refactor(ui): migrated secret endpoints of e2ee to raw

frontend/src/hooks/api/secrets/mutations.tsx

@@ -1,18 +1,11 @@
-import crypto from "crypto";
-
 import { MutationOptions, useMutation, useQueryClient } from "@tanstack/react-query";
 
-import {
-  decryptAssymmetric,
-  encryptSymmetric
-} from "@app/components/utilities/cryptography/crypto";
 import { apiRequest } from "@app/config/request";
 
 import { secretApprovalRequestKeys } from "../secretApprovalRequest/queries";
 import { secretSnapshotKeys } from "../secretSnapshots/queries";
 import { secretKeys } from "./queries";
 import {
-  CreateSecretDTO,
   TCreateSecretBatchDTO,
   TCreateSecretsV3DTO,
   TDeleteSecretBatchDTO,
@@ -22,50 +15,6 @@ import {
   TUpdateSecretsV3DTO
 } from "./types";
 
-const encryptSecret = (randomBytes: string, key: string, value?: string, comment?: string) => {
-  // encrypt key
-  const {
-    ciphertext: secretKeyCiphertext,
-    iv: secretKeyIV,
-    tag: secretKeyTag
-  } = encryptSymmetric({
-    plaintext: key,
-    key: randomBytes
-  });
-
-  // encrypt value
-  const {
-    ciphertext: secretValueCiphertext,
-    iv: secretValueIV,
-    tag: secretValueTag
-  } = encryptSymmetric({
-    plaintext: value ?? "",
-    key: randomBytes
-  });
-
-  // encrypt comment
-  const {
-    ciphertext: secretCommentCiphertext,
-    iv: secretCommentIV,
-    tag: secretCommentTag
-  } = encryptSymmetric({
-    plaintext: comment ?? "",
-    key: randomBytes
-  });
-
-  return {
-    secretKeyCiphertext,
-    secretKeyIV,
-    secretKeyTag,
-    secretValueCiphertext,
-    secretValueIV,
-    secretValueTag,
-    secretCommentCiphertext,
-    secretCommentIV,
-    secretCommentTag
-  };
-};
-
 export const useCreateSecretV3 = ({
   options
 }: {
@@ -78,32 +27,20 @@ export const useCreateSecretV3 = ({
       type,
       environment,
       workspaceId,
-      secretName,
+      secretKey,
       secretValue,
-      latestFileKey,
       secretComment,
       skipMultilineEncoding
     }) => {
-      const PRIVATE_KEY = localStorage.getItem("PRIVATE_KEY") as string;
-
-      const randomBytes = latestFileKey
-        ? decryptAssymmetric({
-            ciphertext: latestFileKey.encryptedKey,
-            nonce: latestFileKey.nonce,
-            publicKey: latestFileKey.sender.publicKey,
-            privateKey: PRIVATE_KEY
-          })
-        : crypto.randomBytes(16).toString("hex");
-
-      const reqBody = {
-        workspaceId,
-        environment,
-        type,
+      const { data } = await apiRequest.post(`/api/v3/secrets/raw/${secretKey}`, {
         secretPath,
-        ...encryptSecret(randomBytes, secretName, secretValue, secretComment),
+        type,
+        environment,
+        workspaceId,
+        secretValue,
+        secretComment,
         skipMultilineEncoding
-      };
-      const { data } = await apiRequest.post(`/api/v3/secrets/${secretName}`, reqBody);
+      });
       return data;
     },
     onSuccess: (_, { workspaceId, environment, secretPath }) => {
@@ -132,44 +69,30 @@ export const useUpdateSecretV3 = ({
     mutationFn: async ({
       secretPath = "/",
       type,
-      secretId,
       environment,
       workspaceId,
-      secretName,
+      secretKey,
       secretValue,
-      latestFileKey,
-      tags,
+      tagIds,
       secretComment,
       secretReminderRepeatDays,
       secretReminderNote,
       newSecretName,
       skipMultilineEncoding
     }) => {
-      const PRIVATE_KEY = localStorage.getItem("PRIVATE_KEY") as string;
-
-      const randomBytes = latestFileKey
-        ? decryptAssymmetric({
-            ciphertext: latestFileKey.encryptedKey,
-            nonce: latestFileKey.nonce,
-            publicKey: latestFileKey.sender.publicKey,
-            privateKey: PRIVATE_KEY
-          })
-        : crypto.randomBytes(16).toString("hex");
-
-      const reqBody = {
+      const { data } = await apiRequest.patch(`/api/v3/secrets/raw/${secretKey}`, {
         workspaceId,
         environment,
         type,
         secretReminderNote,
         secretReminderRepeatDays,
         secretPath,
-        secretId,
-        ...encryptSecret(randomBytes, newSecretName ?? secretName, secretValue, secretComment),
-        tags,
         skipMultilineEncoding,
-        secretName: newSecretName
-      };
-      const { data } = await apiRequest.patch(`/api/v3/secrets/${secretName}`, reqBody);
+        newSecretName,
+        secretComment,
+        tagIds,
+        secretValue
+      });
       return data;
     },
     onSuccess: (_, { workspaceId, environment, secretPath }) => {
@@ -201,19 +124,17 @@ export const useDeleteSecretV3 = ({
       type,
       environment,
       workspaceId,
-      secretName,
+      secretKey,
       secretId
     }) => {
-      const reqBody = {
-        workspaceId,
-        environment,
-        type,
-        secretPath,
-        secretId
-      };
-
-      const { data } = await apiRequest.delete(`/api/v3/secrets/${secretName}`, {
-        data: reqBody
+      const { data } = await apiRequest.delete(`/api/v3/secrets/raw/${secretKey}`, {
+        data: {
+          workspaceId,
+          environment,
+          type,
+          secretPath,
+          secretId
+        }
       });
       return data;
     },
@@ -241,33 +162,13 @@ export const useCreateSecretBatch = ({
   const queryClient = useQueryClient();
 
   return useMutation<{}, {}, TCreateSecretBatchDTO>({
-    mutationFn: async ({ secretPath = "/", workspaceId, environment, secrets, latestFileKey }) => {
-      const PRIVATE_KEY = localStorage.getItem("PRIVATE_KEY") as string;
-      const randomBytes = latestFileKey
-        ? decryptAssymmetric({
-            ciphertext: latestFileKey.encryptedKey,
-            nonce: latestFileKey.nonce,
-            publicKey: latestFileKey.sender.publicKey,
-            privateKey: PRIVATE_KEY
-          })
-        : crypto.randomBytes(16).toString("hex");
-
-      const reqBody = {
+    mutationFn: async ({ secretPath = "/", workspaceId, environment, secrets }) => {
+      const { data } = await apiRequest.post("/api/v3/secrets/batch/raw", {
         workspaceId,
         environment,
         secretPath,
-        secrets: secrets.map(
-          ({ secretName, secretValue, secretComment, metadata, type, skipMultilineEncoding }) => ({
-            secretName,
-            ...encryptSecret(randomBytes, secretName, secretValue, secretComment),
-            type,
-            metadata,
-            skipMultilineEncoding
-          })
-        )
-      };
-
-      const { data } = await apiRequest.post("/api/v3/secrets/batch", reqBody);
+        secrets
+      });
       return data;
     },
     onSuccess: (_, { workspaceId, environment, secretPath }) => {
@@ -294,33 +195,13 @@ export const useUpdateSecretBatch = ({
   const queryClient = useQueryClient();
 
   return useMutation<{}, {}, TUpdateSecretBatchDTO>({
-    mutationFn: async ({ secretPath = "/", workspaceId, environment, secrets, latestFileKey }) => {
-      const PRIVATE_KEY = localStorage.getItem("PRIVATE_KEY") as string;
-      const randomBytes = latestFileKey
-        ? decryptAssymmetric({
-            ciphertext: latestFileKey.encryptedKey,
-            nonce: latestFileKey.nonce,
-            publicKey: latestFileKey.sender.publicKey,
-            privateKey: PRIVATE_KEY
-          })
-        : crypto.randomBytes(16).toString("hex");
-
-      const reqBody = {
+    mutationFn: async ({ secretPath = "/", workspaceId, environment, secrets }) => {
+      const { data } = await apiRequest.patch("/api/v3/secrets/batch/raw", {
         workspaceId,
         environment,
         secretPath,
-        secrets: secrets.map(
-          ({ secretName, secretValue, secretComment, type, tags, skipMultilineEncoding }) => ({
-            secretName,
-            ...encryptSecret(randomBytes, secretName, secretValue, secretComment),
-            type,
-            tags,
-            skipMultilineEncoding
-          })
-        )
-      };
-
-      const { data } = await apiRequest.patch("/api/v3/secrets/batch", reqBody);
+        secrets
+      });
       return data;
     },
     onSuccess: (_, { workspaceId, environment, secretPath }) => {
@@ -348,15 +229,13 @@ export const useDeleteSecretBatch = ({
 
   return useMutation<{}, {}, TDeleteSecretBatchDTO>({
     mutationFn: async ({ secretPath = "/", workspaceId, environment, secrets }) => {
-      const reqBody = {
-        workspaceId,
-        environment,
-        secretPath,
-        secrets
-      };
-
-      const { data } = await apiRequest.delete("/api/v3/secrets/batch", {
-        data: reqBody
+      const { data } = await apiRequest.delete("/api/v3/secrets/batch/raw", {
+        data: {
+          workspaceId,
+          environment,
+          secretPath,
+          secrets
+        }
       });
       return data;
     },
@@ -443,7 +322,7 @@ export const useMoveSecrets = ({
   });
 };
 
-export const createSecret = async (dto: CreateSecretDTO) => {
+export const createSecret = async (dto: TCreateSecretsV3DTO) => {
   const { data } = await apiRequest.post(`/api/v3/secrets/${dto.secretKey}`, dto);
   return data;
 };