Error, (error) => {
            this.logger.error('We found an event error', error);
        });

        await client.start();

        return client;
    }

    async deleteClientForFrontendApiToken(secret: string): Promise<void> {
        const clientPromise = this.clients.get(secret);
        if (clientPromise) {
            const client = await clientPromise;
            client.destroy();
            this.clients.delete(secret);
        }
    }

    stopAll(): void {
        this.clients.forEach((promise) => promise.then((c) => c.destroy()));
    }

    refreshData(): Promise<void> {
        return this.globalFrontendApiCache.refreshData();
    }

    private static assertExpectedTokenType({ type }: IApiUser) {
        if (!(type === ApiTokenType.FRONTEND || type === ApiTokenType.ADMIN)) {
            throw new InvalidTokenError();
        }
    }

    async setFrontendCorsSettings(
        value: FrontendSettings['frontendApiOrigins'],
        auditUser: IAuditUser,
    ): Promise<void> {
        const error = validateOrigins(value);
        if (error) {
            throw new BadDataError(error);
        }
        const settings = (await this.getFrontendSettings(false)) || {};
        await this.services.settingService.insert(
            frontendSettingsKey,
            { ...settings, frontendApiOrigins: value },
            auditUser,
            false,
        );
    }

    async fetchFrontendSettings(): Promise<FrontendSettings> {
        try {
            this.cachedFrontendSettings =
                await this.services.settingService.getWithDefault(
                    frontendSettingsKey,
                    {
                        frontendApiOrigins: this.config.frontendApiOrigins,
                    },
                );
        } catch (error) {
            this.logger.debug('Unable to fetch frontend settings', error);
        }
        return this.cachedFrontendSettings;
    }

    async getFrontendSettings(useCache = true): Promise<FrontendSettings> {
        if (useCache && this.cachedFrontendSettings) {
            return this.cachedFrontendSettings;
        }
        return this.fetchFrontendSettings();
    }
}