feat(secrets-ui): add direct reference warning on secrets updates

This commit is contained in:
carlosmonastyrski
2025-04-25 17:38:43 -03:00
parent d5065af7e9
commit 4160009913
14 changed files with 254 additions and 100 deletions
@@ -154,7 +154,8 @@ export const registerDashboardRouter = async (server: FastifyZodProvider) => {
secrets: z secrets: z
.object({ .object({
secretId: z.string(), secretId: z.string(),
referencedSecretKey: z.string() referencedSecretKey: z.string(),
referencedSecretId: z.string()
}) })
.array() .array()
.optional() .optional()
@@ -650,7 +651,8 @@ export const registerDashboardRouter = async (server: FastifyZodProvider) => {
secrets: z secrets: z
.object({ .object({
secretId: z.string(), secretId: z.string(),
referencedSecretKey: z.string() referencedSecretKey: z.string(),
referencedSecretId: z.string()
}) })
.array() .array()
.optional() .optional()
@@ -203,7 +203,8 @@ export const secretImportDALFactory = (db: TDbClient) => {
db.ref("name").withSchema(TableName.Environment).as("envName"), db.ref("name").withSchema(TableName.Environment).as("envName"),
db.ref("slug").withSchema(TableName.Environment).as("envSlug"), db.ref("slug").withSchema(TableName.Environment).as("envSlug"),
db.ref("id").withSchema(TableName.SecretFolder).as("folderId"), db.ref("id").withSchema(TableName.SecretFolder).as("folderId"),
db.ref("secretKey").withSchema(TableName.SecretReferenceV2).as("referencedSecretKey") db.ref("secretKey").withSchema(TableName.SecretReferenceV2).as("referencedSecretKey"),
db.ref("id").withSchema(TableName.SecretV2).as("referencedSecretId")
); );
const folderResults = folderImports.map(({ envName, envSlug, folderName, folderId }) => ({ const folderResults = folderImports.map(({ envName, envSlug, folderName, folderId }) => ({
@@ -214,13 +215,14 @@ export const secretImportDALFactory = (db: TDbClient) => {
})); }));
const secretResults = secretReferences.map( const secretResults = secretReferences.map(
({ envName, envSlug, secretId, folderName, folderId, referencedSecretKey }) => ({ ({ envName, envSlug, secretId, folderName, folderId, referencedSecretKey, referencedSecretId }) => ({
envName, envName,
envSlug, envSlug,
secretId, secretId,
folderName, folderName,
folderId, folderId,
referencedSecretKey referencedSecretKey,
referencedSecretId
}) })
); );
@@ -235,6 +237,7 @@ export const secretImportDALFactory = (db: TDbClient) => {
secrets: { secrets: {
secretId: string; secretId: string;
referencedSecretKey: string; referencedSecretKey: string;
referencedSecretId: string;
}[]; }[];
folderId: string; folderId: string;
folderImported: boolean; folderImported: boolean;
@@ -264,7 +267,11 @@ export const secretImportDALFactory = (db: TDbClient) => {
if ("secretId" in item && item.secretId) { if ("secretId" in item && item.secretId) {
updatedAcc[env].folders[folder].secrets = [ updatedAcc[env].folders[folder].secrets = [
...updatedAcc[env].folders[folder].secrets, ...updatedAcc[env].folders[folder].secrets,
{ secretId: item.secretId, referencedSecretKey: item.referencedSecretKey } {
secretId: item.secretId,
referencedSecretKey: item.referencedSecretKey,
referencedSecretId: item.referencedSecretId
}
]; ];
} else { } else {
updatedAcc[env].folders[folder].folderImported = true; updatedAcc[env].folders[folder].folderImported = true;
@@ -808,7 +808,7 @@ export const secretImportServiceFactory = ({
actorOrgId, actorOrgId,
secrets secrets
}: TGetSecretImportsDTO & { }: TGetSecretImportsDTO & {
secrets: { secretKey: string; secretValue: string }[] | undefined; secrets: { secretKey: string; secretValue: string; id: string }[] | undefined;
}) => { }) => {
const { permission } = await permissionService.getProjectPermission({ const { permission } = await permissionService.getProjectPermission({
actor, actor,
@@ -877,7 +877,8 @@ export const secretImportServiceFactory = ({
) )
.map((otherSecret) => ({ .map((otherSecret) => ({
secretId: secret.secretKey, secretId: secret.secretKey,
referencedSecretKey: otherSecret.secretKey referencedSecretKey: otherSecret.secretKey,
referencedSecretId: otherSecret.id
})); }));
}) || []; }) || [];
if (locallyReferenced.length > 0) { if (locallyReferenced.length > 0) {
@@ -56,11 +56,12 @@ export type FolderResult = {
export type SecretResult = { export type SecretResult = {
secretId: string; secretId: string;
referencedSecretKey: string; referencedSecretKey: string;
referencedSecretId: string;
} & FolderResult; } & FolderResult;
export type FolderInfo = { export type FolderInfo = {
folderName: string; folderName: string;
secrets?: { secretId: string; referencedSecretKey: string }[]; secrets?: { secretId: string; referencedSecretKey: string; referencedSecretId: string }[];
folderId: string; folderId: string;
folderImported: boolean; folderImported: boolean;
envSlug?: string; envSlug?: string;
@@ -19,6 +19,7 @@ type Props = {
formContent?: ReactNode; formContent?: ReactNode;
children?: ReactNode; children?: ReactNode;
deletionMessage?: ReactNode; deletionMessage?: ReactNode;
buttonColorSchema?: "danger" | "primary" | "secondary" | "gray" | null;
}; };
export const DeleteActionModal = ({ export const DeleteActionModal = ({
@@ -32,6 +33,7 @@ export const DeleteActionModal = ({
buttonText = "Delete", buttonText = "Delete",
formContent, formContent,
deletionMessage, deletionMessage,
buttonColorSchema,
children children
}: Props): JSX.Element => { }: Props): JSX.Element => {
const [inputData, setInputData] = useState(""); const [inputData, setInputData] = useState("");
@@ -67,7 +69,7 @@ export const DeleteActionModal = ({
<div className="mx-2 flex items-center"> <div className="mx-2 flex items-center">
<Button <Button
className="mr-4" className="mr-4"
colorSchema="danger" colorSchema={buttonColorSchema || "danger"}
isDisabled={!(deleteKey === inputData) || isLoading} isDisabled={!(deleteKey === inputData) || isLoading}
onClick={onDelete} onClick={onDelete}
isLoading={isLoading} isLoading={isLoading}
+1 -1
View File
@@ -51,7 +51,7 @@ export type ProjectSecretsImportedBy = {
environment: { name: string; slug: string }; environment: { name: string; slug: string };
folders: { folders: {
name: string; name: string;
secrets?: { secretId: string; referencedSecretKey: string }[]; secrets?: { secretId: string; referencedSecretKey: string; referencedSecretId: string }[];
isImported: boolean; isImported: boolean;
}[]; }[];
}; };
@@ -74,7 +74,7 @@ import {
useUpdateSecretV3 useUpdateSecretV3
} from "@app/hooks/api"; } from "@app/hooks/api";
import { useGetProjectSecretsOverview } from "@app/hooks/api/dashboard/queries"; import { useGetProjectSecretsOverview } from "@app/hooks/api/dashboard/queries";
import { DashboardSecretsOrderBy } from "@app/hooks/api/dashboard/types"; import { DashboardSecretsOrderBy, ProjectSecretsImportedBy } from "@app/hooks/api/dashboard/types";
import { OrderByDirection } from "@app/hooks/api/generic/types"; import { OrderByDirection } from "@app/hooks/api/generic/types";
import { useUpdateFolderBatch } from "@app/hooks/api/secretFolders/queries"; import { useUpdateFolderBatch } from "@app/hooks/api/secretFolders/queries";
import { TUpdateFolderBatchDTO } from "@app/hooks/api/secretFolders/types"; import { TUpdateFolderBatchDTO } from "@app/hooks/api/secretFolders/types";
@@ -727,6 +727,98 @@ export const OverviewPage = () => {
} }
}, [routerSearch.search]); }, [routerSearch.search]);
const selectedKeysCount = Object.keys(selectedEntries.secret).length;
const secretsToDeleteKeys = useMemo(() => {
return Object.values(selectedEntries.secret).flatMap((entries) =>
Object.values(entries).map((secret) => secret.key)
);
}, [selectedEntries]);
const filterAndMergeEnvironments = (
envNames: string[],
envs: { environment: string; importedBy: ProjectSecretsImportedBy[] }[]
): ProjectSecretsImportedBy[] => {
const filteredEnvs = envs.filter((env) => envNames.includes(env.environment));
if (filteredEnvs.length === 0) return [];
const allImportedBy = filteredEnvs.flatMap((env) => env.importedBy);
const groupedBySlug: Record<string, ProjectSecretsImportedBy[]> = {};
allImportedBy.forEach((item) => {
const { slug } = item.environment;
if (!groupedBySlug[slug]) groupedBySlug[slug] = [];
groupedBySlug[slug].push(item);
});
const mergedImportedBy = Object.values(groupedBySlug).map((group) => {
const { environment } = group[0];
const allFolders = group.flatMap((item) => item.folders);
const foldersByName: Record<string, (typeof allFolders)[number][]> = {};
allFolders.forEach((folder) => {
if (!foldersByName[folder.name]) foldersByName[folder.name] = [];
foldersByName[folder.name].push(folder);
});
const mergedFolders = Object.entries(foldersByName).map(([name, foldersData]) => {
const isImported = foldersData.some((folder) => folder.isImported);
const allSecrets = foldersData.flatMap((folder) => folder.secrets || []);
const uniqueSecrets: {
secretId: string;
referencedSecretKey: string;
referencedSecretId: string;
}[] = [];
const secretIds = new Set<string>();
allSecrets
.filter(
(secret) =>
!secretsToDeleteKeys ||
secretsToDeleteKeys.length === 0 ||
secretsToDeleteKeys.includes(secret.referencedSecretKey)
)
.forEach((secret) => {
if (!secretIds.has(secret.secretId)) {
secretIds.add(secret.secretId);
uniqueSecrets.push(secret);
}
});
return {
name,
isImported,
...(uniqueSecrets.length > 0 ? { secrets: uniqueSecrets } : {})
};
});
return {
environment,
folders: mergedFolders.filter(
(folder) => folder.isImported || (folder.secrets && folder.secrets.length > 0)
)
};
});
return mergedImportedBy;
};
const importedBy = useMemo(() => {
if (!importedByEnvs) return [];
if (selectedKeysCount === 0) {
return filterAndMergeEnvironments(
visibleEnvs.map(({ slug }) => slug),
importedByEnvs
);
}
return filterAndMergeEnvironments(
Object.values(selectedEntries.secret).flatMap((entries) => Object.keys(entries)),
importedByEnvs
);
}, [importedByEnvs, selectedEntries, selectedKeysCount]);
if (isProjectV3 && visibleEnvs.length > 0 && isOverviewLoading) { if (isProjectV3 && visibleEnvs.length > 0 && isOverviewLoading) {
return ( return (
<div className="container mx-auto flex h-screen w-full items-center justify-center px-8 text-mineshaft-50 dark:[color-scheme:dark]"> <div className="container mx-auto flex h-screen w-full items-center justify-center px-8 text-mineshaft-50 dark:[color-scheme:dark]">
@@ -1045,7 +1137,8 @@ export const OverviewPage = () => {
secretPath={secretPath} secretPath={secretPath}
selectedEntries={selectedEntries} selectedEntries={selectedEntries}
resetSelectedEntries={resetSelectedEntries} resetSelectedEntries={resetSelectedEntries}
importedByEnvs={importedByEnvs} importedBy={importedBy}
secretsToDeleteKeys={secretsToDeleteKeys}
usedBySecretSyncs={usedBySecretSyncs} usedBySecretSyncs={usedBySecretSyncs}
/> />
<div className="thin-scrollbar mt-4"> <div className="thin-scrollbar mt-4">
@@ -1263,6 +1356,7 @@ export const OverviewPage = () => {
secretKey={key} secretKey={key}
getSecretByKey={getSecretByKey} getSecretByKey={getSecretByKey}
scrollOffset={debouncedScrollOffset} scrollOffset={debouncedScrollOffset}
importedBy={importedBy}
/> />
))} ))}
<SecretNoAccessOverviewTableRow <SecretNoAccessOverviewTableRow
@@ -29,9 +29,10 @@ import { Blur } from "@app/components/v2/Blur";
import { InfisicalSecretInput } from "@app/components/v2/InfisicalSecretInput"; import { InfisicalSecretInput } from "@app/components/v2/InfisicalSecretInput";
import { ProjectPermissionActions, ProjectPermissionSub, useProjectPermission } from "@app/context"; import { ProjectPermissionActions, ProjectPermissionSub, useProjectPermission } from "@app/context";
import { ProjectPermissionSecretActions } from "@app/context/ProjectPermissionContext/types"; import { ProjectPermissionSecretActions } from "@app/context/ProjectPermissionContext/types";
import { useToggle } from "@app/hooks"; import { usePopUp, useToggle } from "@app/hooks";
import { SecretType } from "@app/hooks/api/types"; import { SecretType } from "@app/hooks/api/types";
import { hasSecretReadValueOrDescribePermission } from "@app/lib/fn/permission"; import { hasSecretReadValueOrDescribePermission } from "@app/lib/fn/permission";
import { CollapsibleSecretImports } from "@app/pages/secret-manager/SecretDashboardPage/components/SecretListView/CollapsibleSecretImports";
type Props = { type Props = {
defaultValue?: string | null; defaultValue?: string | null;
@@ -54,6 +55,14 @@ type Props = {
) => Promise<void>; ) => Promise<void>;
onSecretDelete: (env: string, key: string, secretId?: string) => Promise<void>; onSecretDelete: (env: string, key: string, secretId?: string) => Promise<void>;
isRotatedSecret?: boolean; isRotatedSecret?: boolean;
importedBy?: {
environment: { name: string; slug: string };
folders: {
name: string;
secrets?: { secretId: string; referencedSecretKey: string; referencedSecretId: string }[];
isImported: boolean;
}[];
}[];
}; };
export const SecretEditRow = ({ export const SecretEditRow = ({
@@ -70,8 +79,13 @@ export const SecretEditRow = ({
secretPath, secretPath,
isVisible, isVisible,
secretId, secretId,
isRotatedSecret isRotatedSecret,
importedBy
}: Props) => { }: Props) => {
const { handlePopUpOpen, handlePopUpToggle, handlePopUpClose, popUp } = usePopUp([
"editSecret"
] as const);
const { const {
handleSubmit, handleSubmit,
control, control,
@@ -115,6 +129,17 @@ export const SecretEditRow = ({
if (isCreatable) { if (isCreatable) {
await onSecretCreate(environment, secretName, value); await onSecretCreate(environment, secretName, value);
} else { } else {
if (
importedBy &&
importedBy.some(({ folders }) =>
folders?.some(({ secrets }) =>
secrets?.some(({ referencedSecretId }) => referencedSecretId === secretId)
)
)
) {
handlePopUpOpen("editSecret", { secretValue: value });
return;
}
await onSecretUpdate( await onSecretUpdate(
environment, environment,
secretName, secretName,
@@ -127,6 +152,18 @@ export const SecretEditRow = ({
reset({ value }); reset({ value });
}; };
const handleEditSecret = async ({ secretValue }: { secretValue: string }) => {
await onSecretUpdate(
environment,
secretName,
secretValue,
isOverride ? SecretType.Personal : SecretType.Shared,
secretId
);
reset({ value: secretValue });
handlePopUpClose("editSecret");
};
const canReadSecretValue = hasSecretReadValueOrDescribePermission( const canReadSecretValue = hasSecretReadValueOrDescribePermission(
permission, permission,
ProjectPermissionSecretActions.ReadValue ProjectPermissionSecretActions.ReadValue
@@ -306,6 +343,26 @@ export const SecretEditRow = ({
</> </>
)} )}
</div> </div>
<DeleteActionModal
isOpen={popUp.editSecret.isOpen}
deleteKey="confirm"
buttonColorSchema="secondary"
buttonText="Save"
subTitle=""
title="Do you want to edit this secret?"
onChange={(isOpen) => handlePopUpToggle("editSecret", isOpen)}
onDeleteApproved={() => handleEditSecret(popUp?.editSecret?.data)}
formContent={
importedBy &&
importedBy.length > 0 && (
<CollapsibleSecretImports
importedBy={importedBy}
secretsToDelete={[secretName]}
onlyReferences
/>
)
}
/>
</div> </div>
); );
}; };
@@ -44,6 +44,14 @@ type Props = {
secretName: string secretName: string
) => { secret?: SecretV3RawSanitized; environmentInfo?: WorkspaceEnv } | undefined; ) => { secret?: SecretV3RawSanitized; environmentInfo?: WorkspaceEnv } | undefined;
scrollOffset: number; scrollOffset: number;
importedBy?: {
environment: { name: string; slug: string };
folders: {
name: string;
secrets?: { secretId: string; referencedSecretKey: string; referencedSecretId: string }[];
isImported: boolean;
}[];
}[];
}; };
export const SecretOverviewTableRow = ({ export const SecretOverviewTableRow = ({
@@ -58,7 +66,8 @@ export const SecretOverviewTableRow = ({
getImportedSecretByKey, getImportedSecretByKey,
scrollOffset, scrollOffset,
onToggleSecretSelect, onToggleSecretSelect,
isSelected isSelected,
importedBy
}: Props) => { }: Props) => {
const [isFormExpanded, setIsFormExpanded] = useToggle(); const [isFormExpanded, setIsFormExpanded] = useToggle();
const totalCols = environments.length + 1; // secret key row const totalCols = environments.length + 1; // secret key row
@@ -244,6 +253,7 @@ export const SecretOverviewTableRow = ({
onSecretUpdate={onSecretUpdate} onSecretUpdate={onSecretUpdate}
environment={slug} environment={slug}
isRotatedSecret={secret?.isRotatedSecret} isRotatedSecret={secret?.isRotatedSecret}
importedBy={importedBy}
/> />
</td> </td>
</tr> </tr>
@@ -37,15 +37,17 @@ type Props = {
[EntryType.FOLDER]: Record<string, Record<string, TSecretFolder>>; [EntryType.FOLDER]: Record<string, Record<string, TSecretFolder>>;
[EntryType.SECRET]: Record<string, Record<string, SecretV3RawSanitized>>; [EntryType.SECRET]: Record<string, Record<string, SecretV3RawSanitized>>;
}; };
importedByEnvs?: { environment: string; importedBy: ProjectSecretsImportedBy[] }[]; importedBy?: ProjectSecretsImportedBy[] | null;
usedBySecretSyncs?: { name: string; destination: string; environment: string }[]; usedBySecretSyncs?: { name: string; destination: string; environment: string }[];
secretsToDeleteKeys: string[];
}; };
export const SelectionPanel = ({ export const SelectionPanel = ({
secretPath, secretPath,
resetSelectedEntries, resetSelectedEntries,
selectedEntries, selectedEntries,
importedByEnvs, importedBy,
secretsToDeleteKeys,
usedBySecretSyncs usedBySecretSyncs
}: Props) => { }: Props) => {
const { permission } = useProjectPermission(); const { permission } = useProjectPermission();
@@ -83,81 +85,6 @@ export const SelectionPanel = ({
) )
); );
const secretsToDeleteKeys = useMemo(() => {
return Object.values(selectedEntries.secret).flatMap((entries) =>
Object.values(entries).map((secret) => secret.key)
);
}, [selectedEntries]);
const filterAndMergeEnvironments = (
envNames: string[],
envs: { environment: string; importedBy: ProjectSecretsImportedBy[] }[]
): ProjectSecretsImportedBy[] => {
const filteredEnvs = envs.filter((env) => envNames.includes(env.environment));
if (filteredEnvs.length === 0) return [];
const allImportedBy = filteredEnvs.flatMap((env) => env.importedBy);
const groupedBySlug: Record<string, ProjectSecretsImportedBy[]> = {};
allImportedBy.forEach((item) => {
const { slug } = item.environment;
if (!groupedBySlug[slug]) groupedBySlug[slug] = [];
groupedBySlug[slug].push(item);
});
const mergedImportedBy = Object.values(groupedBySlug).map((group) => {
const { environment } = group[0];
const allFolders = group.flatMap((item) => item.folders);
const foldersByName: Record<string, (typeof allFolders)[number][]> = {};
allFolders.forEach((folder) => {
if (!foldersByName[folder.name]) foldersByName[folder.name] = [];
foldersByName[folder.name].push(folder);
});
const mergedFolders = Object.entries(foldersByName).map(([name, folders]) => {
const isImported = folders.some((folder) => folder.isImported);
const allSecrets = folders.flatMap((folder) => folder.secrets || []);
const uniqueSecrets: { secretId: string; referencedSecretKey: string }[] = [];
const secretIds = new Set<string>();
allSecrets
.filter((secret) => secretsToDeleteKeys.includes(secret.referencedSecretKey))
.forEach((secret) => {
if (!secretIds.has(secret.secretId)) {
secretIds.add(secret.secretId);
uniqueSecrets.push(secret);
}
});
return {
name,
isImported,
...(uniqueSecrets.length > 0 ? { secrets: uniqueSecrets } : {})
};
});
return {
environment,
folders: mergedFolders.filter(
(folder) => folder.isImported || (folder.secrets && folder.secrets.length > 0)
)
};
});
return mergedImportedBy;
};
const importedBy = useMemo(() => {
if (selectedKeysCount === 0 || !importedByEnvs) return null;
return filterAndMergeEnvironments(
Object.values(selectedEntries.secret).flatMap((entries) => Object.keys(entries)),
importedByEnvs
);
}, [importedByEnvs, selectedEntries, selectedKeysCount]);
const usedBySecretSyncsFiltered = useMemo(() => { const usedBySecretSyncsFiltered = useMemo(() => {
if (selectedKeysCount === 0 || !usedBySecretSyncs) return null; if (selectedKeysCount === 0 || !usedBySecretSyncs) return null;
const envs = Object.values(selectedEntries.secret).flatMap((entries) => Object.keys(entries)); const envs = Object.values(selectedEntries.secret).flatMap((entries) => Object.keys(entries));
@@ -118,7 +118,7 @@ type Props = {
environment: { name: string; slug: string }; environment: { name: string; slug: string };
folders: { folders: {
name: string; name: string;
secrets?: { secretId: string; referencedSecretKey: string }[]; secrets?: { secretId: string; referencedSecretKey: string; referencedSecretId: string }[];
isImported: boolean; isImported: boolean;
}[]; }[];
}[]; }[];
@@ -26,7 +26,7 @@ interface CollapsibleSecretImportsProps {
environment: { name: string; slug: string }; environment: { name: string; slug: string };
folders: { folders: {
name: string; name: string;
secrets?: { secretId: string; referencedSecretKey: string }[]; secrets?: { secretId: string; referencedSecretKey: string; referencedSecretId: string }[];
isImported: boolean; isImported: boolean;
}[]; }[];
}[]; }[];
@@ -38,12 +38,14 @@ interface CollapsibleSecretImportsProps {
}[] }[]
| null; | null;
secretsToDelete: string[]; secretsToDelete: string[];
onlyReferences?: boolean;
} }
export const CollapsibleSecretImports: React.FC<CollapsibleSecretImportsProps> = ({ export const CollapsibleSecretImports: React.FC<CollapsibleSecretImportsProps> = ({
importedBy = [], importedBy = [],
usedBySecretSyncs = [], usedBySecretSyncs = [],
secretsToDelete secretsToDelete,
onlyReferences
}) => { }) => {
const { currentWorkspace } = useWorkspace(); const { currentWorkspace } = useWorkspace();
@@ -88,7 +90,7 @@ export const CollapsibleSecretImports: React.FC<CollapsibleSecretImportsProps> =
importedBy.forEach((env) => { importedBy.forEach((env) => {
env.folders.forEach((folder) => { env.folders.forEach((folder) => {
if (folder.isImported) { if (folder.isImported && !onlyReferences) {
items.push({ items.push({
type: ItemType.Folder, type: ItemType.Folder,
path: folder.name, path: folder.name,
@@ -4,6 +4,7 @@ import { ProjectPermissionCan } from "@app/components/permissions";
import { import {
Button, Button,
Checkbox, Checkbox,
DeleteActionModal,
DropdownMenu, DropdownMenu,
DropdownMenuContent, DropdownMenuContent,
DropdownMenuItem, DropdownMenuItem,
@@ -31,7 +32,7 @@ import {
useProjectPermission, useProjectPermission,
useWorkspace useWorkspace
} from "@app/context"; } from "@app/context";
import { useToggle } from "@app/hooks"; import { usePopUp, useToggle } from "@app/hooks";
import { SecretV3RawSanitized } from "@app/hooks/api/secrets/types"; import { SecretV3RawSanitized } from "@app/hooks/api/secrets/types";
import { WsTag } from "@app/hooks/api/types"; import { WsTag } from "@app/hooks/api/types";
import { subject } from "@casl/ability"; import { subject } from "@casl/ability";
@@ -56,6 +57,7 @@ import {
SecretActionType, SecretActionType,
TFormSchema TFormSchema
} from "./SecretListView.utils"; } from "./SecretListView.utils";
import { CollapsibleSecretImports } from "./CollapsibleSecretImports";
type Props = { type Props = {
secret: SecretV3RawSanitized; secret: SecretV3RawSanitized;
@@ -74,6 +76,14 @@ type Props = {
environment: string; environment: string;
secretPath: string; secretPath: string;
handleSecretShare: () => void; handleSecretShare: () => void;
importedBy?: {
environment: { name: string; slug: string };
folders: {
name: string;
secrets?: { secretId: string; referencedSecretKey: string; referencedSecretId: string }[];
isImported: boolean;
}[];
}[];
}; };
export const SecretItem = memo( export const SecretItem = memo(
@@ -89,8 +99,12 @@ export const SecretItem = memo(
onToggleSecretSelect, onToggleSecretSelect,
environment, environment,
secretPath, secretPath,
handleSecretShare handleSecretShare,
importedBy
}: Props) => { }: Props) => {
const { handlePopUpOpen, handlePopUpToggle, handlePopUpClose, popUp } = usePopUp([
"editSecret"
] as const);
const { currentWorkspace } = useWorkspace(); const { currentWorkspace } = useWorkspace();
const { permission } = useProjectPermission(); const { permission } = useProjectPermission();
const { isRotatedSecret } = secret; const { isRotatedSecret } = secret;
@@ -194,9 +208,25 @@ export const SecretItem = memo(
}; };
const handleFormSubmit = async (data: TFormSchema) => { const handleFormSubmit = async (data: TFormSchema) => {
if (
importedBy &&
importedBy.some(({ folders }) =>
folders?.some(({ secrets }) =>
secrets?.some(({ referencedSecretId }) => referencedSecretId === secret.id)
)
)
) {
handlePopUpOpen("editSecret", data);
return;
}
await onSaveSecret(secret, { ...secret, ...data }, () => reset()); await onSaveSecret(secret, { ...secret, ...data }, () => reset());
}; };
const handleEditSecret = async (data: TFormSchema) => {
await onSaveSecret(secret, { ...secret, ...data }, () => reset());
handlePopUpClose("editSecret");
};
const handleTagSelect = (tag: WsTag) => { const handleTagSelect = (tag: WsTag) => {
if (selectedTagsGroupById?.[tag.id]) { if (selectedTagsGroupById?.[tag.id]) {
const tagPos = selectedTags.findIndex(({ id }) => id === tag.id); const tagPos = selectedTags.findIndex(({ id }) => id === tag.id);
@@ -682,6 +712,26 @@ export const SecretItem = memo(
</AnimatePresence> </AnimatePresence>
</div> </div>
</div> </div>
<DeleteActionModal
isOpen={popUp.editSecret.isOpen}
deleteKey="confirm"
buttonColorSchema="secondary"
buttonText="Save"
subTitle=""
title="Do you want to edit this secret?"
onChange={(isOpen) => handlePopUpToggle("editSecret", isOpen)}
onDeleteApproved={() => handleEditSecret(popUp?.editSecret?.data)}
formContent={
importedBy &&
importedBy.length > 0 && (
<CollapsibleSecretImports
importedBy={importedBy}
secretsToDelete={[secret.key]}
onlyReferences
/>
)
}
/>
</form> </form>
); );
} }
@@ -34,7 +34,7 @@ type Props = {
environment: { name: string; slug: string }; environment: { name: string; slug: string };
folders: { folders: {
name: string; name: string;
secrets?: { secretId: string; referencedSecretKey: string }[]; secrets?: { secretId: string; referencedSecretKey: string; referencedSecretId: string }[];
isImported: boolean; isImported: boolean;
}[]; }[];
}[]; }[];
@@ -354,6 +354,7 @@ export const SecretListView = ({
onSaveSecret={handleSaveSecret} onSaveSecret={handleSaveSecret}
onDeleteSecret={onDeleteSecret} onDeleteSecret={onDeleteSecret}
onDetailViewSecret={onDetailViewSecret} onDetailViewSecret={onDetailViewSecret}
importedBy={importedBy}
onCreateTag={onCreateTag} onCreateTag={onCreateTag}
handleSecretShare={() => handleSecretShare={() =>
handlePopUpOpen("createSharedSecret", { handlePopUpOpen("createSharedSecret", {