This commit is contained in:
Tuan Dang
2024-10-02 09:10:22 -04:00
parent 97c2b15e29
commit 2273c21eb2
3 changed files with 1 additions and 9 deletions
@@ -100,7 +100,7 @@ export const registerSecretSharingRouter = async (server: FastifyZodProvider) =>
}, },
schema: { schema: {
body: z.object({ body: z.object({
secretValue: z.string(), secretValue: z.string().max(10_000),
password: z.string().optional(), password: z.string().optional(),
expiresAt: z.string(), expiresAt: z.string(),
expiresAfterViews: z.number().min(1).optional() expiresAfterViews: z.number().min(1).optional()
@@ -114,11 +114,6 @@ export const secretSharingServiceFactory = ({
throw new BadRequestError({ message: "Expiration date cannot exceed more than 30 days" }); throw new BadRequestError({ message: "Expiration date cannot exceed more than 30 days" });
} }
// Limit Input ciphertext length to 13000 (equivalent to 10,000 characters of Plaintext)n
if (secretValue.length > 10_000) {
throw new BadRequestError({ message: "Shared secret value too long" });
}
const encryptWithRoot = kmsService.encryptWithRootKey(); const encryptWithRoot = kmsService.encryptWithRootKey();
const encryptedSecret = encryptWithRoot(Buffer.from(secretValue)); const encryptedSecret = encryptWithRoot(Buffer.from(secretValue));
@@ -53,9 +53,6 @@ export const ViewSecretPublicPage = () => {
((error as AxiosError)?.response?.data as { message: string })?.message === ((error as AxiosError)?.response?.data as { message: string })?.message ===
"Invalid credentials"; "Invalid credentials";
console.log("data", fetchSecret);
console.log("err", error);
const shouldShowPasswordPrompt = const shouldShowPasswordPrompt =
isInvalidCredential || (fetchSecret?.isPasswordProtected && !fetchSecret.secret); isInvalidCredential || (fetchSecret?.isPasswordProtected && !fetchSecret.secret);
const isValidatingPassword = Boolean(password) && isFetching; const isValidatingPassword = Boolean(password) && isFetching;