From 4db7b0c05e3b65b9368c9f32209d536d028a203d Mon Sep 17 00:00:00 2001
From: Sunil Kumar <sunilk10099@gmail.com>
Date: Wed, 19 Jul 2023 13:13:14 +0530
Subject: [PATCH] add function for windmill secret sync

---
 backend/src/integrations/sync.ts | 115 +++++++++++++++++++++++++++++++
 1 file changed, 115 insertions(+)

diff --git a/backend/src/integrations/sync.ts b/backend/src/integrations/sync.ts
index 5d8efa101..a085dd110 100644
--- a/backend/src/integrations/sync.ts
+++ b/backend/src/integrations/sync.ts
@@ -42,6 +42,8 @@ import {
   INTEGRATION_TRAVISCI_API_URL,
   INTEGRATION_VERCEL,
   INTEGRATION_VERCEL_API_URL,
+  INTEGRATION_WINDMILL,
+  INTEGRATION_WINDMILL_API_URL,
 } from "../variables";
 import { standardRequest} from "../config/request";
 
@@ -202,6 +204,13 @@ const syncSecrets = async ({
           accessToken
       });
       break;
+    case INTEGRATION_WINDMILL:
+      await syncSecretsWindmill({
+          integration,
+          secrets,
+          accessToken,
+      });
+      break;
     }
 };
 
@@ -1937,4 +1946,110 @@ const syncSecretsCloudflarePages = async ({
   );
 }
 
+/**
+ * Sync/push [secrets] to Windmil with name [integration.app]
+ * @param {Object} obj
+ * @param {IIntegration} obj.integration - integration details
+ * @param {IIntegrationAuth} obj.integrationAuth - integration auth details
+ * @param {Object} obj.secrets - secrets to push to integration (object where keys are secret keys and values are secret values)
+ * @param {String} obj.accessToken - access token for windmill integration
+ */
+const syncSecretsWindmill = async ({
+  integration,
+  secrets,
+  accessToken,
+}: {
+  integration: IIntegration;
+  secrets: any;
+  accessToken: string;
+}) => {
+  const { data: getSecretsRes } = await standardRequest.get(
+    `${INTEGRATION_WINDMILL_API_URL}/w/${integration.app}/variables/list`,
+    {
+      headers: {
+          Authorization: `Bearer ${accessToken}`,
+          "Accept-Encoding": "application/json",
+      },
+    }
+  );
+
+  // convert secret results to [key] format
+  const secretsResList = getSecretsRes.map((secretObj: any) => (secretObj.path));
+    
+  // convert the secrets to [{}] format
+  const modifiedFormatForSecretInjection: any[] = [];
+  const modifiedFormatForCreateSecretInjection: any[] = [];
+  const modifiedFormatForUpdateSecretInjection: any[] = [];
+  Object.keys(secrets).forEach(
+    (key) => {
+        if(key.startsWith("u/") || key.startsWith("f/")) {
+          if(secretsResList.includes(key)) {
+            modifiedFormatForUpdateSecretInjection.push({
+              path: key,
+              value: secrets[key],
+              is_secret: true
+            });
+          } else {
+            modifiedFormatForCreateSecretInjection.push({
+              path: key,
+              value: secrets[key],
+              is_secret: true,
+              description: ""
+            });
+          }
+      };
+    }
+  );
+
+  // create new secrets in windmill workspace
+  modifiedFormatForCreateSecretInjection.forEach(async (secretObj: any) => {
+    await standardRequest.post(
+      `${INTEGRATION_WINDMILL_API_URL}/w/${integration.app}/variables/create`,
+      secretObj,
+      {
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            "Accept-Encoding": "application/json",
+        },
+      }
+    );
+  })
+
+  // update old secrets already present in windmill workspace
+  modifiedFormatForUpdateSecretInjection.forEach(async (secretObj: any) => {
+    await standardRequest.post(
+      `${INTEGRATION_WINDMILL_API_URL}/w/${integration.app}/variables/update/${secretObj.path}`,
+      secretObj,
+      {
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            "Accept-Encoding": "application/json",
+        },
+      }
+    )
+  })
+
+  // create list of secrets to delete
+  const secretsToDelete: any = [];
+  secretsResList.forEach((secret: string) => {
+    if(!(secret in secrets)) {
+      secretsToDelete.push(secret);
+    }
+  })
+
+  // delete all secrets from secretsToDelete List
+  secretsToDelete.forEach(async (secret: string) => {
+    await standardRequest.delete(
+      `${INTEGRATION_WINDMILL_API_URL}/w/${integration.app}/variables/delete/${secret}`,
+      {
+        headers: {
+          Authorization: `Bearer ${accessToken}`,
+          "Content-Type": "application/json",
+          "Accept-Encoding": "application/json",
+        }
+      }
+    );
+  });
+};
+
 export { syncSecrets };