awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-09-22 13:39:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add cert foreign key

Browse Source
This commit is contained in:
Fang-Pen Lin
2025-11-03 18:39:09 -08:00
parent 431fc222a1
commit 3c887522ec
2 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
backend/src/db/migrations/20251029234547_add-pki-acme.ts
View File

@@ -80,6 +80,10 @@ export async function up(knex: Knex): Promise<void> {
t.uuid("accountId").notNullable();
t.foreign("accountId").references("id").inTable(TableName.PkiAcmeAccount).onDelete("CASCADE");
// Foreign key to certificate
t.uuid("certificateId").nullable();
t.foreign("certificateId").references("id").inTable(TableName.Certificate).onDelete("CASCADE");
t.timestamp("notBefore").nullable();
t.timestamp("notAfter").nullable();

3
backend/src/ee/services/pki-acme/pki-acme-service.ts
View File

@@ -319,7 +319,7 @@ export const pkiAcmeServiceFactory = ({
const kmsDecryptor = await kmsService.decryptWithKmsKey({
kmsId: certificateManagerKmsId
});
const eabSecret = await kmsDecryptor({ cipherTextBlob: profile.acmeConfig!.encryptedEabSecret });
const eabSecret = await kmsDecryptor({ cipherTextBlob: profile.acmeConfig!.encryptedEabSecret! });
try {
const { payload: eabPayload, protectedHeader: eabProtectedHeader } = await flattenedVerify(
externalAccountBinding,
@@ -393,7 +393,6 @@ export const pkiAcmeServiceFactory = ({
emails: contact ?? []
});
// TODO: create audit log here
// TODO: check EAB authentication here
return {
status: 201,
body: {