-
+
@@ -40,13 +40,15 @@
- **[Language-Agnostic CLI](https://infisical.com/docs/cli/overview)** that pulls and injects environment variables into your local workflow
- **[Complete control over your data](https://infisical.com/docs/self-hosting/overview)** - host it yourself on any infrastructure
- **Navigate Multiple Environments** per project (e.g. development, staging, production, etc.)
-- **Personal/Shared** scoping for environment variables
+- **Personal overrides** for environment variables
- **[Integrations](https://infisical.com/docs/integrations/overview)** with CI/CD and production infrastructure
+- **[Secret Versioning](https://infisical.com/docs/getting-started/dashboard/versioning)** - check the history of change for any secret
+- **[Activity Logs](https://infisical.com/docs/getting-started/dashboard/audit-logs)** - check what user in the project is performing what actions with secrets
+- **[Point-in-time Secrets Recovery](https://infisical.com/docs/getting-started/dashboard/pit-recovery)** - roll back to any snapshot of you secrets
- 🔜 **1-Click Deploy** to Digital Ocean and Heroku
- 🔜 **Authentication/Authorization** for projects (read/write controls soon)
- 🔜 **Automatic Secret Rotation**
- 🔜 **2FA**
-- 🔜 **Access Logs**
- 🔜 **Slack Integration & MS Teams** integrations
And more.
@@ -65,7 +67,7 @@ To quickly get started, visit our [get started guide](https://infisical.com/docs
Infisical makes secret management simple and end-to-end encrypted by default. We're on a mission to make it more accessible to all developers, not just security teams.
-According to a [report](https://www.ekransystem.com/en/blog/secrets-management) in 2019, only 10% of organizations use secret management solutions despite all using digital secrets to some extent.
+According to a [report](https://www.ekransystem.com/en/blog/secrets-management), only 10% of organizations use secret management solutions despite all using digital secrets to some extent.
If you care about efficiency and security, then Infisical is right for you.
@@ -319,7 +321,7 @@ Looking to report a security vulnerability? Please don't post about it in GitHub
## 🚨 Stay Up-to-Date
-Infisical officially launched as v.1.0 on November 21st, 2022. However, a lot of new features are coming very quickly. Watch **releases** of this repository to be notified about future updates:
+Infisical officially launched as v.1.0 on November 21st, 2022. There are a lot of new features coming very frequently. Watch **releases** of this repository to be notified about future updates:
@@ -331,7 +333,7 @@ Infisical officially launched as v.1.0 on November 21st, 2022. However, a lot of
-
+ 
## 🌎 Translations
diff --git a/backend/src/app.ts b/backend/src/app.ts
index 1e1bbb593..000fa647d 100644
--- a/backend/src/app.ts
+++ b/backend/src/app.ts
@@ -1,7 +1,7 @@
// eslint-disable-next-line @typescript-eslint/no-var-requires
const { patchRouterParam } = require('./utils/patchAsyncRoutes');
-import express from 'express';
+import express, { Request, Response } from 'express';
import helmet from 'helmet';
import cors from 'cors';
import cookieParser from 'cookie-parser';
@@ -43,6 +43,8 @@ import {
apiKeyData as v2APIKeyDataRouter,
} from './routes/v2';
+import { healthCheck } from './routes/status';
+
import { getLogger } from './utils/logger';
import { RouteNotFoundError } from './utils/errors';
import { requestErrorHandler } from './middleware/requestErrorHandler';
@@ -101,6 +103,10 @@ app.use('/api/v2/secret', v2SecretRouter);
app.use('/api/v2/service-token', v2ServiceTokenDataRouter);
app.use('/api/v2/api-key-data', v2APIKeyDataRouter);
+
+// Server status
+app.use('/api', healthCheck)
+
//* Handle unrouted requests and respond with proper error message as well as status code
app.use((req, res, next) => {
if (res.headersSent) return next();
diff --git a/backend/src/controllers/v2/secretController.ts b/backend/src/controllers/v2/secretController.ts
index e0cc936c4..3bb9f1720 100644
--- a/backend/src/controllers/v2/secretController.ts
+++ b/backend/src/controllers/v2/secretController.ts
@@ -7,6 +7,39 @@ const { ValidationError } = mongoose.Error;
import { BadRequestError, InternalServerError, UnauthorizedRequestError, ValidationError as RouteValidationError } from '../../utils/errors';
import { AnyBulkWriteOperation } from 'mongodb';
import { SECRET_PERSONAL, SECRET_SHARED } from "../../variables";
+import { validateMembership } from "../../helpers/membership";
+import { ADMIN, MEMBER } from '../../variables';
+
+export const createSingleSecret = async (req: Request, res: Response) => {
+ const secretToCreate: CreateSecretRequestBody = req.body.secret;
+ const { workspaceId, environmentName } = req.params
+ const sanitizedSecret: SanitizedSecretForCreate = {
+ secretKeyCiphertext: secretToCreate.secretKeyCiphertext,
+ secretKeyIV: secretToCreate.secretKeyIV,
+ secretKeyTag: secretToCreate.secretKeyTag,
+ secretKeyHash: secretToCreate.secretKeyHash,
+ secretValueCiphertext: secretToCreate.secretValueCiphertext,
+ secretValueIV: secretToCreate.secretValueIV,
+ secretValueTag: secretToCreate.secretValueTag,
+ secretValueHash: secretToCreate.secretValueHash,
+ secretCommentCiphertext: secretToCreate.secretCommentCiphertext,
+ secretCommentIV: secretToCreate.secretCommentIV,
+ secretCommentTag: secretToCreate.secretCommentTag,
+ secretCommentHash: secretToCreate.secretCommentHash,
+ workspace: new Types.ObjectId(workspaceId),
+ environment: environmentName,
+ type: secretToCreate.type,
+ user: new Types.ObjectId(req.user._id)
+ }
+
+
+ const [error, newlyCreatedSecret] = await to(Secret.create(sanitizedSecret).then())
+ if (error instanceof ValidationError) {
+ throw RouteValidationError({ message: error.message, stack: error.stack })
+ }
+
+ res.status(200).send()
+}
export const batchCreateSecrets = async (req: Request, res: Response) => {
const secretsToCreate: CreateSecretRequestBody[] = req.body.secrets;
@@ -48,16 +81,6 @@ export const batchCreateSecrets = async (req: Request, res: Response) => {
res.status(200).send()
}
-
-export const createSingleSecret = async (req: Request, res: Response) => {
- try {
- const secretFromDB = await Secret.findById(req.params.secretId)
- return res.status(200).send(secretFromDB);
- } catch (e) {
- throw BadRequestError({ message: "Unable to find the requested secret" })
- }
-}
-
export const batchDeleteSecrets = async (req: Request, res: Response) => {
const { workspaceId, environmentName } = req.params
const secretIdsToDelete: string[] = req.body.secretIds
@@ -90,6 +113,33 @@ export const batchDeleteSecrets = async (req: Request, res: Response) => {
res.status(200).send()
}
+export const deleteSingleSecret = async (req: Request, res: Response) => {
+ const { secretId } = req.params;
+
+ const [error, singleSecretRetrieved] = await to(Secret.findById(secretId).then())
+ if (error instanceof ValidationError) {
+ throw RouteValidationError({ message: "Unable to get secret, please try again", stack: error.stack })
+ }
+
+ if (singleSecretRetrieved) {
+ const [membershipValidationError, membership] = await to(validateMembership({
+ userId: req.user._id,
+ workspaceId: singleSecretRetrieved.workspace._id.toString(),
+ acceptedRoles: [ADMIN, MEMBER]
+ }))
+
+ if (membershipValidationError || !membership) {
+ throw UnauthorizedRequestError()
+ }
+
+ await Secret.findByIdAndDelete(secretId)
+
+ res.status(200).send()
+ } else {
+ throw BadRequestError()
+ }
+}
+
export const batchModifySecrets = async (req: Request, res: Response) => {
const { workspaceId, environmentName } = req.params
const secretsModificationsRequested: ModifySecretRequestBody[] = req.body.secrets;
@@ -101,7 +151,6 @@ export const batchModifySecrets = async (req: Request, res: Response) => {
const secretsUserCanModifySet: Set{text}
+{text}
)}{t("activity:event." + selected)}
) : ( -Select an event
+{String(t("common:select-event"))}
)} {selected != '' ? (| First Name | -Last Name | -FIRST NAME | +LAST NAME | +
|---|