
Product
Introducing Socket Firewall Enterprise: Flexible, Configurable Protection for Modern Package Ecosystems
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.
realm-app-importer
Advanced tools
Wrapping the Stitch CLI to import an app from a template (w. secrets)
Imports an app directory into MongoDB Realm (formerly known as Stitch).
This CLI works around a few shortcomings of the official Realm CLI - most notably around import of apps referencing secrets and the fact that the CLI updates apps (leaving upstages changes to app directories, degrading developer experience).
The CLI provides two commands:
If you don't have an app to import, read the section on "exporting" below.
Ensure you have this CLI installed in your project as a dev-dependency.
npm install realm-app-importer --save-dev
When you have a templated app that you want to download (stored in ./my-app-template for example), run
npx realm-app-importer ./my-app-template
To import secrets add a secrets.json to the template directory, containing a single JSON object with keys and string values:
{
"my-secret": "v3ry-s3cr3t"
}
realm-app-importer <template-path>
Import a Realm App
Commands:
realm-app-importer import Import a Realm App
<template-path> [default]
realm-app-importer serve Start serving an HTTP server capable
<template-path..> of importing apps
Positionals:
template-path Path of the application directory to import [string]
Options:
--version Show version number [boolean]
--help Show help [boolean]
--base-url Base url of the stitch server to import the app into
[string] [default: "http://localhost:9090"]
--username Username of an administrative user
[string] [default: "unique_user@domain.com"]
--password Password of an administrative user
[string] [default: "password"]
--config Path for the realm-cli configuration to temporarily
store credentials [string] [default: "realm-config"]
--apps-directory-path Path to temporarily copy the app while importing it
[string] [default: "imported-apps"]
--app-id-path Saves the app id to a file at this path [string]
--app-id-port Starts up an HTTP server and serves the app id [number]
--clean-up Should the tool delete temporary files when exiting?
[boolean] [default: true]
Besides the <template-path> the CLI takes a few optional runtime parameters, most of which should be self-explainatory and set to defaults that should ease the usecase of integration tests against local deployments.
When using the import command, a consuming integration test can to get a hold of the id of the app, in a couple of ways:
AppImporter class and calling its importApp method, which returns a Promise<{ appId: string }>.--app-id-path runtime option saves the app id to a file, which can be read by the test harness.--app-id-port runtime option starts up a web-server on the specified port and serves the app id as a text response.Ensure you have the official Stitch CLI installed in your project as a dev-dependency,
npm install mongodb-realm-cli --save-dev
Log into the official Stitch CLI:
npx realm-cli login --api-key <your-api-key> --private-api-key <your-private-api-key>
Export a Stitch app that you want to import later
npx realm-cli export --output ./my-app-template --as-template --app-id <your-app-id>
Where <your-app-id> is replaced with the app id found in the UI.
We're using the --as-template flag to ask the CLI to not store any ids into the exported files.
You might also need to specify a --project-id (equivalent with as group-id) in which the app was originally created.
See the Realm CLI documentation for more information.
FAQs
Wrapping the Stitch CLI to import an app from a template (w. secrets)
The npm package realm-app-importer receives a total of 2 weekly downloads. As such, realm-app-importer popularity was classified as not popular.
We found that realm-app-importer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.

Product
Detect malware, unsafe data flows, and license issues in GitHub Actions with Socket’s new workflow scanning support.