integrate mitxonline api

config/apisix/apisix.yaml

@@ -3,6 +3,10 @@ upstreams:
     nodes:
       "nginx:${{NGINX_PORT}}": 1
     type: roundrobin
+  - id: 2
+    nodes:
+      "192.168.1.50:8013": 1
+    type: roundrobin
 
 routes:
   - id: 1
@@ -22,7 +26,9 @@ routes:
         ssl_verify: false
         session:
           secret: ${{APISIX_SESSION_SECRET_KEY}}
-          cookie: { lifetime = 1209600 }
+          cookie:
+            lifetime: 1209600
+            domain: ${{CSRF_COOKIE_DOMAIN}}
         logout_path: "/logout/oidc"
         post_logout_redirect_uri: ${{APISIX_LOGOUT_URL}}
         unauth_action: "pass"
@@ -53,7 +59,9 @@ routes:
         ssl_verify: false
         session:
           secret: ${{APISIX_SESSION_SECRET_KEY}}
-          cookie: { lifetime = 1209600 }
+          cookie:
+            lifetime: 1209600
+            domain: ${{CSRF_COOKIE_DOMAIN}}
         logout_path: "/logout/oidc"
         post_logout_redirect_uri: ${{APISIX_LOGOUT_URL}}
         unauth_action: "auth"
@@ -69,4 +77,33 @@ routes:
     uris:
       - "/admin/login/*"
       - "/login"
+  - id: 3
+    name: "mitxonline-wildcard"
+    desc: "General route for the mitxonline application, includes user data if any."
+    priority: 10
+    upstream_id: 2
+    plugins:
+      openid-connect:
+        client_id: ${{KEYCLOAK_CLIENT_ID}}
+        client_secret: ${{KEYCLOAK_CLIENT_SECRET}}
+        discovery: ${{KEYCLOAK_DISCOVERY_URL}}
+        realm: ${{KEYCLOAK_REALM_NAME}}
+        scope: "openid profile ol-profile"
+        bearer_only: false
+        introspection_endpoint_auth_method: "client_secret_post"
+        ssl_verify: false
+        session:
+          secret: ${{APISIX_SESSION_SECRET_KEY}}
+          cookie:
+            lifetime: 1209600
+            domain: ${{CSRF_COOKIE_DOMAIN}}
+        logout_path: "/logout"
+        post_logout_redirect_uri: ${{APISIX_LOGOUT_URL}}
+        unauth_action: "pass"
+      proxy-rewrite:
+        regex_uri:
+          - "/mitxonline/(.*)"
+          - "/$1"
+    uris:
+      - "/mitxonline/*"
 #END

docker-compose.services.yml

@@ -119,6 +119,7 @@ services:
       - apisix
     image: apache/apisix:latest
     environment:
+      - CSRF_COOKIE_DOMAIN=${CSRF_COOKIE_DOMAIN:-.odl.local}
       - KEYCLOAK_REALM_NAME=${KEYCLOAK_REALM_NAME:-ol-local}
       - KEYCLOAK_CLIENT_ID=${KEYCLOAK_CLIENT_ID:-apisix}
       - KEYCLOAK_CLIENT_SECRET=${KEYCLOAK_CLIENT_SECRET}

frontends/api/package.json

@@ -30,6 +30,7 @@
     "ol-test-utilities": "0.0.0"
   },
   "dependencies": {
+    "@mitodl/mitxonline-api-axios": "^2025.5.23",
     "@tanstack/react-query": "^5.66.0",
     "axios": "^1.6.3"
   }

frontends/api/src/mitxonline/clients.ts

@@ -1,13 +1,35 @@
-import { EnrollmentsApi, ProgramsApi, CoursesApi } from "./generated/v0/api"
+import {
+  B2bApi,
+  CoursesApi,
+  EnrollmentsApi,
+  ProgramsApi,
+  UsersApi,
+} from "@mitodl/mitxonline-api-axios/v1"
 import axios from "axios"
 
-const axiosInstance = axios.create({})
+const axiosInstance = axios.create({
+  baseURL: process.env.NEXT_PUBLIC_MITXONLINE_API_BASE_URL,
+  xsrfCookieName: process.env.NEXT_PUBLIC_CSRF_COOKIE_NAME,
+  xsrfHeaderName: "X-CSRFToken",
+  withXSRFToken: true,
+  withCredentials:
+    process.env.NEXT_PUBLIC_MITOL_AXIOS_WITH_CREDENTIALS === "true",
+})
 
 const BASE_PATH =
   process.env.NEXT_PUBLIC_MITXONLINE_API_BASE_URL?.replace(/\/+$/, "") ?? ""
 
+const usersApi = new UsersApi(undefined, BASE_PATH, axiosInstance)
+const b2bApi = new B2bApi(undefined, BASE_PATH, axiosInstance)
 const enrollmentsApi = new EnrollmentsApi(undefined, BASE_PATH, axiosInstance)
 const programsApi = new ProgramsApi(undefined, BASE_PATH, axiosInstance)
 const coursesApi = new CoursesApi(undefined, BASE_PATH, axiosInstance)
 
-export { enrollmentsApi, programsApi, coursesApi, axiosInstance }
+export {
+  usersApi,
+  b2bApi,
+  enrollmentsApi,
+  programsApi,
+  coursesApi,
+  axiosInstance,
+}