test oidc setup plural

Author: michaeljguarino

.github/workflows/test-pr.yaml

@@ -0,0 +1,27 @@
+name: CI / Demo PR
+
+env:
+  DOCKER_METADATA_PR_HEAD_SHA: 'true'
+
+on:
+  push:
+    branches:
+    - master
+    - genstage-stack-gs-reconciler
+jobs:
+  pr:
+    permissions:
+      id-token: write
+      contents: read
+    name: Generate PR
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout the repo
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - name: setup plural
+        uses: pluralsh/setup-plural@4c3737b0836ff7d5bd63faa205189b24d1991a4c
+        with:
+          email: [email protected]
+          consoleUrl: https://console.plrldemo.onplural.sh

lib/console/deployments/settings.ex

@@ -344,11 +344,13 @@ defmodule Console.Deployments.Settings do
           scopes = Enum.flat_map(credentials, & &1.scopes || [])
                    |> Enum.uniq()
           sign_token(user, scopes)
-        _ -> {:error, "no federated credential for #{email} match jwt claims"}
+        _ -> {:error, "no federated credentials for #{email} match jwt claims"}
       end
     else
       {:token, _} -> {:error, "invalid jwt format"}
-      {:config, _} -> {:error, "invalid issuer url from jwt"}
+      {:config, _} = res ->
+        Logger.error("failed to fetch issuer configuration: #{inspect(res)}")
+        {:error, "invalid issuer url from jwt"}
       {:validate, _} -> {:error, "could not validate jwt"}
     end
   end

lib/console_web/router.ex

@@ -16,6 +16,7 @@ defmodule ConsoleWeb.Router do
   scope "/v1", ConsoleWeb do
     pipe_through [:api]
 
+    post "/token/exchange", JWTController, :exchange
     get "/dashboard/cluster", WebhookController, :cluster
   end
 
@@ -79,7 +80,6 @@ defmodule ConsoleWeb.Router do
     pipe_through [:auth]
 
     scope "/v1", ConsoleWeb do
-      post "/token/exchange", JWTController, :exchange
       get "/digests", GitController, :digest
       get "/compliance/report", ComplianceController, :report
       get "/compliance/report/:name", ComplianceController, :report