fix(firestore-shorten-urls-bitly): fix vulns by removing axios

Author: cabljac

firestore-shorten-urls-bitly/functions/package-lock.json

@@ -13,13 +13,12 @@
     "generate-readme": "firebase ext:info .. --markdown > ../README.md"
   },
   "dependencies": {
-    "axios": "^1.6.0",
+    "@types/express-serve-static-core": "4.17.30",
+    "@types/node": "^20.10.3",
     "firebase-admin": "^12.1.0",
     "firebase-functions": "^4.9.0",
     "rimraf": "^2.6.3",
-    "typescript": "^4.8.4",
-    "@types/express-serve-static-core": "4.17.30",
-    "@types/node": "^20.10.3"
+    "typescript": "^4.8.4"
   },
   "private": true
 }

firestore-shorten-urls-bitly/functions/package.json

@@ -16,29 +16,26 @@
 
 import * as admin from "firebase-admin";
 import * as functions from "firebase-functions";
-import axios, { AxiosInstance } from "axios";
 
 import { FirestoreUrlShortener } from "./abstract-shortener";
 import config from "./config";
 import * as logs from "./logs";
 import * as events from "./events";
+
+interface BitlyResponse {
+  link?: string;
+}
+
 class FirestoreBitlyUrlShortener extends FirestoreUrlShortener {
-  private instance: AxiosInstance;
+  private bitlyAccessToken: string;
 
   constructor(
     urlFieldName: string,
     shortUrlFieldName: string,
     bitlyAccessToken: string
   ) {
     super(urlFieldName, shortUrlFieldName);
-    this.instance = axios.create({
-      headers: {
-        Authorization: `Bearer ${bitlyAccessToken}`,
-        "Content-Type": "application/json",
-      },
-      baseURL: "https://api-ssl.bitly.com/v4/",
-    });
-
+    this.bitlyAccessToken = bitlyAccessToken;
     logs.init();
   }
 
@@ -49,15 +46,27 @@ class FirestoreBitlyUrlShortener extends FirestoreUrlShortener {
     logs.shortenUrl(url);
 
     try {
-      const response: any = await this.instance.post("bitlinks", {
-        long_url: url,
+      const response = await fetch("https://api-ssl.bitly.com/v4/bitlinks", {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${this.bitlyAccessToken}`,
+          "Content-Type": "application/json",
+        },
+        body: JSON.stringify({ long_url: url }),
       });
 
-      const { link } = response.data;
+      if (!response.ok) {
+        throw new Error(`Error shortening URL: ${response.statusText}`);
+      }
 
-      logs.shortenUrlComplete(link);
+      const data: BitlyResponse = await response.json();
 
-      await this.updateShortUrl(snapshot, link);
+      if (data.link) {
+        logs.shortenUrlComplete(data.link);
+        await this.updateShortUrl(snapshot, data.link);
+      } else {
+        throw new Error("Bitly response did not contain a link.");
+      }
     } catch (err) {
       logs.error(err);
     }