heroku-certs/commands/certs/auto.js

heroku ssl plugin

'use strict'

let co = require('co')
let cli = require('heroku-cli-util')
let certificateDetails = require('../../lib/certificate_details.js')
let _ = require('lodash')

function humanize (value) {
  if (!value) {
    return 'Waiting'
  }
  if (value === 'ok') {
    return 'OK'
  }
  // Remove the following lines once we address this in cedar-acm
  if (value === 'verified') {
    return 'In Progress'
  }
  if (value === 'dns-verified') {
    return 'DNS Verified'
  }
  return value.split('-').map((word) => _.capitalize(word)).join(' ')
}

function * run (context, heroku) {
  let [app, certs, domains] = yield [
    heroku.request({
      path: `/apps/${context.app}`,
      headers: {'Accept': 'application/vnd.heroku+json; version=3.cedar-acm'}
    }),
    heroku.request({
      path: `/apps/${context.app}/sni-endpoints`,
      headers: {'Accept': 'application/vnd.heroku+json; version=3.sni_ssl_cert'}
    }),
    heroku.request({
      path: `/apps/${context.app}/domains`,
      headers: {'Accept': 'application/vnd.heroku+json; version=3.cedar-acm'}
    })
  ]

  let message
  if (app.acm) {
    cli.styledHeader(`Automatic Certificate Management is ${cli.color.green('enabled')} on ${context.app}`)

    if (certs.length === 1 && certs[0].ssl_cert.acm) {
      cli.log('')
      certificateDetails(certs[0])
    }

    domains = domains.filter(domain => domain.kind === 'custom')

    if (domains.length > 0) {
      let columns = [
        {label: 'Domain', key: 'hostname'},
        {label: 'Status', key: 'acm_status', format: humanize}
      ]

      cli.log('')
      cli.table(domains, {columns})
    }

    let _ = require('lodash')

    if (domains.length === 0) {
      message = `Add a custom domain to your app by running: ${cli.color.cmd('heroku domains:add <yourdomain.com>')}`
    } else if (_.some(domains, (domain) => domain.acm_status === 'failed')) {
      message = `Some domains failed validation after multiple attempts, retry by running: ${cli.color.cmd('heroku certs:auto:refresh')}`
    } else if (_.some(domains, (domain) => domain.acm_status === 'failing')) {
      message = `Some domains are failing validation, please verify that your DNS matches: ${cli.color.cmd('heroku domains')}`
    }

    if (message) {
      cli.log('')
      cli.styledHeader(message)
    }
  } else {
    cli.styledHeader(`Automatic Certificate Management is ${cli.color.yellow('disabled')} on ${context.app}`)
  }
}

module.exports = {
  topic: 'certs',
  command: 'auto',
  description: 'Show ACM status for an app.',
  needsApp: true,
  needsAuth: true,
  run: cli.command(co.wrap(run))
}