awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-10 13:28:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Checkpoint service accounts

Browse Source
This commit is contained in:
Tuan Dang
2023-03-18 13:52:38 +07:00
parent ebdcccb6ca
commit 8fb473c57c
1 changed files with 77 additions and 86 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/controllers/v2/serviceAccountsController.ts
+77 -86
View File
@@ -38,74 +38,86 @@ export const createServiceAccount = async (req: Request, res: Response) => {
expiresAt expiresAt
}).save(); }).save();
// await Promise.all(
// workspaces.map(async ({
// workspaceId,
// environments,
// permissions,
// encryptedKey,
// nonce
// }: {
// workspaceId: string;
// environments: string[];
// permissions: string[];
// encryptedKey: string;
// nonce: string;
// }) => {
// const serviceAccountKey = await new ServiceAccountKey({
// encryptedKey,
// nonce,
// sender: req.user._id,
// serviceAccount: serviceAccount._id,
// workspace: new Types.ObjectId(workspaceId)
// });
// console.log('serviceAccountKey: ', serviceAccountKey);
// await Promise.all(
// permissions.map(async (name: string) => {
// const permission = await new ServiceAccountPermission({
// serviceAccount: serviceAccount._id,
// name,
// workspace: new Types.ObjectId(workspaceId),
// environments
// }).save();
// console.log('permission: ', permission);
// })
// );
// })
// );
return res.status(200).send({ return res.status(200).send({
serviceAccount serviceAccount
}); });
} }
// /** /**
// * Add a service account key to service account with id [serviceAccountId] * Add a service account key to service account with id [serviceAccountId]
// * for workspace with id [workspaceId] * for workspace with id [workspaceId]
// * @param req * @param req
// * @param res * @param res
// * @returns * @returns
// */ */
// export const addServiceAccountKey = async (req: Request, res: Response) => { export const addServiceAccountKey = async (req: Request, res: Response) => {
// const { const {
// workspaceId, workspaceId,
// encryptedKey, encryptedKey,
// nonce nonce
// } = req.body; } = req.body;
// const serviceAccountKey = await new ServiceAccountKey({ const serviceAccountKey = await new ServiceAccountKey({
// encryptedKey, encryptedKey,
// nonce, nonce,
// sender: req.user._id, sender: req.user._id,
// serviceAccount: req.serviceAccount._d, serviceAccount: req.serviceAccount._d,
// workspace: new Types.ObjectId(workspaceId) workspace: new Types.ObjectId(workspaceId)
// }).save(); }).save();
// return serviceAccountKey; return serviceAccountKey;
// } }
/**
* Add a permission to service account with id [serviceAccountId]
* @param req
* @param res
*/
export const addServiceAccountPermission = async (req: Request, res: Response) => {
const {
name,
workspaceId,
environment
} = req.body; // TODO: add DTO
// TODO: validation?
const serviceAccountPermission = await new ServiceAccountPermission({
serviceAccount: req.serviceAccount._id,
name,
workspace: new Types.ObjectId(workspaceId),
environment
});
return res.status(200).send({
serviceAccountPermission
});
}
/**
* Delete a permission from service account with id [serviceAccountId]
* @param req
* @param res
*/
export const deleteServiceAccountPermission = async (req: Request, res: Response) => {
const {
name,
workspaceId,
environment
} = req.body; // TODO: DTO
// TODO: how to delete just 1 permission?
const serviceAccountPermission = await ServiceAccountPermission.findOneAndDelete({
serviceAccount: req.serviceAccount._id,
name,
workspace: new Types.ObjectId(workspaceId),
environment
});
return res.status(200).send({
serviceAccountPermission
});
}
/** /**
* Delete service account with id [serviceAccountId] * Delete service account with id [serviceAccountId]
@@ -122,36 +134,15 @@ export const deleteServiceAccount = async (req: Request, res: Response) => {
serviceAccount: new Types.ObjectId(serviceAccountId) serviceAccount: new Types.ObjectId(serviceAccountId)
}); });
await ServiceAccountPermission.deleteMany({
serviceAccount: new Types.ObjectId(serviceAccountId)
});
return res.status(200).send({ return res.status(200).send({
serviceAccount serviceAccount
}); });
} }
export const addServiceAccountWorkspaceAccess = async (req: Request, res: Response) => {
const { serviceAccountId, workspaceId } = req.params;
const {
encryptedKey,
nonce,
permissions // should contain environments
} = req.body;
const serviceAccountKey = await new ServiceAccountKey({
encryptedKey,
nonce,
sender: req.user._id,
serviceAccount: req.serviceAccount._id,
workspace: new Types.ObjectId('workspaceId')
});
const serviceAccountPermissions = await Promise.all(
permissions.map
);
}
export const deleteServiceAccountWorkspaceAccess = async (req: Request, res: Response) => {
// TODO
}
// /** // /**
// * Add a service account key to service account with id [serviceAccountId] // * Add a service account key to service account with id [serviceAccountId]
// * for workspace with id [workspaceId] // * for workspace with id [workspaceId]