Cannot run back-end script for Finish project - Express Pet Store

[vietaws]

When I run the back-end script. There is an error:

[INFO] Reading configuration from config.json
[INFO] Reading configuration from ../backend/.env
[SUCCESS] ===================================================
[SUCCESS] Starting PetStore Backend
[SUCCESS] ===================================================
[INFO] Pets Table: Pets
[INFO] Region: us-east-1
[SUCCESS] ===================================================
[INFO] Starting backend on http://localhost:3000...
[INFO] 17:14:45 ts-node-dev ver. 2.0.0 (using ts-node ver. 10.9.2, typescript ver. 5.8.3)
Compilation error in /Users/xxx/Downloads/examples/express-petstore/finish/backend/src/app.ts
[ERROR] 17:14:45 ⨯ Unable to compile TypeScript:
src/app.ts(21,35): error TS1109: Expression expected.

When I look at in the app.ts code:

const avpAuthorizationEngine = new AVPAuthorizationEngine({
policyStoreId: ,
callType: 'identityToken'
});

=>> Error: Cannot find name 'policyStoreId'

It seems problem about types package for AVP. Please help to check on this. Thank you.

[rickardl]

Hi @vietaws

Can you share what you've configured for your app.ts file.

Ideally when configuring your application, you'd read in the PolicyStoreId, which is required before launching the application.

Se below

// STEP 1: AVP imports
import { AVPAuthorizationEngine } from '@verifiedpermissions/authorization-clients-js';
import { ExpressAuthorizationMiddleware } from '@cedar-policy/authorization-for-expressjs';


// STEP 2: AVP middleware configuration
const avpAuthorizationEngine = new AVPAuthorizationEngine({
  policyStoreId: config.avp.policyStoreId,
  callType: 'identityToken',
});

//.....

The application depends on following the instructions from the blog-post that accompanied it, please see https://aws.amazon.com/blogs/security/secure-your-express-application-apis-in-minutes-with-amazon-verified-permissions/ it has instructions that details the required changes.

[vietaws]

Thank @rickardl for your comment and support. I have missed the PolicyStoreID creation. I followed the article but there are some errors for steps as below:

1. Create PolicyStoreId

aws verifiedpermissions create-policy-store  --validation-settings "mode=STRICT"

=> Output Error: aws: error: argument command: Invalid choice,

I think the command missed some arguments.

2. After installing @verifiedpermissions/authorization-clients-js and npm i --save @cedar-policy/authorization-for-expressjs. Cannot run the command

npx @cedar-policy/authorization-for-expressjs generate-schema --api-spec schemas/openapi.json --namespace PetStoreApp --mapping-type SimpleRest

Output error:

Error: TypeError: Invalid URL
    at new URL (node:internal/url:783:36)
    at _Tools.generateApiMappingSchemaFromOpenAPISpec (/Users/viettq/Downloads/examples/express-petstore/finish/backend/node_modules/@cedar-policy/authorization-for-expressjs/node_modules/@cedar-policy/cedar-authorization/dist/bin.js:111:29)
    at /Users/viettq/Downloads/examples/express-petstore/finish/backend/node_modules/@cedar-policy/authorization-for-expressjs/node_modules/@cedar-policy/cedar-authorization/dist/bin.js:504:35
    at Generator.next (<anonymous>)
    at fulfilled (/Users/viettq/Downloads/examples/express-petstore/finish/backend/node_modules/@cedar-policy/authorization-for-expressjs/node_modules/@cedar-policy/cedar-authorization/dist/bin.js:46:24) {
  code: 'ERR_INVALID_URL',
  input: '/api'
}

[tschia]

Hi @vietaws there was a change to the library that generates the schema and so the included OpenAPI spec wasn't working. I've updated openapi.json file which should resolve the issue.