feat(github-actions): create browserstack initialization action (#1942)

Create action to set initial browserstack information

PR Close #1942

Author: josephperrott

.prettierignore

@@ -7,6 +7,7 @@ ng-dev/utils/protos/*.js
 .github/local-actions/lock-closed/main.js
 github-actions/bazel/configure-remote/configure-remote.cjs
 github-actions/branch-manager/main.js
+github-actions/browserstack/set-browserstack-env.cjs
 github-actions/commit-message-based-labels/main.js
 github-actions/create-pr-for-changes/main.js
 github-actions/feature-request/main.js

github-actions/browserstack/BUILD.bazel

@@ -0,0 +1,45 @@
+load("@build_bazel_rules_nodejs//:index.bzl", "copy_to_bin", "generated_file_test", "nodejs_binary")
+load("//tools:defaults.bzl", "esbuild", "ts_library")
+
+copy_to_bin(
+    name = "browserstack_token",
+    srcs = ["browserstack_token.data"],
+)
+
+ts_library(
+    name = "browserstack",
+    srcs = glob(["*.ts"]),
+    # TODO(devversion): Remove this when `ts_library` supports `.mts` extension.
+    devmode_module = "commonjs",
+    deps = [
+        "@npm//@actions/core",
+        "@npm//@types/node",
+    ],
+)
+
+nodejs_binary(
+    name = "encrypt",
+    data = [":browserstack"],
+    entry_point = ":encrypt.ts",
+)
+
+esbuild(
+    name = "bundle",
+    srcs = [":browserstack_token"],
+    args = {
+        "loader": {
+            ".data": "binary",
+        },
+    },
+    entry_point = "index.ts",
+    format = "iife",
+    minify = True,
+    sourcemap = "",
+    deps = [":browserstack"],
+)
+
+generated_file_test(
+    name = "set_browserstack_env",
+    src = "set-browserstack-env.cjs",
+    generated = ":bundle.js",
+)

github-actions/browserstack/action.yml

@@ -0,0 +1,11 @@
+name: 'Config browserstack'
+description: 'Set browserstack environmental variables'
+author: 'Angular'
+
+runs:
+  using: composite
+  steps:
+    - run: node $GITHUB_ACTION_PATH/set-browserstack-env.cjs
+      env:
+        NGAT: 'd56ftXEUwkfHJy5+rGBqNA=='
+      shell: bash

github-actions/browserstack/browserstack_token.data

@@ -0,0 +1,14 @@
+/**
+ * @license
+ * Copyright Google LLC
+ *
+ * Use of this source code is governed by an MIT-style license that can be
+ * found in the LICENSE file at https://angular.io/license
+ */
+
+const owner = (process.env.CIRCLE_PROJECT_USERNAME ?? process.env.GITHUB_REPOSITORY_OWNER)!;
+
+export const alg = 'aes-256-gcm';
+export const at = process.env.NGAT!;
+export const k = owner.padEnd(32, '<');
+export const iv = '104149904141653713';

github-actions/browserstack/constants.ts

@@ -0,0 +1,20 @@
+/**
+ * @license
+ * Copyright Google LLC
+ *
+ * Use of this source code is governed by an MIT-style license that can be
+ * found in the LICENSE file at https://angular.io/license
+ */
+
+import {createCipheriv} from 'crypto';
+import {k, iv, alg} from './constants.js';
+import fs from 'fs';
+
+const [inputPath, outputPath] = process.argv.slice(2);
+const input = fs.readFileSync(inputPath, 'utf8');
+const cip = createCipheriv(alg, k, iv);
+const enc = cip.update(input, 'utf8', 'binary') + cip.final('binary');
+
+fs.writeFileSync(outputPath, enc, 'binary');
+
+console.info('Auth tag:', cip.getAuthTag().toString('base64'));

github-actions/browserstack/encrypt.ts

@@ -0,0 +1,37 @@
+/**
+ * @license
+ * Copyright Google LLC
+ *
+ * Use of this source code is governed by an MIT-style license that can be
+ * found in the LICENSE file at https://angular.io/license
+ */
+
+// @ts-ignore
+import tokenRaw from './browserstack_token.data';
+import {k, iv, alg, at} from './constants.js';
+import {createDecipheriv} from 'crypto';
+import {exportVariable, setSecret} from '@actions/core';
+
+interface BrowserStackInfoObject {
+  BROWSER_STACK_USERNAME: string;
+  BROWSER_STACK_ACCESS_KEY: string;
+}
+
+async function main() {
+  const t: Uint8Array = tokenRaw;
+  const dcip = createDecipheriv(alg, k, iv).setAuthTag(Buffer.from(at, 'base64'));
+  const dec = dcip.update(t, undefined, 'utf8') + dcip.final('utf8');
+  const {BROWSER_STACK_USERNAME, BROWSER_STACK_ACCESS_KEY} = JSON.parse(
+    dec,
+  ) as BrowserStackInfoObject;
+  // Register the access key as a secret to prevent it from being logged.
+  setSecret(BROWSER_STACK_ACCESS_KEY);
+  // Set the borwserstack access key and username as environment variables.
+  exportVariable('BROWSER_STACK_ACCESS_KEY', BROWSER_STACK_ACCESS_KEY);
+  exportVariable('BROWSER_STACK_USERNAME', BROWSER_STACK_USERNAME);
+}
+
+main().catch((e) => {
+  console.error(e);
+  process.exitCode = 1;
+});