awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-09-22 13:39:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Check license when creating profile

Browse Source
This commit is contained in:
Fang-Pen Lin
2025-11-10 17:27:50 -08:00
parent bb46eac8ea
commit 07cfb6dd54
2 changed files with 21 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
backend/src/server/routes/index.ts
View File

@@ -1185,6 +1185,7 @@ export const registerRoutes = async (
certificateAuthorityCertDAL,
permissionService,
kmsService,
licenseService,
projectDAL
});

23
backend/src/services/certificate-profile/certificate-profile-service.ts
View File

@@ -14,13 +14,14 @@ import { getConfig } from "@app/lib/config/env";
import { crypto } from "@app/lib/crypto/cryptography";
import { BadRequestError, ForbiddenRequestError, NotFoundError } from "@app/lib/errors";
import { TLicenseServiceFactory } from "@app/ee/services/license/license-service";
import { ActorAuthMethod, ActorType } from "../auth/auth-type";
import { TCertificateBodyDALFactory } from "../certificate/certificate-body-dal";
import { getCertificateCredentials, isCertChainValid } from "../certificate/certificate-fns";
import { TCertificateSecretDALFactory } from "../certificate/certificate-secret-dal";
import { TCertificateAuthorityCertDALFactory } from "../certificate-authority/certificate-authority-cert-dal";
import { TCertificateAuthorityDALFactory } from "../certificate-authority/certificate-authority-dal";
import { TCertificateTemplateV2DALFactory } from "../certificate-template-v2/certificate-template-v2-dal";
import { TCertificateBodyDALFactory } from "../certificate/certificate-body-dal";
import { getCertificateCredentials, isCertChainValid } from "../certificate/certificate-fns";
import { TCertificateSecretDALFactory } from "../certificate/certificate-secret-dal";
import { TAcmeEnrollmentConfigDALFactory } from "../enrollment-config/acme-enrollment-config-dal";
import { TApiEnrollmentConfigDALFactory } from "../enrollment-config/api-enrollment-config-dal";
import { TAcmeConfigData, TApiConfigData, TEstConfigData } from "../enrollment-config/enrollment-config-types";
@@ -153,6 +154,7 @@ type TCertificateProfileServiceFactoryDep = {
certificateAuthorityCertDAL: Pick<TCertificateAuthorityCertDALFactory, "findById">;
permissionService: Pick<TPermissionServiceFactory, "getProjectPermission">;
kmsService: Pick<TKmsServiceFactory, "generateKmsKey" | "encryptWithKmsKey" | "decryptWithKmsKey">;
licenseService: Pick<TLicenseServiceFactory, "getPlan">;
projectDAL: Pick<TProjectDALFactory, "findProjectBySlug" | "findOne" | "updateById" | "findById" | "transaction">;
};
@@ -175,6 +177,7 @@ export const certificateProfileServiceFactory = ({
certificateSecretDAL,
permissionService,
kmsService,
licenseService,
projectDAL
}: TCertificateProfileServiceFactoryDep) => {
const createProfile = async ({
@@ -237,6 +240,20 @@ export const certificateProfileServiceFactory = ({
message: "API enrollment requires API configuration"
});
}
if (data.enrollmentType === EnrollmentType.ACME) {
const orgLicensePlan = await licenseService.getPlan(actorOrgId);
if (!orgLicensePlan.pkiAcme) {
throw new BadRequestError({
message:
"Failed to create certificate profile due to plan restriction. Upgrade plan to create ACME certificate profile."
});
}
if (!data.acmeConfig) {
throw new ForbiddenRequestError({
message: "ACME enrollment requires ACME configuration"
});
}
}
// TODO: acme type currently doesn't require config obj, but add a check in the future if
// we have options