debug: auth workflow (#2168)

* fix: auth workflow

* enable: workflow_dispatch

* Update .github/workflows/register-preview-url.yml

Author: thiskevinwang

.github/workflows/register-preview-url.yml

@@ -1,8 +1,14 @@
+# This workflow enables HashiCorp Oauth on Vercel preview deployments.
 name: Register Preview URL with CloudIDP
 
 on:
   deployment_status:
-
+  # workflow_dispatch is here for supporting manual iteration
+  workflow_dispatch:
+    inputs:
+      preview_url:
+        description: 'A Vercel preview url. Only used during manual runs'
+        required: true
 jobs:
   on-deploy:
     runs-on: ubuntu-latest
@@ -26,8 +32,10 @@ jobs:
       - name: Add Preview URL to CloudIDP
         run: npx hc-tools ./scripts/add-preview-url-to-cloud-idp.ts
         env:
+          # parameters
+          PREVIEW_URL: ${{ inputs.preview_url || github.event.deployment_status.target_url }}
+          # secrets
           CLOUD_IDP_DEPLOYMENT_PREVIEW_PRIVATE_KEY: ${{ secrets.CLOUD_IDP_DEPLOYMENT_PREVIEW_PRIVATE_KEY }}
-          PREVIEW_URL: ${{ github.event.deployment_status.target_url }}
           FLOW_IDP_DEPLOYMENT_READY_URL: ${{ secrets.FLOW_IDP_DEPLOYMENT_READY_URL }}
           VERCEL_API_TOKEN: ${{ secrets.VERCEL_API_TOKEN }}
           VERCEL_TEAM_ID: ${{ secrets.VERCEL_TEAM_ID }}

scripts/add-preview-url-to-cloud-idp.ts

@@ -11,21 +11,26 @@ const fetch = createFetch()
 const vercelApiToken = process.env.VERCEL_API_TOKEN
 const vercelTeamId = process.env.VERCEL_TEAM_ID
 
+// For Vercel API docs
+// see https://vercel.com/docs/rest-api/endpoints#get-a-deployment-by-id-or-url
+
 /** A helper to fetch Vercel Deployment Aliases from Vercel Deploy Preview URLs */
 async function fetchDeploymentAlias(previewUrl: string): Promise<string[]> {
+	console.log('fetchDeploymentAlias', previewUrl)
+
 	const previewHostname = new URL(previewUrl).hostname
 	const url = new URL(
 		`v13/deployments/${previewHostname}`,
 		'https://api.vercel.com'
 	)
 
 	url.searchParams.set('teamId', vercelTeamId)
-	url.searchParams.set('withAutomaticAliases', '1')
 
 	const headers = { Authorization: `Bearer ${vercelApiToken}` }
 
 	const res = await fetch(url.toString(), { headers })
 	const data = await res.json()
+	console.log(data)
 
 	// NOTE: returned aliases only contain hostname, and no scheme
 	// Scheme will need to be prepended before being passed in the