fix(amplify): deployment does not remove basic auth (aws#15243)

Removing the `BasicAuthConfig` property from the template doesn't remove the basic auth. Explicitely set `EnableBasicAuth` to `false` instead. Closes aws#15028 ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
Seiya6329 · Jun 22, 2021 · 249c367 · 249c367
1 parent c0bfb71
commit 249c367
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 2 deletions.
diff --git a/packages/@aws-cdk/aws-amplify/lib/app.ts b/packages/@aws-cdk/aws-amplify/lib/app.ts
@@ -215,7 +215,9 @@ export class App extends Resource implements IApp, iam.IGrantable {
       accessToken: sourceCodeProviderOptions?.accessToken?.toString(),
       autoBranchCreationConfig: props.autoBranchCreation && {
         autoBranchCreationPatterns: props.autoBranchCreation.patterns,
-        basicAuthConfig: props.autoBranchCreation.basicAuth && props.autoBranchCreation.basicAuth.bind(this, 'BranchBasicAuth'),
+        basicAuthConfig: props.autoBranchCreation.basicAuth
+          ? props.autoBranchCreation.basicAuth.bind(this, 'BranchBasicAuth')
+          : { enableBasicAuth: false },
         buildSpec: props.autoBranchCreation.buildSpec && props.autoBranchCreation.buildSpec.toBuildSpec(),
         enableAutoBranchCreation: true,
         enableAutoBuild: props.autoBranchCreation.autoBuild ?? true,
@@ -225,7 +227,9 @@ export class App extends Resource implements IApp, iam.IGrantable {
         stage: props.autoBranchCreation.stage,
       },
       enableBranchAutoDeletion: props.autoBranchDeletion,
-      basicAuthConfig: props.basicAuth && props.basicAuth.bind(this, 'AppBasicAuth'),
+      basicAuthConfig: props.basicAuth
+        ? props.basicAuth.bind(this, 'AppBasicAuth')
+        : { enableBasicAuth: false },
       buildSpec: props.buildSpec && props.buildSpec.toBuildSpec(),
       customRules: Lazy.any({ produce: () => this.customRules }, { omitEmptyArray: true }),
       description: props.description,

diff --git a/packages/@aws-cdk/aws-amplify/test/app.test.ts b/packages/@aws-cdk/aws-amplify/test/app.test.ts
@@ -43,6 +43,9 @@ test('create an app connected to a GitHub repository', () => {
     },
     OauthToken: 'secret',
     Repository: 'https://github.com/aws/aws-cdk',
+    BasicAuthConfig: {
+      EnableBasicAuth: false,
+    },
   });
 
   expect(stack).toHaveResource('AWS::IAM::Role', {
@@ -355,6 +358,9 @@ test('with auto branch creation', () => {
   // THEN
   expect(stack).toHaveResource('AWS::Amplify::App', {
     AutoBranchCreationConfig: {
+      BasicAuthConfig: {
+        EnableBasicAuth: false,
+      },
       EnableAutoBranchCreation: true,
       EnableAutoBuild: true,
       EnablePullRequestPreview: true,

diff --git a/packages/@aws-cdk/aws-amplify/test/integ.app-codecommit.expected.json b/packages/@aws-cdk/aws-amplify/test/integ.app-codecommit.expected.json
@@ -53,6 +53,9 @@
       "Type": "AWS::Amplify::App",
       "Properties": {
         "Name": "App",
+        "BasicAuthConfig": {
+          "EnableBasicAuth": false
+        },
         "IAMServiceRole": {
           "Fn::GetAtt": [
             "AppRole1AF9B530",

diff --git a/packages/@aws-cdk/aws-amplify/test/integ.app.expected.json b/packages/@aws-cdk/aws-amplify/test/integ.app.expected.json
@@ -31,6 +31,9 @@
       "Properties": {
         "Name": "App",
         "AutoBranchCreationConfig": {
+          "BasicAuthConfig": {
+            "EnableBasicAuth": false
+          },
           "EnableAutoBranchCreation": true,
           "EnableAutoBuild": true,
           "EnablePullRequestPreview": true