pay-api-ci.yml

name: PAY API CI

on:
  pull_request:
    branches:
      - main
      - release/*
    paths:
      - "pay-api/**"

defaults:
  run:
    shell: bash
    working-directory: ./pay-api

jobs:
  setup-job:
    runs-on: ubuntu-20.04

    if: github.repository == 'bcgov/sbc-pay'

    steps:
      - uses: actions/checkout@v4
      - run: "true"

  linting:
    needs: setup-job
    runs-on: ubuntu-20.04

    strategy:
      matrix:
        python-version: [3.12]

    steps:
      - uses: actions/checkout@v4
      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}
      - name: Install dependencies
        run: |
          make setup
      - name: Lint with pylint
        id: pylint
        run: |
          make pylint
      - name: Lint with flake8
        id: flake8
        run: |
          make flake8

  testing:
    needs: setup-job
    env:
      FLASK_ENV: "testing"
      # Needs different database than POSTGRES otherwise dropping database doesn't work
      DATABASE_TEST_URL: "postgresql+pg8000://postgres:postgres@localhost:5432/pay-test"
      USE_TEST_KEYCLOAK_DOCKER: "YES"
      USE_DOCKER_MOCK: "YES"

      JWT_OIDC_ISSUER: "http://localhost:8081/auth/realms/demo"
      JWT_OIDC_TEST_WELL_KNOWN_CONFIG: "http://localhost:8081/auth/realms/demo/.well-known/openid-configuration"
      JWT_OIDC_TEST_ALGORITHMS: "RS256"
      JWT_OIDC_TEST_AUDIENCE: "sbc-auth-web"
      JWT_OIDC_TEST_CLIENT_SECRET: "1111111111"
      JWT_OIDC_TEST_JWKS_CACHE_TIMEOUT: "6000"

      SBC_AUTH_ADMIN_CLIENT_ID: "sbc-auth-admin"
      SBC_AUTH_ADMIN_CLIENT_SECRET: "2222222222"

    runs-on: ubuntu-20.04

    strategy:
      matrix:
        python-version: [3.12]

    services:
      postgres:
        image: postgres:15.6
        env:
          POSTGRES_USER: postgres
          POSTGRES_PASSWORD: postgres
          # Needs different database than POSTGRES otherwise dropping database doesn't work
          POSTGRES_DB: pay-test
        ports:
          - 5432:5432
        # needed because the postgres container does not provide a healthcheck
        options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5

    steps:
      - uses: actions/checkout@v4
      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}
      - name: Install docker-compose
        run: |
          sudo curl -L https://github.com/docker/compose/releases/latest/download/docker-compose-$(uname -s)-$(uname -m) -o /usr/local/bin/docker-compose
          sudo chmod +x /usr/local/bin/docker-compose
          docker-compose version
      - name: Install dependencies
        run: |
          make setup
      - name: Test with pytest
        id: test
        run: |
          make test
      - name: Upload coverage to Codecov
        uses: codecov/codecov-action@v3
        with:
          file: ./pay-api/coverage.xml
          flags: payapi
          name: codecov-pay-api
          fail_ci_if_error: false

  build-check:
    needs: setup-job
    runs-on: ubuntu-20.04

    strategy:
      matrix:
        python-version: [3.12]

    steps:
      - uses: actions/checkout@v4
      - name: build to check strictness
        id: build
        run: |
          make build-nc