Enhance Temporal Connection Configuration with SSL Support and Flexibility

src/Bootloader/TemporalBridgeBootloader.php

@@ -16,6 +16,8 @@
 use Spiral\RoadRunnerBridge\Bootloader\RoadRunnerBootloader;
 use Spiral\TemporalBridge\Commands;
 use Spiral\TemporalBridge\Config\TemporalConfig;
+use Spiral\TemporalBridge\Connection\Connection;
+use Spiral\TemporalBridge\Connection\SslConnection;
 use Spiral\TemporalBridge\DeclarationLocator;
 use Spiral\TemporalBridge\DeclarationLocatorInterface;
 use Spiral\TemporalBridge\Dispatcher;
@@ -121,8 +123,10 @@ protected function initConfig(EnvironmentInterface $env): void
         $this->config->setDefaults(
             TemporalConfig::CONFIG,
             [
-                'address' => $env->get('TEMPORAL_ADDRESS', '127.0.0.1:7233'),
-                'namespace' => 'App\\Endpoint\\Temporal\\Workflow',
+                'connection' => $env->get('TEMPORAL_CONNECTION', 'default'),
+                'connections' => [
+                    'default' => new Connection(address: $env->get('TEMPORAL_ADDRESS', '127.0.0.1:7233')),
+                ],
                 'defaultWorker' => (string)$env->get(
                     'TEMPORAL_TASK_QUEUE',
                     TemporalWorkerFactoryInterface::DEFAULT_TASK_QUEUE,
@@ -185,7 +189,19 @@ protected function initPipelineProvider(TemporalConfig $config, FactoryInterface
 
     protected function initServiceClient(TemporalConfig $config): ServiceClientInterface
     {
-        return ServiceClient::create($config->getAddress());
+        $connection = $config->getConnection($config->getDefaultConnection());
+
+        if ($connection instanceof SslConnection) {
+            return ServiceClient::createSSL(
+                address: $connection->address,
+                crt: (string) $connection->crt,
+                clientKey: $connection->clientKey,
+                clientPem: $connection->clientPem,
+                overrideServerName: $connection->overrideServerName,
+            );
+        }
+
+        return ServiceClient::create(address: $connection->address);
     }
 
     protected function initScheduleClient(

src/Config/TemporalConfig.php

@@ -6,6 +6,9 @@
 
 use Spiral\Core\Container\Autowire;
 use Spiral\Core\InjectableConfig;
+use Spiral\TemporalBridge\Connection\Connection;
+use Spiral\TemporalBridge\Connection\DsnConnection;
+use Spiral\TemporalBridge\Connection\SslConnection;
 use Temporal\Client\ClientOptions;
 use Temporal\Exception\ExceptionInterceptorInterface;
 use Temporal\Internal\Interceptor\Interceptor;
@@ -21,8 +24,9 @@
  * }
  *
  * @property array{
- *     address: non-empty-string,
- *     namespace: non-empty-string,
+ *     address?: non-empty-string|null,
+ *     connection: non-empty-string,
+ *     connections: array<non-empty-string, Connection>,
  *     temporalNamespace: non-empty-string,
  *     defaultWorker: non-empty-string,
  *     workers: array<non-empty-string, WorkerOptions|TWorker>,
@@ -35,8 +39,8 @@
     public const CONFIG = 'temporal';
 
     protected array $config = [
-        'address' => 'localhost:7233',
-        'namespace' => 'App\\Endpoint\\Temporal\\Workflow',
+        'connection' => 'default',
+        'connections' => [],
         'temporalNamespace' => 'default',
         'defaultWorker' => WorkerFactoryInterface::DEFAULT_TASK_QUEUE,
         'workers' => [],
@@ -47,25 +51,42 @@
     /**
      * @return non-empty-string
      */
-    public function getDefaultNamespace(): string
+    public function getTemporalNamespace(): string
     {
-        return $this->config['namespace'];
+        return $this->config['temporalNamespace'];
     }
 
-    /**
-     * @return non-empty-string
-     */
-    public function getTemporalNamespace(): string
+    public function getDefaultConnection(): string
     {
-        return $this->config['temporalNamespace'];
+        return $this->config['connection'] ?? 'default';
+    }
+
+    public function getConnection(string $name): Connection
+    {
+        // Legacy support. Will be removed in further versions.
+        // If you read this, please remove address from your configuration and use connections instead.
+        $address = $this->config['address'] ?? null;
+        if ($address !== null) {
+            \trigger_error(
+                'Using `address` is deprecated, use `connections` instead.',
+                \E_USER_DEPRECATED,
+            );
+            return new Connection(address: $address);
+        }
+
+        if (isset($this->config['connections'][$name])) {
+            return $this->config['connections'][$name];
+        }
+
+        throw new \InvalidArgumentException(\sprintf('Connection `%s` is not defined.', $name));
     }
 
     /**
-     * @return non-empty-string
+     * @deprecated
      */
     public function getAddress(): string
     {
-        return $this->config['address'];
+        return $this->getConnection($this->getDefaultConnection())->address;
     }
 
     /**

src/Connection/Connection.php

@@ -0,0 +1,13 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Spiral\TemporalBridge\Connection;
+
+class Connection
+{
+    public function __construct(
+        public readonly string $address,
+    ) {
+    }
+}

src/Connection/SslConnection.php

@@ -0,0 +1,25 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Spiral\TemporalBridge\Connection;
+
+class SslConnection extends Connection
+{
+    /**
+     * @param non-empty-string $address
+     * @param string $crt Full path to the certificate file (Default: null)
+     * @param string|null $clientKey Full path to the client key file (Default: null)
+     * @param string|null $clientPem Full path to the client pem file (Default: null)
+     * @param string|null $overrideServerName
+     */
+    public function __construct(
+        string $address,
+        public readonly ?string $crt = null,
+        public readonly ?string $clientKey = null,
+        public readonly ?string $clientPem = null,
+        public readonly ?string $overrideServerName = null,
+    ) {
+        parent::__construct($address);
+    }
+}

src/Connection/TemporalCloudConnection.php

@@ -0,0 +1,30 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Spiral\TemporalBridge\Connection;
+
+/**
+ * This connection is used to connect to Temporal Cloud.
+ *
+ * @see https://docs.temporal.io/cloud/get-started
+ */
+final class TemporalCloudConnection extends SslConnection
+{
+    /**
+     * @param non-empty-string $address
+     * @param non-empty-string $clientKey Full path to the client key file. Required.
+     * @param non-empty-string $clientPem Full path to the client pem file. Required.
+     */
+    public function __construct(
+        string $address,
+        string $clientKey,
+        string $clientPem,
+    ) {
+        parent::__construct(
+            address: $address,
+            clientKey: $clientKey,
+            clientPem: $clientPem,
+        );
+    }
+}

tests/app/config/temporal.php

@@ -0,0 +1,28 @@
+<?php
+
+declare(strict_types=1);
+
+use Spiral\TemporalBridge\Connection\Connection;
+use Spiral\TemporalBridge\Connection\SslConnection;
+use Spiral\TemporalBridge\Connection\TemporalCloudConnection;
+
+return [
+    'connection' => env('TEMPORAL_CONNECTION', 'default'),
+    'connections' => [
+        'default' => new Connection(
+            address: 'localhost:7233',
+        ),
+        'ssl' => new SslConnection(
+            address: 'ssl:7233',
+            crt: '/path/to/crt',
+            clientKey: '/path/to/clientKey',
+            clientPem: '/path/to/clientPem',
+            overrideServerName: 'overrideServerName',
+        ),
+        'temporal_cloud' => new TemporalCloudConnection(
+            address: 'ssl:7233',
+            clientKey: '/path/to/clientKey',
+            clientPem: '/path/to/clientPem',
+        ),
+    ],
+];

tests/src/Bootloader/TemporalBridgeBootloaderTest.php

@@ -18,6 +18,8 @@
 use Spiral\TemporalBridge\WorkerFactoryInterface;
 use Spiral\TemporalBridge\WorkersRegistry;
 use Spiral\TemporalBridge\WorkersRegistryInterface;
+use Spiral\Testing\Attribute\Env;
+use Temporal\Api\Workflowservice\V1\WorkflowServiceClient;
 use Temporal\Client\GRPC\ServiceClient;
 use Temporal\Client\GRPC\ServiceClientInterface;
 use Temporal\Client\ScheduleClient;
@@ -63,7 +65,7 @@ public function testWorkerFactory(): void
     {
         $this->assertContainerBoundAsSingleton(
             WorkerFactoryInterface::class,
-            WorkerFactory::class
+            WorkerFactory::class,
         );
     }
 
@@ -107,6 +109,47 @@ public function testPipelineProvider(): void
         );
     }
 
+    #[Env('TEMPORAL_CONNECTION', 'default')]
+    public function testConnection(): void
+    {
+        $client = $this->getContainer()->get(ServiceClientInterface::class);
+
+        $refl = new \ReflectionClass($client);
+        $baseClient = $refl->getParentClass();
+        $property = $baseClient->getProperty('workflowService');
+
+        $property->setAccessible(true);
+        /** @var WorkflowServiceClient $stub */
+        $stub = $property->getValue($client);
+
+        $this->assertSame('localhost:7233', $stub->getTarget());
+    }
+
+    #[Env('TEMPORAL_CONNECTION', 'ssl')]
+    public function testSslConnection(): void
+    {
+        $client = $this->getContainer()->get(ServiceClientInterface::class);
+
+        $refl = new \ReflectionClass($client);
+        $baseClient = $refl->getParentClass();
+        $property = $baseClient->getProperty('workflowService');
+
+        $property->setAccessible(true);
+        /** @var WorkflowServiceClient $stub */
+        $stub = $property->getValue($client);
+
+        $this->assertSame('ssl:7233', $stub->getTarget());
+    }
+
+    #[Env('TEMPORAL_CONNECTION', 'test')]
+    public function testNonExistsConnection(): void
+    {
+        $this->expectException(\InvalidArgumentException::class);
+        $this->expectExceptionMessage('Connection `test` is not defined.');
+
+        $this->getContainer()->get(ServiceClientInterface::class);
+    }
+
     public function testAddWorkerOptions(): void
     {
         $configs = new ConfigManager($this->createMock(LoaderInterface::class));