{isExpanded && !isDragging && (
- |
+ |
@@ -146,19 +168,26 @@ export const SecretImportItem = ({
)}
- {importedSecrets.filter(secret => secret.key.toUpperCase().includes(searchTerm.toUpperCase())).map(({ key, value, overriden }, index) => (
-
- |
- {key}
- |
-
-
- |
-
-
- |
-
- ))}
+ {importedSecrets
+ .filter((secret) =>
+ secret.key.toUpperCase().includes(searchTerm.toUpperCase())
+ )
+ .map(({ key, value, overriden }, index) => (
+
+ |
+ {key}
+ |
+
+
+ |
+
+
+ |
+
+ ))}
diff --git a/frontend/src/views/DashboardPage/components/SecretImportSection/SecretImportSection.tsx b/frontend/src/views/DashboardPage/components/SecretImportSection/SecretImportSection.tsx
index 9d796d079..db12e84a4 100644
--- a/frontend/src/views/DashboardPage/components/SecretImportSection/SecretImportSection.tsx
+++ b/frontend/src/views/DashboardPage/components/SecretImportSection/SecretImportSection.tsx
@@ -59,13 +59,23 @@ export const computeImportedSecretRows = (
type Props = {
secrets?: DecryptedSecret[];
importedSecrets?: TImportedSecrets;
+ environment: string;
+ secretPath: string;
onSecretImportDelete: (env: string, secPath: string) => void;
items: { id: string; environment: string; secretPath: string }[];
searchTerm: string;
};
export const SecretImportSection = memo(
- ({ secrets = [], importedSecrets = [], onSecretImportDelete, items = [], searchTerm = "" }: Props) => {
+ ({
+ secrets = [],
+ environment,
+ secretPath,
+ importedSecrets = [],
+ onSecretImportDelete,
+ items = [],
+ searchTerm = ""
+ }: Props) => {
const { currentWorkspace } = useWorkspace();
const environments = currentWorkspace?.environments || [];
@@ -82,6 +92,8 @@ export const SecretImportSection = memo(
secrets,
environments
)}
+ secretPath={secretPath}
+ environment={environment}
onDelete={onSecretImportDelete}
importedSecPath={impSecPath}
searchTerm={searchTerm}
diff --git a/frontend/src/views/DashboardPage/components/SecretInputRow/SecretInputRow.tsx b/frontend/src/views/DashboardPage/components/SecretInputRow/SecretInputRow.tsx
index 6c089d695..c31c6df2e 100644
--- a/frontend/src/views/DashboardPage/components/SecretInputRow/SecretInputRow.tsx
+++ b/frontend/src/views/DashboardPage/components/SecretInputRow/SecretInputRow.tsx
@@ -8,6 +8,7 @@ import {
UseFormSetValue,
useWatch
} from "react-hook-form";
+import { subject } from "@casl/ability";
import {
faCheck,
faCodeBranch,
@@ -22,26 +23,34 @@ import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";
import { cx } from "cva";
import { twMerge } from "tailwind-merge";
+// TODO:(akhilmhdh): Refactor this
+import AddTagPopoverContent from "@app/components/AddTagPopoverContent/AddTagPopoverContent";
+import { ProjectPermissionCan } from "@app/components/permissions";
import {
+ FormControl,
HoverCard,
HoverCardContent,
HoverCardTrigger,
IconButton,
Input,
Popover,
+ PopoverContent,
PopoverTrigger,
SecretInput,
Tag,
+ TextArea,
Tooltip
} from "@app/components/v2";
+import { ProjectPermissionActions, ProjectPermissionSub } from "@app/context";
import { useToggle } from "@app/hooks";
import { WsTag } from "@app/hooks/api/types";
-import AddTagPopoverContent from "../../../../components/AddTagPopoverContent/AddTagPopoverContent";
import { FormData, SecretActionType } from "../../DashboardPage.utils";
type Props = {
index: number;
+ environment: string;
+ secretPath: string;
// backend generated unique id
secUniqId?: string;
// permission and external state's that decided to hide or show
@@ -69,6 +78,8 @@ type Props = {
export const SecretInputRow = memo(
({
index,
+ secretPath,
+ environment,
isSecretValueHidden,
onRowExpand,
isReadOnly,
@@ -79,7 +90,7 @@ export const SecretInputRow = memo(
onSecretDelete,
searchTerm,
control,
- // register,
+ register,
setValue,
isKeyError,
keyError,
@@ -217,7 +228,6 @@ export const SecretInputRow = memo(
{index + 1}
|
-
-
-
-
-
-
+
+ {(isAllowed) => (
+
+
+
+ )}
+
-
-
-
-
-
-
-
+
+ {(isAllowed) => (
+
+
+
+
+
+ )}
+
-
-
-
+
+
+
+
-
-
-
- onSelectTag(wsTag)}
- handleTagOnMouseEnter={(wsTag: WsTag) => handleTagOnMouseEnter(wsTag)}
- handleTagOnMouseLeave={() => handleTagOnMouseLeave()}
- checkIfTagIsVisible={(wsTag: WsTag) => checkIfTagIsVisible(wsTag)}
- handleOnCreateTagOpen={() => onCreateTagOpen()}
- />
-
-
@@ -453,20 +492,27 @@ export const SecretInputRow = memo(
)}
-
- {
- onSecretDelete(index, secKey, secId, idOverride);
- }}
- >
-
-
-
+
+ {(isAllowed) => (
+ {
+ onSecretDelete(index, secKey, secId, idOverride);
+ }}
+ >
+
+
+ )}
+
diff --git a/frontend/src/views/IntegrationsPage/IntegrationsPage.tsx b/frontend/src/views/IntegrationsPage/IntegrationsPage.tsx
index 054ce34a1..e8e4e5b2c 100644
--- a/frontend/src/views/IntegrationsPage/IntegrationsPage.tsx
+++ b/frontend/src/views/IntegrationsPage/IntegrationsPage.tsx
@@ -4,7 +4,8 @@ import { useRouter } from "next/router";
import { useNotificationContext } from "@app/components/context/Notifications/NotificationProvider";
import { Button, Modal, ModalContent } from "@app/components/v2";
-import { useWorkspace } from "@app/context";
+import { ProjectPermissionActions, ProjectPermissionSub, useWorkspace } from "@app/context";
+import { withProjectPermission } from "@app/hoc";
import { usePopUp } from "@app/hooks";
import {
useDeleteIntegration,
@@ -31,191 +32,194 @@ type Props = {
frameworkIntegrations: Array<{ name: string; slug: string; image: string; docsLink: string }>;
};
-export const IntegrationsPage = ({ frameworkIntegrations }: Props) => {
- const { t } = useTranslation();
- const { createNotification } = useNotificationContext();
- const router = useRouter();
+export const IntegrationsPage = withProjectPermission(
+ ({ frameworkIntegrations }: Props) => {
+ const { t } = useTranslation();
+ const { createNotification } = useNotificationContext();
+ const router = useRouter();
- const { currentWorkspace } = useWorkspace();
- const workspaceId = currentWorkspace?._id || "";
- const environments = currentWorkspace?.environments || [];
+ const { currentWorkspace } = useWorkspace();
+ const workspaceId = currentWorkspace?._id || "";
+ const environments = currentWorkspace?.environments || [];
- const { data: latestWsKey } = useGetUserWsKey(workspaceId);
+ const { data: latestWsKey } = useGetUserWsKey(workspaceId);
- const { popUp, handlePopUpOpen, handlePopUpToggle, handlePopUpClose } = usePopUp([
- "activeBot"
- ] as const);
+ const { popUp, handlePopUpOpen, handlePopUpToggle, handlePopUpClose } = usePopUp([
+ "activeBot"
+ ] as const);
- const { data: cloudIntegrations, isLoading: isCloudIntegrationsLoading } =
- useGetCloudIntegrations();
+ const { data: cloudIntegrations, isLoading: isCloudIntegrationsLoading } =
+ useGetCloudIntegrations();
- const { data: integrationAuths, isLoading: isIntegrationAuthLoading } =
- useGetWorkspaceAuthorizations(
- workspaceId,
- useCallback((data: IntegrationAuth[]) => {
- const groupBy: Record = {};
- data.forEach((el) => {
- groupBy[el.integration] = el;
- });
- return groupBy;
- }, [])
- );
- // mutation
- const {
- data: integrations,
- isLoading: isIntegrationLoading,
- isFetching: isIntegrationFetching
- } = useGetWorkspaceIntegrations(workspaceId);
+ const { data: integrationAuths, isLoading: isIntegrationAuthLoading } =
+ useGetWorkspaceAuthorizations(
+ workspaceId,
+ useCallback((data: IntegrationAuth[]) => {
+ const groupBy: Record = {};
+ data.forEach((el) => {
+ groupBy[el.integration] = el;
+ });
+ return groupBy;
+ }, [])
+ );
+ // mutation
+ const {
+ data: integrations,
+ isLoading: isIntegrationLoading,
+ isFetching: isIntegrationFetching
+ } = useGetWorkspaceIntegrations(workspaceId);
- const { data: bot } = useGetWorkspaceBot(workspaceId);
+ const { data: bot } = useGetWorkspaceBot(workspaceId);
- // mutation
- const { mutateAsync: updateBotActiveStatus, mutate: updateBotActiveStatusSync } =
- useUpdateBotActiveStatus();
- const { mutateAsync: deleteIntegration } = useDeleteIntegration();
- const {
- mutateAsync: deleteIntegrationAuth,
- isLoading: isDeleteIntegrationAuthSuccess,
- reset: resetDeleteIntegrationAuth
- } = useDeleteIntegrationAuth();
+ // mutation
+ const { mutateAsync: updateBotActiveStatus, mutate: updateBotActiveStatusSync } =
+ useUpdateBotActiveStatus();
+ const { mutateAsync: deleteIntegration } = useDeleteIntegration();
+ const {
+ mutateAsync: deleteIntegrationAuth,
+ isLoading: isDeleteIntegrationAuthSuccess,
+ reset: resetDeleteIntegrationAuth
+ } = useDeleteIntegrationAuth();
- // summary: this use effect is trigger when all integration auths are removed thus deactivate bot
- // details: so onsuccessfully deleting an integration auth, immediately integration list is refeteched
- // After the refetch is completed check if its empty. Then set bot active and reset the submit hook
- useEffect(() => {
- if (isDeleteIntegrationAuthSuccess && !isIntegrationFetching && !integrations?.length) {
- if (bot?._id)
- updateBotActiveStatusSync({
- isActive: false,
- botId: bot._id,
- workspaceId
- });
- resetDeleteIntegrationAuth();
- }
- }, [isIntegrationFetching, isDeleteIntegrationAuthSuccess, integrations?.length]);
-
- const handleProviderIntegration = async (provider: string) => {
- const selectedCloudIntegration = cloudIntegrations?.find(({ slug }) => provider === slug);
- if (!selectedCloudIntegration) return;
-
- try {
- if (bot && !bot.isActive) {
- const botKey = generateBotKey(bot.publicKey, latestWsKey!);
- await updateBotActiveStatus({
- workspaceId,
- botKey,
- isActive: true,
- botId: bot._id
- });
+ // summary: this use effect is trigger when all integration auths are removed thus deactivate bot
+ // details: so onsuccessfully deleting an integration auth, immediately integration list is refeteched
+ // After the refetch is completed check if its empty. Then set bot active and reset the submit hook
+ useEffect(() => {
+ if (isDeleteIntegrationAuthSuccess && !isIntegrationFetching && !integrations?.length) {
+ if (bot?._id)
+ updateBotActiveStatusSync({
+ isActive: false,
+ botId: bot._id,
+ workspaceId
+ });
+ resetDeleteIntegrationAuth();
}
- const integrationAuthForProvider = integrationAuths?.[provider];
- if (!integrationAuthForProvider) {
- redirectForProviderAuth(selectedCloudIntegration);
+ }, [isIntegrationFetching, isDeleteIntegrationAuthSuccess, integrations?.length]);
+
+ const handleProviderIntegration = async (provider: string) => {
+ const selectedCloudIntegration = cloudIntegrations?.find(({ slug }) => provider === slug);
+ if (!selectedCloudIntegration) return;
+
+ try {
+ if (bot && !bot.isActive) {
+ const botKey = generateBotKey(bot.publicKey, latestWsKey!);
+ await updateBotActiveStatus({
+ workspaceId,
+ botKey,
+ isActive: true,
+ botId: bot._id
+ });
+ }
+ const integrationAuthForProvider = integrationAuths?.[provider];
+ if (!integrationAuthForProvider) {
+ redirectForProviderAuth(selectedCloudIntegration);
+ return;
+ }
+
+ const url = redirectToIntegrationAppConfigScreen(provider, integrationAuthForProvider._id);
+ router.push(url);
+ } catch (error) {
+ console.error(error);
+ }
+ };
+
+ // function to strat integration for a provider
+ // confirmation to user passing the bot key for provider to get secret access
+ const handleProviderIntegrationStart = (provider: string) => {
+ if (!bot?.isActive) {
+ handlePopUpOpen("activeBot", { provider });
return;
}
+ handleProviderIntegration(provider);
+ };
- const url = redirectToIntegrationAppConfigScreen(provider, integrationAuthForProvider._id);
- router.push(url);
- } catch (error) {
- console.error(error);
- }
- };
+ const handleUserAcceptBotCondition = () => {
+ const { provider } = popUp.activeBot?.data as { provider: string };
+ handleProviderIntegration(provider);
+ handlePopUpClose("activeBot");
+ };
- // function to strat integration for a provider
- // confirmation to user passing the bot key for provider to get secret access
- const handleProviderIntegrationStart = (provider: string) => {
- if (!bot?.isActive) {
- handlePopUpOpen("activeBot", { provider });
- return;
- }
- handleProviderIntegration(provider);
- };
+ const handleIntegrationDelete = async (integrationId: string, cb: () => void) => {
+ try {
+ await deleteIntegration({ id: integrationId, workspaceId });
+ if (cb) cb();
+ createNotification({
+ type: "success",
+ text: "Deleted integration"
+ });
+ } catch (err) {
+ console.log(err);
+ createNotification({
+ type: "error",
+ text: "Failed to delete integration"
+ });
+ }
+ };
- const handleUserAcceptBotCondition = () => {
- const { provider } = popUp.activeBot?.data as { provider: string };
- handleProviderIntegration(provider);
- handlePopUpClose("activeBot");
- };
+ const handleIntegrationAuthRevoke = async (provider: string, cb?: () => void) => {
+ const integrationAuthForProvider = integrationAuths?.[provider];
+ if (!integrationAuthForProvider) return;
+ try {
+ await deleteIntegrationAuth({
+ id: integrationAuthForProvider._id,
+ workspaceId
+ });
+ if (cb) cb();
+ createNotification({
+ type: "success",
+ text: "Revoked provider authentication"
+ });
+ } catch (err) {
+ console.error(err);
+ createNotification({
+ type: "error",
+ text: "Failed to revoke provider authentication"
+ });
+ }
+ };
- const handleIntegrationDelete = async (integrationId: string, cb: () => void) => {
- try {
- await deleteIntegration({ id: integrationId, workspaceId });
- if (cb) cb();
- createNotification({
- type: "success",
- text: "Deleted integration"
- });
- } catch (err) {
- console.log(err);
- createNotification({
- type: "error",
- text: "Failed to delete integration"
- });
- }
- };
-
- const handleIntegrationAuthRevoke = async (provider: string, cb?: () => void) => {
- const integrationAuthForProvider = integrationAuths?.[provider];
- if (!integrationAuthForProvider) return;
- try {
- await deleteIntegrationAuth({
- id: integrationAuthForProvider._id,
- workspaceId
- });
- if (cb) cb();
- createNotification({
- type: "success",
- text: "Revoked provider authentication"
- });
- } catch (err) {
- console.error(err);
- createNotification({
- type: "error",
- text: "Failed to revoke provider authentication"
- });
- }
- };
-
- return (
-
- handleIntegrationDelete(id, cb)}
- />
-
- handlePopUpToggle("activeBot", isOpen)}
- >
-
-
-
-
+ handleIntegrationDelete(id, cb)}
+ />
+
+ handlePopUpToggle("activeBot", isOpen)}
>
- {t("integrations.why-infisical-needs-access")}
-
-
-
-
- );
-};
+
+
+
+
+ }
+ >
+ {t("integrations.why-infisical-needs-access")}
+
+
+
+
+ );
+ },
+ { action: ProjectPermissionActions.Read, subject: ProjectPermissionSub.Integrations }
+);
diff --git a/frontend/src/views/IntegrationsPage/components/CloudIntegrationSection/CloudIntegrationSection.tsx b/frontend/src/views/IntegrationsPage/components/CloudIntegrationSection/CloudIntegrationSection.tsx
index 7f458d5e5..b0abc2603 100644
--- a/frontend/src/views/IntegrationsPage/components/CloudIntegrationSection/CloudIntegrationSection.tsx
+++ b/frontend/src/views/IntegrationsPage/components/CloudIntegrationSection/CloudIntegrationSection.tsx
@@ -2,7 +2,9 @@ import { useTranslation } from "react-i18next";
import { faCheck, faXmark } from "@fortawesome/free-solid-svg-icons";
import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";
-import { DeleteActionModal,Skeleton, Tooltip } from "@app/components/v2";
+import { useNotificationContext } from "@app/components/context/Notifications/NotificationProvider";
+import { DeleteActionModal, Skeleton, Tooltip } from "@app/components/v2";
+import { ProjectPermissionActions, ProjectPermissionSub, useProjectPermission } from "@app/context";
import { usePopUp } from "@app/hooks";
import { IntegrationAuth, TCloudIntegration } from "@app/hooks/api/types";
@@ -28,11 +30,13 @@ export const CloudIntegrationSection = ({
const { popUp, handlePopUpOpen, handlePopUpClose, handlePopUpToggle } = usePopUp([
"deleteConfirmation"
] as const);
+ const permission = useProjectPermission();
+ const { createNotification } = useNotificationContext();
const isEmpty = !isLoading && !cloudIntegrations?.length;
const sortedCloudIntegrations = cloudIntegrations.sort((a, b) => a.name.localeCompare(b.name));
-
+
return (
@@ -57,6 +61,18 @@ export const CloudIntegrationSection = ({
} flex h-32 flex-row items-center rounded-md border border-mineshaft-600 bg-mineshaft-800 p-4`}
onClick={() => {
if (!cloudIntegration.isAvailable) return;
+ if (
+ permission.cannot(
+ ProjectPermissionActions.Create,
+ ProjectPermissionSub.Integrations
+ )
+ ) {
+ createNotification({
+ type: "error",
+ text: "You do not have permission to create an integration"
+ });
+ return;
+ }
onIntegrationStart(cloudIntegration.slug);
}}
key={cloudIntegration.slug}
diff --git a/frontend/src/views/IntegrationsPage/components/IntegrationsSection/IntegrationsSection.tsx b/frontend/src/views/IntegrationsPage/components/IntegrationsSection/IntegrationsSection.tsx
index 72533796d..701766a9e 100644
--- a/frontend/src/views/IntegrationsPage/components/IntegrationsSection/IntegrationsSection.tsx
+++ b/frontend/src/views/IntegrationsPage/components/IntegrationsSection/IntegrationsSection.tsx
@@ -2,6 +2,7 @@ import { faArrowRight, faXmark } from "@fortawesome/free-solid-svg-icons";
import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";
import { integrationSlugNameMapping } from "public/data/frequentConstants";
+import { ProjectPermissionCan } from "@app/components/permissions";
import {
DeleteActionModal,
EmptyState,
@@ -13,6 +14,7 @@ import {
Skeleton,
Tooltip
} from "@app/components/v2";
+import { ProjectPermissionActions, ProjectPermissionSub } from "@app/context";
import { usePopUp } from "@app/hooks";
import { TIntegration } from "@app/hooks/api/types";
@@ -125,18 +127,26 @@ export const IntegrationsSection = ({
)}
-
-
- handlePopUpOpen("deleteConfirmation", integration)}
- ariaLabel="delete"
- colorSchema="danger"
- variant="star"
- >
-
-
-
-
+
+ {(isAllowed) => (
+
+
+ handlePopUpOpen("deleteConfirmation", integration)}
+ ariaLabel="delete"
+ isDisabled={!isAllowed}
+ colorSchema="danger"
+ variant="star"
+ >
+
+
+
+
+ )}
+
))}
diff --git a/frontend/src/views/Org/MembersPage/MembersPage.tsx b/frontend/src/views/Org/MembersPage/MembersPage.tsx
index 0d6b8e7f2..f05b44f4b 100644
--- a/frontend/src/views/Org/MembersPage/MembersPage.tsx
+++ b/frontend/src/views/Org/MembersPage/MembersPage.tsx
@@ -1,238 +1,67 @@
/* eslint-disable @typescript-eslint/no-unused-vars */
-import { useState } from "react";
import { useTranslation } from "react-i18next";
-import { useRouter } from "next/router";
+import { motion } from "framer-motion";
-import { useNotificationContext } from "@app/components/context/Notifications/NotificationProvider";
-import {
- decryptAssymmetric,
- encryptAssymmetric
-} from "@app/components/utilities/cryptography/crypto";
-import { useOrganization, useSubscription, useUser, useWorkspace } from "@app/context";
-import {
- useAddIncidentContact,
- useAddUserToOrg,
- useDeleteIncidentContact,
- useDeleteOrgMembership,
- useGetOrgIncidentContact,
- useGetOrgUsers,
- useGetUserWorkspaceMemberships,
- useGetUserWsKey,
- useRenameOrg,
- useUpdateOrgUserRole,
- useUploadWsKey
-} from "@app/hooks/api";
+import { Tab, TabList, TabPanel, Tabs } from "@app/components/v2";
+import { OrgPermissionActions, OrgPermissionSubjects, useOrganization } from "@app/context";
+import { withPermission } from "@app/hoc";
+import { useGetRoles } from "@app/hooks/api";
+import { TRole } from "@app/hooks/api/roles/types";
-import {
- OrgIncidentContactsTable,
- OrgMembersTable,
- OrgNameChangeSection,
- OrgServiceAccountsTable
-} from "./components";
+import { OrgMembersTable } from "./components/OrgMembersTable";
+import { OrgRoleTabSection } from "./components/OrgRoleTabSection";
-export const MembersPage = () => {
- const host = window.location.origin;
- const router = useRouter();
- const { action } = router.query;
+enum TabSections {
+ Member = "members",
+ Roles = "roles"
+}
- const { t } = useTranslation();
- const { currentOrg } = useOrganization();
- const { currentWorkspace } = useWorkspace();
- const { user } = useUser();
- const { subscription } = useSubscription();
- const { createNotification } = useNotificationContext();
+export const MembersPage = withPermission(
+ () => {
+ const { t } = useTranslation();
+ const { currentOrg } = useOrganization();
- const orgId = currentOrg?._id || "";
+ const orgId = currentOrg?._id || "";
- const { data: orgUsers, isLoading: isOrgUserLoading } = useGetOrgUsers(orgId);
- const { data: workspaceMemberships, isLoading: IsWsMembershipLoading } =
- useGetUserWorkspaceMemberships(orgId);
- const { data: wsKey } = useGetUserWsKey(currentWorkspace?._id || "");
- const { data: incidentContact, isLoading: IsIncidentContactLoading } =
- useGetOrgIncidentContact(orgId);
+ const { data: roles, isLoading: isRolesLoading } = useGetRoles({
+ orgId
+ });
- const renameOrg = useRenameOrg();
- const removeUserOrgMembership = useDeleteOrgMembership();
- const addUserToOrg = useAddUserToOrg();
- const updateOrgUserRole = useUpdateOrgUserRole();
- const uploadWsKey = useUploadWsKey();
- const addIncidentContact = useAddIncidentContact();
- const removeIncidentContact = useDeleteIncidentContact();
-
- const [completeInviteLink, setcompleteInviteLink] = useState("");
-
- const isMoreUsersNotAllowed = subscription?.memberLimit ? (subscription.membersUsed >= subscription.memberLimit) : false;
-
- const onRenameOrg = async (name: string) => {
- if (!currentOrg?._id) return;
-
- try {
- await renameOrg.mutateAsync({ orgId: currentOrg?._id, newOrgName: name });
- createNotification({
- text: "Successfully renamed organization",
- type: "success"
- });
- } catch (error) {
- console.error(error);
- createNotification({
- text: "Failed to rename organization",
- type: "error"
- });
- }
- };
-
- const onRemoveUserOrgMembership = async (membershipId: string) => {
- if (!currentOrg?._id) return;
-
- try {
- await removeUserOrgMembership.mutateAsync({ orgId: currentOrg?._id, membershipId });
- createNotification({
- text: "Successfully removed user from org",
- type: "success"
- });
- } catch (error) {
- console.error(error);
- createNotification({
- text: "Failed to remove user from the organization",
- type: "error"
- });
- }
- };
- const onAddUserToOrg = async (email: string) => {
- if (!currentOrg?._id) return;
-
- try {
- const { data } = await addUserToOrg.mutateAsync({
- organizationId: currentOrg?._id,
- inviteeEmail: email
- });
- setcompleteInviteLink(data?.completeInviteLink);
-
- // only show this notification when email is configured. A [completeInviteLink] will not be sent if smtp is configured
- if (!data.completeInviteLink) {
- createNotification({
- text: "Successfully invited user to the organization.",
- type: "success"
- });
- }
- } catch (error) {
- console.error(error);
- createNotification({
- text: "Failed to invite user to org",
- type: "error"
- });
- }
- };
-
- const onUpdateOrgUserRole = async (membershipId: string, role: string) => {
- if (!currentOrg?._id) return;
-
- try {
- await updateOrgUserRole.mutateAsync({ organizationId: currentOrg?._id, membershipId, role });
- createNotification({
- text: "Successfully updated user role",
- type: "success"
- });
- } catch (error) {
- console.error(error);
- createNotification({
- text: "Failed to update user role",
- type: "error"
- });
- }
- };
-
- const onGrantUserAccess = async (userId: string, publicKey: string) => {
- try {
- const PRIVATE_KEY = localStorage.getItem("PRIVATE_KEY") as string;
- if (!PRIVATE_KEY || !wsKey) return;
-
- // assymmetrically decrypt symmetric key with local private key
- const key = decryptAssymmetric({
- ciphertext: wsKey.encryptedKey,
- nonce: wsKey.nonce,
- publicKey: wsKey.sender.publicKey,
- privateKey: PRIVATE_KEY
- });
-
- const { ciphertext, nonce } = encryptAssymmetric({
- plaintext: key,
- publicKey,
- privateKey: PRIVATE_KEY
- });
-
- await uploadWsKey.mutateAsync({
- userId,
- nonce,
- encryptedKey: ciphertext,
- workspaceId: currentWorkspace?._id || ""
- });
- } catch (err) {
- console.error(err);
- createNotification({
- text: "Failed to grant access to user",
- type: "error"
- });
- }
- };
-
- const onAddIncidentContact = async (email: string) => {
- if (!currentOrg?._id) return;
-
- try {
- await addIncidentContact.mutateAsync({ orgId, email });
- createNotification({
- text: "Successfully added incident contact",
- type: "success"
- });
- } catch (error) {
- console.error(error);
- createNotification({
- text: "Failed to add incident contact",
- type: "error"
- });
- }
- };
-
- const onRemoveIncidentContact = async (email: string) => {
- if (!currentOrg?._id) return;
-
- try {
- await removeIncidentContact.mutateAsync({ orgId, email });
- createNotification({
- text: "Successfully removed incident contact",
- type: "success"
- });
- } catch (error) {
- console.error(error);
- createNotification({
- text: "Failed to remove incident contact",
- type: "error"
- });
- }
- };
-
- return (
-
-
-
- {t("section.members.org-members")}
-
-
+ return (
+
+
+
+ {t("section.members.org-members")}
+
+
+
+ Members
+ Roles
+
+
+
+ []}
+ isRolesLoading={isRolesLoading}
+ />
+
+
+
+ []}
+ isRolesLoading={isRolesLoading}
+ />
+
+
+
-
- );
-};
+ );
+ },
+ { action: OrgPermissionActions.Read, subject: OrgPermissionSubjects.Member }
+);
diff --git a/frontend/src/views/Org/MembersPage/components/OrgIncidentContactsTable/OrgIncidentContactsTable.tsx b/frontend/src/views/Org/MembersPage/components/OrgIncidentContactsTable/OrgIncidentContactsTable.tsx
deleted file mode 100644
index cfafae765..000000000
--- a/frontend/src/views/Org/MembersPage/components/OrgIncidentContactsTable/OrgIncidentContactsTable.tsx
+++ /dev/null
@@ -1,200 +0,0 @@
-import { useState } from "react";
-import { Controller, useForm } from "react-hook-form";
-import {
- faContactBook,
- faMagnifyingGlass,
- faPlus,
- faTrash
-} from "@fortawesome/free-solid-svg-icons";
-import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";
-import { yupResolver } from "@hookform/resolvers/yup";
-import * as yup from "yup";
-
-import {
- Button,
- DeleteActionModal,
- EmailServiceSetupModal,
- EmptyState,
- FormControl,
- IconButton,
- Input,
- Modal,
- ModalContent,
- Table,
- TableContainer,
- TableSkeleton,
- TBody,
- Td,
- Th,
- THead,
- Tr
-} from "@app/components/v2";
-import { usePopUp } from "@app/hooks";
-import { useFetchServerStatus } from "@app/hooks/api/serverDetails";
-import { IncidentContact } from "@app/hooks/api/types";
-
-type Props = {
- isLoading?: boolean;
- contacts?: IncidentContact[];
- onRemoveContact: (email: string) => Promise ;
- onAddContact: (email: string) => Promise;
-};
-
-const addContactFormSchema = yup.object({
- email: yup.string().email().required().label("Email").trim()
-});
-
-type TAddContactForm = yup.InferType;
-
-export const OrgIncidentContactsTable = ({
- contacts = [],
- onAddContact,
- onRemoveContact,
- isLoading
-}: Props) => {
- const [searchContact, setSearchContact] = useState("");
- const { data: serverDetails } = useFetchServerStatus();
- const { handlePopUpToggle, popUp, handlePopUpOpen, handlePopUpClose } = usePopUp([
- "addContact",
- "removeContact",
- "setUpEmail"
- ] as const);
-
- const {
- control,
- handleSubmit,
- reset,
- formState: { isSubmitting }
- } = useForm({ resolver: yupResolver(addContactFormSchema) });
-
- const onAddIncidentContact = ({ email }: TAddContactForm) => {
- onAddContact(email);
- handlePopUpClose("addContact");
- reset();
- };
-
- const onRemoveIncidentContact = async () => {
- const incidentContactEmail = (popUp?.removeContact?.data as { email: string })?.email;
- await onRemoveContact(incidentContactEmail);
- handlePopUpClose("removeContact");
- };
-
- const filteredContacts = contacts.filter(({ email }) =>
- email.toLocaleLowerCase().includes(searchContact)
- );
-
- return (
-
-
-
- setSearchContact(e.target.value)}
- leftIcon={}
- placeholder="Search incident contact by email..."
- />
-
-
- }
- onClick={() => {
- if (serverDetails?.emailConfigured) {
- handlePopUpOpen("addContact");
- } else {
- handlePopUpOpen("setUpEmail");
- }
- }}
- >
- Add Contact
-
-
-
-
-
-
-
-
- | Email |
- |
-
-
-
- {isLoading && }
- {filteredContacts?.map(({ email }) => (
-
- | {email} |
-
- handlePopUpOpen("removeContact", { email })}
- >
-
-
- |
-
- ))}
-
-
- {filteredContacts?.length === 0 && !isLoading && (
-
- )}
-
-
- {
- handlePopUpToggle("addContact", isOpen);
- reset();
- }}
- >
-
-
-
-
- handlePopUpToggle("removeContact", isOpen)}
- onDeleteApproved={onRemoveIncidentContact}
- />
- handlePopUpToggle("setUpEmail", isOpen)}
- />
-
@@ -163,27 +306,32 @@ export const OrgMembersTable = ({
placeholder="Search members..."
/>
- }
- onClick={() => {
- if (!isLoadingSSOConfig && ssoConfig && ssoConfig.isActive) {
- createNotification({
- text: "You cannot invite users when SAML SSO is configured for your organization",
- type: "error"
- });
+
+ {(isAllowed) => (
+ }
+ onClick={() => {
+ if (!isLoadingSSOConfig && ssoConfig && ssoConfig.isActive) {
+ createNotification({
+ text: "You cannot invite users when SAML SSO is configured for your organization",
+ type: "error"
+ });
- return;
- }
+ return;
+ }
- if (isMoreUserNotAllowed) {
- handlePopUpOpen("upgradePlan");
- } else {
- handlePopUpOpen("addMember");
- }
- }}
- >
- Add Member
-
+ if (isMoreUsersNotAllowed) {
+ handlePopUpOpen("upgradePlan");
+ } else {
+ handlePopUpOpen("addMember");
+ }
+ }}
+ >
+ Add Member
+
+ )}
+
@@ -200,106 +348,134 @@ export const OrgMembersTable = ({
{isLoading && }
{!isLoading &&
- filterdUser.map(({ user, inviteEmail, role, _id: orgMembershipId, status }) => {
- const name = user ? `${user.firstName} ${user.lastName}` : "-";
- const email = user?.email || inviteEmail;
- const userWs = workspaceMemberships?.[user?._id];
+ filterdUser?.map(
+ ({ user: u, inviteEmail, role, customRole, _id: orgMembershipId, status }) => {
+ const name = u ? `${u.firstName} ${u.lastName}` : "-";
+ const email = u?.email || inviteEmail;
+ const userWs = workspaceMemberships?.[u?._id];
- return (
-
- | {name} |
- {email} |
-
- {status === "accepted" && (
- |
+
+ {userId !== u?._id && (
+
+ {(isAllowed) => (
+
+ handlePopUpOpen("removeMember", { id: orgMembershipId })
+ }
+ >
+
+
+ )}
+
+ )}
+ |
+
+ );
+ }
+ )}
{!isLoading && filterdUser?.length === 0 && (
@@ -315,7 +491,7 @@ export const OrgMembersTable = ({
}}
>
{!completeInviteLink && (
diff --git a/frontend/src/views/Org/MembersPage/components/OrgNameChangeSection/OrgNameChangeSection.tsx b/frontend/src/views/Org/MembersPage/components/OrgNameChangeSection/OrgNameChangeSection.tsx
deleted file mode 100644
index 525b52471..000000000
--- a/frontend/src/views/Org/MembersPage/components/OrgNameChangeSection/OrgNameChangeSection.tsx
+++ /dev/null
@@ -1,69 +0,0 @@
-import { useEffect } from "react";
-import { Controller, useForm } from "react-hook-form";
-import { useTranslation } from "react-i18next";
-import { faCheck } from "@fortawesome/free-solid-svg-icons";
-import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";
-import { yupResolver } from "@hookform/resolvers/yup";
-import * as yup from "yup";
-
-import { Button, FormControl, Input } from "@app/components/v2";
-
-type Props = {
- orgName?: string;
- onOrgNameChange: (name: string) => Promise;
-};
-
-const formSchema = yup.object({
- name: yup.string().required().label("Project Name")
-});
-
-type FormData = yup.InferType;
-
-export const OrgNameChangeSection = ({ onOrgNameChange, orgName }: Props): JSX.Element => {
- const {
- handleSubmit,
- control,
- reset,
- formState: { isDirty, isSubmitting }
- } = useForm({ resolver: yupResolver(formSchema) });
- const { t } = useTranslation();
-
- useEffect(() => {
- reset({ name: orgName });
- }, [orgName]);
-
- const onFormSubmit = async ({ name }: FormData) => {
- await onOrgNameChange(name);
- };
-
- return (
-
- );
-};
diff --git a/frontend/src/views/Org/MembersPage/components/OrgNameChangeSection/index.tsx b/frontend/src/views/Org/MembersPage/components/OrgNameChangeSection/index.tsx
deleted file mode 100644
index 4d86fcddb..000000000
--- a/frontend/src/views/Org/MembersPage/components/OrgNameChangeSection/index.tsx
+++ /dev/null
@@ -1 +0,0 @@
-export { OrgNameChangeSection } from "./OrgNameChangeSection";
diff --git a/frontend/src/views/Org/MembersPage/components/OrgRoleTabSection/OrgRoleModifySection/OrgRoleModifySection.tsx b/frontend/src/views/Org/MembersPage/components/OrgRoleTabSection/OrgRoleModifySection/OrgRoleModifySection.tsx
new file mode 100644
index 000000000..aa90c2fbf
--- /dev/null
+++ b/frontend/src/views/Org/MembersPage/components/OrgRoleTabSection/OrgRoleModifySection/OrgRoleModifySection.tsx
@@ -0,0 +1,255 @@
+import { useState } from "react";
+import { useForm } from "react-hook-form";
+import {
+ faArrowLeft,
+ faCog,
+ faContactCard,
+ faMagnifyingGlass,
+ faMoneyBill,
+ faSignIn,
+ faUserCog,
+ faUsers
+} from "@fortawesome/free-solid-svg-icons";
+import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";
+import { zodResolver } from "@hookform/resolvers/zod";
+
+import { useNotificationContext } from "@app/components/context/Notifications/NotificationProvider";
+import { Button, FormControl, Input, UpgradePlanModal } from "@app/components/v2";
+import { useOrganization, useSubscription } from "@app/context";
+import { usePopUp } from "@app/hooks";
+import { useCreateRole, useUpdateRole } from "@app/hooks/api";
+import { TRole } from "@app/hooks/api/roles/types";
+
+import {
+ formRolePermission2API,
+ formSchema,
+ rolePermission2Form,
+ TFormSchema
+} from "./OrgRoleModifySection.utils";
+import { SimpleLevelPermissionOption } from "./SimpleLevelPermissionOptions";
+import { WorkspacePermission } from "./WorkspacePermission";
+
+type Props = {
+ role?: TRole;
+ onGoBack: VoidFunction;
+};
+
+const SIMPLE_PERMISSION_OPTIONS = [
+ {
+ title: "Members management",
+ subtitle: "Invite, view and remove members from the organization",
+ icon: faUsers,
+ formName: "member"
+ },
+ {
+ title: "Billing & usage",
+ subtitle: "Modify organization subscription plan",
+ icon: faMoneyBill,
+ formName: "billing"
+ },
+ {
+ title: "Role management",
+ subtitle: "Create, modify and remove organization roles",
+ icon: faUserCog,
+ formName: "role"
+ },
+ {
+ title: "Incident Contacts",
+ subtitle: "Incident contacts management control",
+ icon: faContactCard,
+ formName: "incident-contact"
+ },
+ {
+ title: "Organization profile",
+ subtitle: "View & update organization metadata such as name",
+ icon: faCog,
+ formName: "settings"
+ },
+ {
+ title: "Secret Scanning",
+ subtitle: "Secret scanning management control",
+ icon: faMagnifyingGlass,
+ formName: "secret-scanning"
+ },
+ {
+ title: "SSO",
+ subtitle: "Define organization level SSO requirements",
+ icon: faSignIn,
+ formName: "sso"
+ }
+] as const;
+
+export const OrgRoleModifySection = ({ role, onGoBack }: Props) => {
+ const [searchPermission, setSearchPermission] = useState("");
+ const { subscription } = useSubscription();
+ const { popUp, handlePopUpToggle, handlePopUpOpen } = usePopUp(["upgradePlan"] as const);
+
+ const isNonEditable = ["owner", "admin", "member"].includes(role?.slug || "");
+ const isNewRole = !role?.slug;
+
+ const { createNotification } = useNotificationContext();
+ const { currentOrg } = useOrganization();
+ const orgId = currentOrg?._id || "";
+ const {
+ handleSubmit,
+ register,
+ formState: { isSubmitting, isDirty, errors },
+ setValue,
+ control
+ } = useForm({
+ defaultValues: role ? { ...role, permissions: rolePermission2Form(role.permissions) } : {},
+ resolver: zodResolver(formSchema)
+ });
+
+ const { mutateAsync: createRole } = useCreateRole();
+ const { mutateAsync: updateRole } = useUpdateRole();
+
+ const handleRoleUpdate = async (el: TFormSchema) => {
+ if (!role?._id) return;
+
+ try {
+ await updateRole({
+ orgId,
+ id: role?._id,
+ ...el,
+ permissions: formRolePermission2API(el.permissions)
+ });
+ createNotification({ type: "success", text: "Successfully updated role" });
+ onGoBack();
+ } catch (err) {
+ console.log(err);
+ createNotification({ type: "error", text: "Failed to update role" });
+ }
+ };
+
+ const handleFormSubmit = async (el: TFormSchema) => {
+ if (subscription && !subscription?.rbac) {
+ handlePopUpOpen("upgradePlan");
+ return;
+ }
+
+ if (!isNewRole) {
+ await handleRoleUpdate(el);
+ return;
+ }
+
+ try {
+ await createRole({
+ orgId,
+ ...el,
+ permissions: formRolePermission2API(el.permissions)
+ });
+ createNotification({ type: "success", text: "Created new role" });
+ onGoBack();
+ } catch (err) {
+ console.log(err);
+ createNotification({ type: "error", text: "Failed to create role" });
+ }
+ };
+
+ return (
+
+
+ {subscription && (
+ handlePopUpToggle("upgradePlan", isOpen)}
+ text={
+ subscription.slug === null
+ ? "You can use RBAC under an Enterprise license"
+ : "You can use RBAC if you switch to Infisical's Team Plan."
+ }
+ />
+ )}
+
+
+
+
+
+
+
+
+
+
+
+ {isCustom &&
+ getPermissionList(formName).map(({ action, label }) => (
+ (
+
+ {label}
+
+ )}
+ />
+ ))}
+
+
+
+
+
+
+
+ Project
+
+ View and create new projects in this organization
+
+
+
+
+
+
+
+ {isCustom &&
+ PERMISSIONS.map(({ action, label }) => (
+ (
+
+ {label}
+
+ )}
+ />
+ ))}
+
+
+
+
+ setSearchRoles(e.target.value)}
+ leftIcon={}
+ placeholder="Search roles..."
+ />
+
+
+ {(isAllowed) => (
+ }
+ onClick={() => onSelectRole()}
+ >
+ Add Role
+
+ )}
+
+
+
+
+
+
+
+ | Name |
+ Slug |
+ |
+
+
+
+ {isRolesLoading && }
+ {roles?.map((role) => {
+ const { _id: id, name, slug } = role;
+ const isNonMutatable = ["owner", "admin", "member"].includes(slug);
+
+ return (
+
+ | {name} |
+ {slug} |
+
+
+
+ {(isAllowed) => (
+ onSelectRole(role)}
+ variant="plain"
+ >
+
+
+ )}
+
+
+ {(isAllowed) => (
+ handlePopUpOpen("deleteRole", role)}
+ variant="plain"
+ isDisabled={isNonMutatable || !isAllowed}
+ >
+
+
+ )}
+
+
+ |
+
+ );
+ })}
+
+
+
+
+ )?.name || " "
+ } role?`}
+ deleteKey={(popUp?.deleteRole?.data as TRole)?.slug || ""}
+ onClose={() => handlePopUpClose("deleteRole")}
+ onDeleteApproved={handleRoleDelete}
+ />
+ Access Key
-
- {accessKey}
- {
- navigator.clipboard.writeText(accessKey);
- setIsAccessKeyCopied.on();
- }}
- >
-
-
- Copy
-
-
- Public Key
-
- {publicKey}
- {
- navigator.clipboard.writeText(publicKey);
- setIsPublicKeyCopied.on();
- }}
- >
-
-
- Copy
-
-
- Private Key
-
- {privateKey}
- {
- navigator.clipboard.writeText(privateKey);
- setIsPrivateKeyCopied.on();
- }}
- >
-
-
- Copy
-
-
-
-
-
- setSearchServiceAccountFilter(e.target.value)}
- leftIcon={}
- placeholder="Search service accounts..."
- />
-
- }
- onClick={() => {
- setStep(0);
- reset();
- handlePopUpOpen("addServiceAccount");
- }}
- >
- Add Service Account
-
-
-
-
-
- | Name |
- Valid Until |
- |
-
-
- {isServiceAccountsLoading && (
-
- )}
- {!isServiceAccountsLoading &&
- filteredServiceAccounts.map(({ name, expiresAt, _id: serviceAccountId }) => {
- return (
-
- | {name} |
- {new Date(expiresAt).toUTCString()} |
-
-
- {
- if (currentWorkspace?._id) {
- router.push(
- `/settings/org/${currentWorkspace._id}/service-accounts/${serviceAccountId}`
- );
- }
- }}
- className="mr-2"
- >
-
-
-
- handlePopUpOpen("removeServiceAccount", { _id: serviceAccountId })
- }
- >
-
-
-
- |
-
- );
- })}
-
-
- {!isServiceAccountsLoading && filteredServiceAccounts?.length === 0 && (
-
- )}
-
- {
- handlePopUpToggle("addServiceAccount", isOpen);
- reset();
- }}
- >
-
- {renderStep(step)}
-
-
- handlePopUpToggle("removeServiceAccount", isOpen)}
- onDeleteApproved={onRemoveServiceAccount}
- />
-
-
-
- IP Allowlist
-
-
-
-
-
- handlePopUpToggle("deleteTrustedIp", isOpen)}
- deleteKey="confirm"
- onDeleteApproved={() =>
- onDeleteTrustedIpSubmit((popUp?.deleteTrustedIp?.data as { trustedIpId: string })?.trustedIpId)
+ };
+
+ return (
+
+
+ IP Allowlist
+
+ {(isAllowed) => (
+
- );
-}
\ No newline at end of file
+ }}
+ colorSchema="secondary"
+ isLoading={false}
+ isDisabled={!isAllowed}
+ leftIcon={ }
+ >
+ Add IP
+
+ )}
+
+
-
-
-
-
- | IP Address / Range |
- Format |
- Comment |
- {/* Status | */}
- |
-
-
-
- {!isLoading && data && data?.length > 0 && data
- .sort((a, b) => a.ipAddress.localeCompare(b.ipAddress))
- .map(({
- _id,
- ipAddress,
- comment,
- type,
- prefix,
- isActive
- }) => {
- return (
-
- |
- {`${ipAddress}${(prefix !== undefined) ? `/${prefix}` : ""}`}
- |
-
- {formatType(type, prefix)}
- |
-
- {comment}
- |
- {/*
+export const IPAllowlistTable = ({ popUp, handlePopUpOpen, handlePopUpToggle }: Props) => {
+ const { subscription } = useSubscription();
+ const { currentWorkspace } = useWorkspace();
+ const { data, isLoading } = useGetTrustedIps(currentWorkspace?._id ?? "");
+
+ const formatType = (type: string, prefix?: number) => {
+ return `${type.slice(0, 2).toUpperCase() + type.slice(2)} ${
+ prefix !== undefined ? "CIDR" : ""
+ }`;
+ };
+
+ return (
+
+
+
+
+
+ | IP Address / Range |
+ Format |
+ Comment |
+ {/* Status | */}
+ |
+
+
+
+ {!isLoading &&
+ data &&
+ data?.length > 0 &&
+ data
+ .sort((a, b) => a.ipAddress.localeCompare(b.ipAddress))
+ .map(({ _id, ipAddress, comment, type, prefix, isActive }) => {
+ return (
+
+ | {`${ipAddress}${prefix !== undefined ? `/${prefix}` : ""}`} |
+ {formatType(type, prefix)} |
+ {comment} |
+ {/*
| */}
-
- {
- if (subscription?.ipAllowlisting) {
- handlePopUpOpen("trustedIp", {
- trustedIpId: _id,
- ipAddress,
- comment,
- prefix,
- isActive
- });
- } else {
- handlePopUpOpen("upgradePlan");
- }
- }}
- colorSchema="primary"
- variant="plain"
- ariaLabel="update"
- >
-
-
- {
- if (subscription?.ipAllowlisting) {
- handlePopUpOpen("deleteTrustedIp", {
- trustedIpId: _id
- });
- } else {
- handlePopUpOpen("upgradePlan");
- }
- }}
- size="lg"
- colorSchema="danger"
- variant="plain"
- ariaLabel="update"
- >
-
-
- |
-
- );
- })}
- {isLoading && }
- {!isLoading && data && data?.length === 0 && (
-
- |
-
- |
-
- )}
-
-
-
- handlePopUpToggle("upgradePlan", isOpen)}
- text="You can use IP allowlisting if you switch to Infisical's Pro plan."
- />
- |
+
+ {(isAllowed) => (
+ {
+ if (subscription?.ipAllowlisting) {
+ handlePopUpOpen("trustedIp", {
+ trustedIpId: _id,
+ ipAddress,
+ comment,
+ prefix,
+ isActive
+ });
+ } else {
+ handlePopUpOpen("upgradePlan");
+ }
+ }}
+ colorSchema="primary"
+ variant="plain"
+ ariaLabel="update"
+ isDisabled={!isAllowed}
+ >
+
+
+ )}
+
+
+ {(isAllowed) => (
+ {
+ if (subscription?.ipAllowlisting) {
+ handlePopUpOpen("deleteTrustedIp", {
+ trustedIpId: _id
+ });
+ } else {
+ handlePopUpOpen("upgradePlan");
+ }
+ }}
+ size="lg"
+ colorSchema="danger"
+ variant="plain"
+ ariaLabel="update"
+ isDisabled={!isAllowed}
+ >
+
+
+ )}
+
+ |
+
+ );
+ })}
+ {isLoading && (
+
+ )}
+ {!isLoading && data && data?.length === 0 && (
+
+ |
+
+ |
+
+ )}
+
+
+
+ handlePopUpToggle("upgradePlan", isOpen)}
+ text="You can use IP allowlisting if you switch to Infisical's Pro plan."
+ />
+
+
+
+ {t("settings.members.title")}
+
+
+
+ Members
+ Roles
+
+
+
+ []} isRolesLoading={isRolesLoading} />
+
+
+
+ []}
+ isRolesLoading={isRolesLoading}
+ />
+
+
+
+
+
+
+ setSearchMemberFilter(e.target.value)}
+ leftIcon={}
+ placeholder="Search members..."
+ />
+
+
+ {(isAllowed) => (
+ }
+ onClick={() => handlePopUpOpen("addMember")}
+ >
+ Add Member
+
+ )}
+
+
+
+
+
+
+
+ | Name |
+ Email |
+ Role |
+ |
+
+
+
+ {isLoading && }
+ {!isLoading &&
+ filterdUsers?.map(
+ ({ user: u, inviteEmail, _id: membershipId, status, customRole, role }) => {
+ const name = u ? `${u.firstName} ${u.lastName}` : "-";
+ const email = u?.email || inviteEmail;
+
+ return (
+
+ | {name} |
+ {email} |
+
+
+ {(isAllowed) => (
+ <>
+
+ {status === "completed" && user.email !== email && (
+
+
+
+ )}
+
+ )}
+
+ |
+
+ {userId !== u?._id && (
+
+ {(isAllowed) => (
+
+ handlePopUpOpen("removeMember", { id: membershipId })
+ }
+ >
+
+
+ )}
+
+ )}
+ |
+
+ );
+ }
+ )}
+
+
+ {!isLoading && filterdUsers?.length === 0 && (
+
+ )}
+
+
+ handlePopUpToggle("addMember", isOpen)}
+ >
+
+
+
+
+ handlePopUpToggle("removeMember", isOpen)}
+ onDeleteApproved={handleRemoveUser}
+ />
+ handlePopUpToggle("upgradePlan", isOpen)}
+ text="You can add custom environments if you switch to Infisical's Team plan."
+ />
+
+
+
+ setSearchRoles(e.target.value)}
+ leftIcon={}
+ placeholder="Search roles..."
+ />
+
+
+ {(isAllowed) => (
+ }
+ onClick={() => onSelectRole()}
+ isDisabled={!isAllowed}
+ >
+ Add Role
+
+ )}
+
+
+
+
+
+
+
+ | Name |
+ Slug |
+ |
+
+
+
+ {isRolesLoading && }
+ {roles?.map((role) => {
+ const { _id: id, name, slug } = role;
+ const isNonMutatable = ["admin", "member", "viewer"].includes(slug);
+
+ return (
+
+ | {name} |
+ {slug} |
+
+
+
+ {(isAllowed) => (
+ onSelectRole(role)}
+ variant="plain"
+ >
+
+
+ )}
+
+
+ {(isAllowed) => (
+ handlePopUpOpen("deleteRole", role)}
+ variant="plain"
+ isDisabled={isNonMutatable || !isAllowed}
+ >
+
+
+ )}
+
+ |
+
+ );
+ })}
+
+
+
+
+ )?.name || " "
+ } role?`}
+ deleteKey={(popUp?.deleteRole?.data as TRole)?.slug || ""}
+ onClose={() => handlePopUpClose("deleteRole")}
+ onDeleteApproved={handleRoleDelete}
+ />
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ |
+ Secret Path |
+ View |
+ Create |
+ Modify |
+ Delete |
+
+
+
+ {isCustom &&
+ environments.map(({ name, slug }) => (
+
+ | {name} |
+
+ (
+ /* eslint-disable-next-line no-template-curly-in-string */
+
+
+
+ )}
+ />
+ |
+
+ (
+
+
+
+ )}
+ />
+ |
+
+ (
+
+
+
+ )}
+ />
+ |
+
+ (
+
+
+
+ )}
+ />
+ |
+
+ (
+
+
+
+ )}
+ />
+ |
+
+ ))}
+
+
+
+
+
+
+ {subscription && (
+ handlePopUpToggle("upgradePlan", isOpen)}
+ text={
+ subscription.slug === null
+ ? "You can use RBAC under an Enterprise license"
+ : "You can use RBAC if you switch to Infisical's Team Plan."
+ }
+ />
+ )}
+
+
+
+
+
+
+ Secret Rollback
+ Secret rollback control actions
+
+
+
+
+
+
+ {isCustom &&
+ PERMISSIONS.map(({ action, label }) => (
+ (
+
+ {label}
+
+ )}
+ />
+ ))}
+
+
+
+
+
+
+
+
+
+
+
+
+ {isCustom &&
+ PERMISSIONS.map(({ action, label }) => (
+ (
+
+ {label}
+
+ )}
+ />
+ ))}
+
+
+
+
+
+
+
+ Project
+ Project control actions
+
+
+
+
+
+
+ {isCustom &&
+ PERMISSIONS.map(({ action, label }) => (
+ (
+
+ {label}
+
+ )}
+ />
+ ))}
+
+
@@ -219,9 +243,11 @@ export const SecretOverviewPage = () => {
folders?.some(({ isLoading }) => !isLoading) && secrets?.some(({ isLoading }) => !isLoading)
);
- const filteredSecretNames = secKeys?.filter((name) =>
- name.toUpperCase().includes(searchFilter.toUpperCase())
- ).sort((a, b) => sortDir === "asc" ? a.localeCompare(b) : b.localeCompare(a));
+ const canViewOverviewPage = Boolean(userAvailableEnvs.length);
+
+ const filteredSecretNames = secKeys
+ ?.filter((name) => name.toUpperCase().includes(searchFilter.toUpperCase()))
+ .sort((a, b) => (sortDir === "asc" ? a.localeCompare(b) : b.localeCompare(a)));
const filteredFolderNames = folderNames?.filter((name) =>
name.toLowerCase().includes(searchFilter.toLowerCase())
);
@@ -280,7 +306,12 @@ export const SecretOverviewPage = () => {
Name
- setSortDir(prev => prev === "asc" ? "desc" : "asc")}>
+ setSortDir((prev) => (prev === "asc" ? "desc" : "asc"))}
+ >
@@ -318,7 +349,7 @@ export const SecretOverviewPage = () => {
| |
+ 
- 
diff --git a/backend/package-lock.json b/backend/package-lock.json
index 1423cf03e..76b10ce2e 100644
--- a/backend/package-lock.json
+++ b/backend/package-lock.json
@@ -10,6 +10,8 @@
"license": "ISC",
"dependencies": {
"@aws-sdk/client-secrets-manager": "^3.319.0",
+ "@casl/ability": "^6.5.0",
+ "@casl/mongoose": "^7.2.1",
"@godaddy/terminus": "^4.12.0",
"@node-saml/passport-saml": "^4.0.4",
"@octokit/rest": "^19.0.5",
@@ -17,6 +19,7 @@
"@sentry/tracing": "^7.48.0",
"@types/crypto-js": "^4.1.1",
"@types/libsodium-wrappers": "^0.7.10",
+ "@ucast/mongo2js": "^1.3.4",
"argon2": "^0.30.3",
"aws-sdk": "^2.1364.0",
"axios": "^1.3.5",
@@ -52,14 +55,14 @@
"query-string": "^7.1.3",
"rate-limit-mongo": "^2.3.2",
"rimraf": "^3.0.2",
- "swagger-autogen": "^2.22.0",
"swagger-ui-express": "^4.6.2",
"tweetnacl": "^1.0.3",
"tweetnacl-util": "^0.15.1",
"typescript": "^4.9.3",
"utility-types": "^3.10.0",
"winston": "^3.8.2",
- "winston-loki": "^6.0.7"
+ "winston-loki": "^6.0.6",
+ "zod": "^3.21.4"
},
"devDependencies": {
"@jest/globals": "^29.3.1",
@@ -92,6 +95,7 @@
"npm": "^8.19.3",
"smee-client": "^1.2.3",
"supertest": "^6.3.3",
+ "swagger-autogen": "^2.23.5",
"ts-jest": "^29.0.3",
"ts-node": "^10.9.1"
}
@@ -3339,6 +3343,26 @@
"integrity": "sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==",
"dev": true
},
+ "node_modules/@casl/ability": {
+ "version": "6.5.0",
+ "resolved": "https://registry.npmjs.org/@casl/ability/-/ability-6.5.0.tgz",
+ "integrity": "sha512-3guc94ugr5ylZQIpJTLz0CDfwNi0mxKVECj1vJUPAvs+Lwunh/dcuUjwzc4MHM9D8JOYX0XUZMEPedpB3vIbOw==",
+ "dependencies": {
+ "@ucast/mongo2js": "^1.3.0"
+ },
+ "funding": {
+ "url": "https://github.com/stalniy/casl/blob/master/BACKERS.md"
+ }
+ },
+ "node_modules/@casl/mongoose": {
+ "version": "7.2.1",
+ "resolved": "https://registry.npmjs.org/@casl/mongoose/-/mongoose-7.2.1.tgz",
+ "integrity": "sha512-pojgSWYKNIwFM6wWDNct1YD0+8nIxhe2jp5jBbK8JGU60dEs2o0Yw3mCo2y7nBwbvRC2oEots/BlLMVb1Wdo8A==",
+ "peerDependencies": {
+ "@casl/ability": "^6.3.2",
+ "mongoose": "^6.0.13 || ^7.0.0"
+ }
+ },
"node_modules/@colors/colors": {
"version": "1.5.0",
"resolved": "https://registry.npmjs.org/@colors/colors/-/colors-1.5.0.tgz",
@@ -6174,6 +6198,37 @@
"url": "https://opencollective.com/typescript-eslint"
}
},
+ "node_modules/@ucast/core": {
+ "version": "1.10.2",
+ "resolved": "https://registry.npmjs.org/@ucast/core/-/core-1.10.2.tgz",
+ "integrity": "sha512-ons5CwXZ/51wrUPfoduC+cO7AS1/wRb0ybpQJ9RrssossDxVy4t49QxWoWgfBDvVKsz9VXzBk9z0wqTdZ+Cq8g=="
+ },
+ "node_modules/@ucast/js": {
+ "version": "3.0.3",
+ "resolved": "https://registry.npmjs.org/@ucast/js/-/js-3.0.3.tgz",
+ "integrity": "sha512-jBBqt57T5WagkAjqfCIIE5UYVdaXYgGkOFYv2+kjq2AVpZ2RIbwCo/TujJpDlwTVluUI+WpnRpoGU2tSGlEvFQ==",
+ "dependencies": {
+ "@ucast/core": "^1.0.0"
+ }
+ },
+ "node_modules/@ucast/mongo": {
+ "version": "2.4.3",
+ "resolved": "https://registry.npmjs.org/@ucast/mongo/-/mongo-2.4.3.tgz",
+ "integrity": "sha512-XcI8LclrHWP83H+7H2anGCEeDq0n+12FU2mXCTz6/Tva9/9ddK/iacvvhCyW6cijAAOILmt0tWplRyRhVyZLsA==",
+ "dependencies": {
+ "@ucast/core": "^1.4.1"
+ }
+ },
+ "node_modules/@ucast/mongo2js": {
+ "version": "1.3.4",
+ "resolved": "https://registry.npmjs.org/@ucast/mongo2js/-/mongo2js-1.3.4.tgz",
+ "integrity": "sha512-ahazOr1HtelA5AC1KZ9x0UwPMqqimvfmtSm/PRRSeKKeE5G2SCqTgwiNzO7i9jS8zA3dzXpKVPpXMkcYLnyItA==",
+ "dependencies": {
+ "@ucast/core": "^1.6.1",
+ "@ucast/js": "^3.0.0",
+ "@ucast/mongo": "^2.4.0"
+ }
+ },
"node_modules/@xmldom/xmldom": {
"version": "0.8.10",
"resolved": "https://registry.npmjs.org/@xmldom/xmldom/-/xmldom-0.8.10.tgz",
@@ -9968,6 +10023,7 @@
"version": "2.2.3",
"resolved": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz",
"integrity": "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==",
+ "dev": true,
"bin": {
"json5": "lib/cli.js"
},
@@ -15504,6 +15560,7 @@
"version": "2.23.5",
"resolved": "https://registry.npmjs.org/swagger-autogen/-/swagger-autogen-2.23.5.tgz",
"integrity": "sha512-4Tl2+XhZMyHoBYkABnScHtQE0lKPKUD3NBt09mClrI6UKOUYljKlYw1xiFVwsHCTGR2hAXmhT4PpgjruCtt1ZA==",
+ "dev": true,
"dependencies": {
"acorn": "^7.4.1",
"deepmerge": "^4.2.2",
@@ -15515,6 +15572,7 @@
"version": "7.4.1",
"resolved": "https://registry.npmjs.org/acorn/-/acorn-7.4.1.tgz",
"integrity": "sha512-nQyp0o1/mNdbTO1PO6kHkwSrmgZ0MT/jCCpNiwbUjGoRN4dlBhqJtoQuCnEOKzgTVwg0ZWiCoQy6SxMebQVh8A==",
+ "dev": true,
"bin": {
"acorn": "bin/acorn"
},
@@ -16626,6 +16684,14 @@
"funding": {
"url": "https://github.com/sponsors/sindresorhus"
}
+ },
+ "node_modules/zod": {
+ "version": "3.21.4",
+ "resolved": "https://registry.npmjs.org/zod/-/zod-3.21.4.tgz",
+ "integrity": "sha512-m46AKbrzKVzOzs/DZgVnG5H55N1sv1M8qZU3A8RIKbs3mrACDNeIOeilDymVb2HdmP8uwshOCF4uJ8uM9rCqJw==",
+ "funding": {
+ "url": "https://github.com/sponsors/colinhacks"
+ }
}
},
"dependencies": {
@@ -19324,6 +19390,20 @@
"integrity": "sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==",
"dev": true
},
+ "@casl/ability": {
+ "version": "6.5.0",
+ "resolved": "https://registry.npmjs.org/@casl/ability/-/ability-6.5.0.tgz",
+ "integrity": "sha512-3guc94ugr5ylZQIpJTLz0CDfwNi0mxKVECj1vJUPAvs+Lwunh/dcuUjwzc4MHM9D8JOYX0XUZMEPedpB3vIbOw==",
+ "requires": {
+ "@ucast/mongo2js": "^1.3.0"
+ }
+ },
+ "@casl/mongoose": {
+ "version": "7.2.1",
+ "resolved": "https://registry.npmjs.org/@casl/mongoose/-/mongoose-7.2.1.tgz",
+ "integrity": "sha512-pojgSWYKNIwFM6wWDNct1YD0+8nIxhe2jp5jBbK8JGU60dEs2o0Yw3mCo2y7nBwbvRC2oEots/BlLMVb1Wdo8A==",
+ "requires": {}
+ },
"@colors/colors": {
"version": "1.5.0",
"resolved": "https://registry.npmjs.org/@colors/colors/-/colors-1.5.0.tgz",
@@ -21575,6 +21655,37 @@
"eslint-visitor-keys": "^3.3.0"
}
},
+ "@ucast/core": {
+ "version": "1.10.2",
+ "resolved": "https://registry.npmjs.org/@ucast/core/-/core-1.10.2.tgz",
+ "integrity": "sha512-ons5CwXZ/51wrUPfoduC+cO7AS1/wRb0ybpQJ9RrssossDxVy4t49QxWoWgfBDvVKsz9VXzBk9z0wqTdZ+Cq8g=="
+ },
+ "@ucast/js": {
+ "version": "3.0.3",
+ "resolved": "https://registry.npmjs.org/@ucast/js/-/js-3.0.3.tgz",
+ "integrity": "sha512-jBBqt57T5WagkAjqfCIIE5UYVdaXYgGkOFYv2+kjq2AVpZ2RIbwCo/TujJpDlwTVluUI+WpnRpoGU2tSGlEvFQ==",
+ "requires": {
+ "@ucast/core": "^1.0.0"
+ }
+ },
+ "@ucast/mongo": {
+ "version": "2.4.3",
+ "resolved": "https://registry.npmjs.org/@ucast/mongo/-/mongo-2.4.3.tgz",
+ "integrity": "sha512-XcI8LclrHWP83H+7H2anGCEeDq0n+12FU2mXCTz6/Tva9/9ddK/iacvvhCyW6cijAAOILmt0tWplRyRhVyZLsA==",
+ "requires": {
+ "@ucast/core": "^1.4.1"
+ }
+ },
+ "@ucast/mongo2js": {
+ "version": "1.3.4",
+ "resolved": "https://registry.npmjs.org/@ucast/mongo2js/-/mongo2js-1.3.4.tgz",
+ "integrity": "sha512-ahazOr1HtelA5AC1KZ9x0UwPMqqimvfmtSm/PRRSeKKeE5G2SCqTgwiNzO7i9jS8zA3dzXpKVPpXMkcYLnyItA==",
+ "requires": {
+ "@ucast/core": "^1.6.1",
+ "@ucast/js": "^3.0.0",
+ "@ucast/mongo": "^2.4.0"
+ }
+ },
"@xmldom/xmldom": {
"version": "0.8.10",
"resolved": "https://registry.npmjs.org/@xmldom/xmldom/-/xmldom-0.8.10.tgz",
@@ -24413,7 +24524,8 @@
"json5": {
"version": "2.2.3",
"resolved": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz",
- "integrity": "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg=="
+ "integrity": "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==",
+ "dev": true
},
"jsonwebtoken": {
"version": "9.0.1",
@@ -28506,6 +28618,7 @@
"version": "2.23.5",
"resolved": "https://registry.npmjs.org/swagger-autogen/-/swagger-autogen-2.23.5.tgz",
"integrity": "sha512-4Tl2+XhZMyHoBYkABnScHtQE0lKPKUD3NBt09mClrI6UKOUYljKlYw1xiFVwsHCTGR2hAXmhT4PpgjruCtt1ZA==",
+ "dev": true,
"requires": {
"acorn": "^7.4.1",
"deepmerge": "^4.2.2",
@@ -28516,7 +28629,8 @@
"acorn": {
"version": "7.4.1",
"resolved": "https://registry.npmjs.org/acorn/-/acorn-7.4.1.tgz",
- "integrity": "sha512-nQyp0o1/mNdbTO1PO6kHkwSrmgZ0MT/jCCpNiwbUjGoRN4dlBhqJtoQuCnEOKzgTVwg0ZWiCoQy6SxMebQVh8A=="
+ "integrity": "sha512-nQyp0o1/mNdbTO1PO6kHkwSrmgZ0MT/jCCpNiwbUjGoRN4dlBhqJtoQuCnEOKzgTVwg0ZWiCoQy6SxMebQVh8A==",
+ "dev": true
}
}
},
@@ -29273,6 +29387,11 @@
"resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz",
"integrity": "sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==",
"dev": true
+ },
+ "zod": {
+ "version": "3.21.4",
+ "resolved": "https://registry.npmjs.org/zod/-/zod-3.21.4.tgz",
+ "integrity": "sha512-m46AKbrzKVzOzs/DZgVnG5H55N1sv1M8qZU3A8RIKbs3mrACDNeIOeilDymVb2HdmP8uwshOCF4uJ8uM9rCqJw=="
}
}
}
diff --git a/backend/package.json b/backend/package.json
index a70ea9974..e9846de54 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -1,6 +1,8 @@
{
"dependencies": {
"@aws-sdk/client-secrets-manager": "^3.319.0",
+ "@casl/ability": "^6.5.0",
+ "@casl/mongoose": "^7.2.1",
"@godaddy/terminus": "^4.12.0",
"@node-saml/passport-saml": "^4.0.4",
"@octokit/rest": "^19.0.5",
@@ -8,6 +10,7 @@
"@sentry/tracing": "^7.48.0",
"@types/crypto-js": "^4.1.1",
"@types/libsodium-wrappers": "^0.7.10",
+ "@ucast/mongo2js": "^1.3.4",
"argon2": "^0.30.3",
"aws-sdk": "^2.1364.0",
"axios": "^1.3.5",
@@ -43,14 +46,14 @@
"query-string": "^7.1.3",
"rate-limit-mongo": "^2.3.2",
"rimraf": "^3.0.2",
- "swagger-autogen": "^2.22.0",
"swagger-ui-express": "^4.6.2",
"tweetnacl": "^1.0.3",
"tweetnacl-util": "^0.15.1",
"typescript": "^4.9.3",
"utility-types": "^3.10.0",
"winston": "^3.8.2",
- "winston-loki": "^6.0.7"
+ "winston-loki": "^6.0.6",
+ "zod": "^3.21.4"
},
"name": "infisical-api",
"version": "1.0.0",
@@ -110,6 +113,7 @@
"npm": "^8.19.3",
"smee-client": "^1.2.3",
"supertest": "^6.3.3",
+ "swagger-autogen": "^2.23.5",
"ts-jest": "^29.0.3",
"ts-node": "^10.9.1"
},
diff --git a/backend/spec.json b/backend/spec.json
index 1afbc8dce..ce6638839 100644
--- a/backend/spec.json
+++ b/backend/spec.json
@@ -68,9 +68,6 @@
}
}
}
- },
- "400": {
- "description": "Bad Request"
}
},
"security": [
@@ -112,9 +109,6 @@
}
}
}
- },
- "400": {
- "description": "Bad Request"
}
},
"security": [
@@ -156,9 +150,16 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
+ }
+ }
+ }
+ },
+ "/api/v1/users/me/ip": {
+ "get": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
}
}
}
@@ -215,9 +216,6 @@
}
}
}
- },
- "400": {
- "description": "Bad Request"
}
},
"security": [
@@ -243,9 +241,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -284,9 +279,6 @@
}
}
}
- },
- "400": {
- "description": "Bad Request"
}
},
"security": [
@@ -395,9 +387,6 @@
}
}
}
- },
- "400": {
- "description": "Bad Request"
}
},
"security": [
@@ -407,6 +396,147 @@
]
}
},
+ "/api/v1/workspace/{workspaceId}/audit-logs": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "workspaceId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/workspace/{workspaceId}/audit-logs/filters/actors": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "workspaceId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/workspace/{workspaceId}/trusted-ips": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "workspaceId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ },
+ "post": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "workspaceId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ },
+ "400": {
+ "description": "Bad Request"
+ }
+ }
+ }
+ },
+ "/api/v1/workspace/{workspaceId}/trusted-ips/{trustedIpId}": {
+ "patch": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "workspaceId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ },
+ {
+ "name": "trustedIpId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ },
+ "400": {
+ "description": "Bad Request"
+ }
+ }
+ },
+ "delete": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "workspaceId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ },
+ {
+ "name": "trustedIpId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ },
+ "400": {
+ "description": "Bad Request"
+ }
+ }
+ }
+ },
"/api/v1/action/{actionId}": {
"get": {
"description": "",
@@ -427,81 +557,495 @@
}
}
},
- "/api/v1/signup/email/signup": {
+ "/api/v1/organizations/{organizationId}/plans/table": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/organizations/{organizationId}/plan": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/organizations/{organizationId}/session/trial": {
+ "post": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/organizations/{organizationId}/plan/billing": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/organizations/{organizationId}/plan/table": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/organizations/{organizationId}/billing-details": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ },
+ "patch": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/organizations/{organizationId}/billing-details/payment-methods": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ },
+ "post": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/organizations/{organizationId}/billing-details/payment-methods/{pmtMethodId}": {
+ "delete": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ },
+ {
+ "name": "pmtMethodId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/organizations/{organizationId}/billing-details/tax-ids": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ },
+ "post": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/organizations/{organizationId}/billing-details/tax-ids/{taxId}": {
+ "delete": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ },
+ {
+ "name": "taxId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/organizations/{organizationId}/invoices": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/organizations/{organizationId}/licenses": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/sso/redirect/google": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "callback_port",
+ "in": "query",
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "default": {
+ "description": ""
+ }
+ }
+ }
+ },
+ "/api/v1/sso/google": {
+ "get": {
+ "description": "",
+ "responses": {
+ "default": {
+ "description": ""
+ }
+ }
+ }
+ },
+ "/api/v1/sso/redirect/github": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "callback_port",
+ "in": "query",
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "default": {
+ "description": ""
+ }
+ }
+ }
+ },
+ "/api/v1/sso/github": {
+ "get": {
+ "description": "",
+ "responses": {
+ "default": {
+ "description": ""
+ }
+ }
+ }
+ },
+ "/api/v1/sso/redirect/saml2/{ssoIdentifier}": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "ssoIdentifier",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ },
+ {
+ "name": "callback_port",
+ "in": "query",
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "default": {
+ "description": ""
+ }
+ }
+ }
+ },
+ "/api/v1/sso/saml2/{ssoIdentifier}": {
+ "post": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "ssoIdentifier",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "default": {
+ "description": ""
+ }
+ }
+ }
+ },
+ "/api/v1/sso/config": {
+ "get": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ },
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
},
"400": {
"description": "Bad Request"
+ }
+ }
+ },
+ "patch": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
+ },
+ "400": {
+ "description": "Bad Request"
+ }
+ }
+ }
+ },
+ "/api/v1/cloud-products/": {
+ "get": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/signup/email/signup": {
+ "post": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
},
"403": {
"description": "Forbidden"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "email": {
- "example": "any"
- }
- }
- }
- }
- }
}
}
},
"/api/v1/signup/email/verify": {
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
},
- "400": {
- "description": "Bad Request"
- },
"403": {
"description": "Forbidden"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "email": {
- "example": "any"
- },
- "code": {
- "example": "any"
- }
- }
- }
- }
- }
}
}
},
"/api/v1/auth/token": {
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -509,30 +1053,9 @@
"/api/v1/auth/login1": {
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "email": {
- "example": "any"
- },
- "clientPublicKey": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -556,23 +1079,6 @@
"400": {
"description": "Bad Request"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "email": {
- "example": "any"
- },
- "clientProof": {
- "example": "any"
- }
- }
- }
- }
- }
}
}
},
@@ -591,9 +1097,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -601,7 +1104,16 @@
"/api/v1/auth/checkAuth": {
"post": {
"description": "",
- "parameters": [],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/auth/sessions": {
+ "delete": {
+ "description": "",
"responses": {
"200": {
"description": "OK"
@@ -625,9 +1137,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -652,30 +1161,12 @@
"400": {
"description": "Bad Request"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "isActive": {
- "example": "any"
- },
- "botKey": {
- "example": "any"
- }
- }
- }
- }
- }
}
}
},
"/api/v1/user/": {
"get": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
@@ -686,47 +1177,17 @@
"/api/v1/user-action/": {
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "action": {
- "example": "any"
- }
- }
- }
- }
}
}
},
"get": {
"description": "",
- "parameters": [
- {
- "name": "action",
- "in": "query",
- "schema": {
- "type": "string"
- }
- }
- ],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -734,39 +1195,17 @@
"/api/v1/organization/": {
"get": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
},
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "organizationName": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -787,9 +1226,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -810,9 +1246,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -833,9 +1266,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -856,23 +1286,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "name": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -893,9 +1306,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
},
@@ -914,23 +1324,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "email": {
- "example": "any"
- }
- }
- }
- }
}
}
},
@@ -949,23 +1342,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "email": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -986,32 +1362,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- }
- }
- },
- "/api/v1/organization/{organizationId}/subscriptions": {
- "get": {
- "description": "",
- "parameters": [
- {
- "name": "organizationId",
- "in": "path",
- "required": true,
- "schema": {
- "type": "string"
- }
- }
- ],
- "responses": {
- "200": {
- "description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -1052,9 +1402,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -1075,9 +1422,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -1085,19 +1429,14 @@
"/api/v1/workspace/": {
"get": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
},
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
@@ -1105,23 +1444,6 @@
"400": {
"description": "Bad Request"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "workspaceName": {
- "example": "any"
- },
- "organizationId": {
- "example": "any"
- }
- }
- }
- }
- }
}
}
},
@@ -1141,9 +1463,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
},
@@ -1162,9 +1481,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -1185,23 +1501,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "name": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -1222,23 +1521,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "email": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -1259,9 +1541,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -1282,9 +1561,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -1305,9 +1581,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -1346,8 +1619,8 @@
}
],
"responses": {
- "400": {
- "description": "Bad Request"
+ "default": {
+ "description": ""
}
}
}
@@ -1368,9 +1641,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -1391,9 +1661,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -1414,57 +1681,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "role": {
- "example": "any"
- }
- }
- }
- }
- }
- }
- }
- },
- "/api/v1/membership/{membershipId}/deny-permissions": {
- "post": {
- "description": "",
- "parameters": [
- {
- "name": "membershipId",
- "in": "path",
- "required": true,
- "schema": {
- "type": "string"
- }
- }
- ],
- "responses": {
- "200": {
- "description": "OK"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "permissions": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -1485,23 +1701,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "key": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -1522,9 +1721,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -1548,53 +1744,15 @@
"400": {
"description": "Bad Request"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "organizationId": {
- "example": "any"
- },
- "inviteeEmail": {
- "example": "any"
- }
- }
- }
- }
- }
}
}
},
"/api/v1/invite-org/verify": {
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "email": {
- "example": "any"
- },
- "code": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -1615,9 +1773,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
},
"requestBody": {
@@ -1673,9 +1828,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -1710,9 +1862,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -1720,7 +1869,6 @@
"/api/v1/service-token/": {
"get": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
@@ -1729,7 +1877,6 @@
},
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
@@ -1775,27 +1922,9 @@
"/api/v1/password/srp1": {
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "clientPublicKey": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -1803,7 +1932,6 @@
"/api/v1/password/change-password": {
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
@@ -1811,74 +1939,15 @@
"400": {
"description": "Bad Request"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "clientProof": {
- "example": "any"
- },
- "protectedKey": {
- "example": "any"
- },
- "protectedKeyIV": {
- "example": "any"
- },
- "protectedKeyTag": {
- "example": "any"
- },
- "encryptedPrivateKey": {
- "example": "any"
- },
- "encryptedPrivateKeyIV": {
- "example": "any"
- },
- "encryptedPrivateKeyTag": {
- "example": "any"
- },
- "salt": {
- "example": "any"
- },
- "verifier": {
- "example": "any"
- }
- }
- }
- }
- }
}
}
},
"/api/v1/password/email/password-reset": {
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- },
- "403": {
- "description": "Forbidden"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "email": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -1886,53 +1955,27 @@
"/api/v1/password/email/password-reset-verify": {
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
},
- "400": {
- "description": "Bad Request"
- },
"403": {
"description": "Forbidden"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "email": {
- "example": "any"
- },
- "code": {
- "example": "any"
- }
- }
- }
- }
- }
}
}
},
"/api/v1/password/backup-private-key": {
"get": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
},
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
@@ -1940,105 +1983,15 @@
"400": {
"description": "Bad Request"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "clientProof": {
- "example": "any"
- },
- "encryptedPrivateKey": {
- "example": "any"
- },
- "iv": {
- "example": "any"
- },
- "tag": {
- "example": "any"
- },
- "salt": {
- "example": "any"
- },
- "verifier": {
- "example": "any"
- }
- }
- }
- }
- }
}
}
},
"/api/v1/password/password-reset": {
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "protectedKey": {
- "example": "any"
- },
- "protectedKeyIV": {
- "example": "any"
- },
- "protectedKeyTag": {
- "example": "any"
- },
- "encryptedPrivateKey": {
- "example": "any"
- },
- "encryptedPrivateKeyIV": {
- "example": "any"
- },
- "encryptedPrivateKeyTag": {
- "example": "any"
- },
- "salt": {
- "example": "any"
- },
- "verifier": {
- "example": "any"
- }
- }
- }
- }
- }
- }
- }
- },
- "/api/v1/stripe/webhook": {
- "post": {
- "description": "",
- "parameters": [
- {
- "name": "stripe-signature",
- "in": "header",
- "schema": {
- "type": "string"
- }
- }
- ],
- "responses": {
- "200": {
- "description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -2046,60 +1999,9 @@
"/api/v1/integration/": {
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "integrationAuthId": {
- "example": "any"
- },
- "app": {
- "example": "any"
- },
- "appId": {
- "example": "any"
- },
- "isActive": {
- "example": "any"
- },
- "sourceEnvironment": {
- "example": "any"
- },
- "targetEnvironment": {
- "example": "any"
- },
- "targetEnvironmentId": {
- "example": "any"
- },
- "targetService": {
- "example": "any"
- },
- "targetServiceId": {
- "example": "any"
- },
- "owner": {
- "example": "any"
- },
- "path": {
- "example": "any"
- },
- "region": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -2120,38 +2022,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "environment": {
- "example": "any"
- },
- "isActive": {
- "example": "any"
- },
- "app": {
- "example": "any"
- },
- "appId": {
- "example": "any"
- },
- "targetEnvironment": {
- "example": "any"
- },
- "owner": {
- "example": "any"
- }
- }
- }
- }
}
}
},
@@ -2170,9 +2040,16 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
+ }
+ }
+ }
+ },
+ "/api/v1/integration/manual-sync": {
+ "post": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
}
}
}
@@ -2180,7 +2057,6 @@
"/api/v1/integration-auth/integration-options": {
"get": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
@@ -2235,33 +2111,9 @@
"/api/v1/integration-auth/oauth-token": {
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "workspaceId": {
- "example": "any"
- },
- "code": {
- "example": "any"
- },
- "integration": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -2269,36 +2121,9 @@
"/api/v1/integration-auth/access-token": {
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "workspaceId": {
- "example": "any"
- },
- "accessId": {
- "example": "any"
- },
- "accessToken": {
- "example": "any"
- },
- "integration": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -2314,21 +2139,11 @@
"schema": {
"type": "string"
}
- },
- {
- "name": "teamId",
- "in": "query",
- "schema": {
- "type": "string"
- }
}
],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -2364,13 +2179,6 @@
"schema": {
"type": "string"
}
- },
- {
- "name": "appId",
- "in": "query",
- "schema": {
- "type": "string"
- }
}
],
"responses": {
@@ -2391,13 +2199,6 @@
"schema": {
"type": "string"
}
- },
- {
- "name": "appId",
- "in": "query",
- "schema": {
- "type": "string"
- }
}
],
"responses": {
@@ -2418,13 +2219,991 @@
"schema": {
"type": "string"
}
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/integration-auth/{integrationAuthId}/bitbucket/workspaces": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "integrationAuthId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/integration-auth/{integrationAuthId}/northflank/secret-groups": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "integrationAuthId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/integration-auth/{integrationAuthId}/teamcity/build-configs": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "integrationAuthId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/folders/": {
+ "post": {
+ "summary": "Create a folder",
+ "description": "Create a new folder in a specified workspace and environment",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "folder": {
+ "type": "object",
+ "properties": {
+ "id": {
+ "type": "string",
+ "example": "someFolderId"
+ },
+ "name": {
+ "type": "string",
+ "example": "my_folder"
+ }
+ },
+ "description": "Details of the created folder"
+ }
+ }
+ }
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request. For example, 'Folder name cannot contain spaces. Only underscore and dashes'"
+ },
+ "401": {
+ "description": "Unauthorized request. For example, 'Folder Permission Denied'"
+ }
+ },
+ "security": [
+ {
+ "apiKeyAuth": []
+ }
+ ],
+ "requestBody": {
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "workspaceId": {
+ "type": "string",
+ "description": "ID of the workspace where the folder will be created",
+ "example": "someWorkspaceId"
+ },
+ "environment": {
+ "type": "string",
+ "description": "Environment where the folder will reside",
+ "example": "production"
+ },
+ "folderName": {
+ "type": "string",
+ "description": "Name of the folder to be created",
+ "example": "my_folder"
+ },
+ "parentFolderId": {
+ "type": "string",
+ "description": "ID of the parent folder under which this folder will be created. If not specified, it will be created at the root level.",
+ "example": "someParentFolderId"
+ }
+ },
+ "required": [
+ "workspaceId",
+ "environment",
+ "folderName"
+ ]
+ }
+ }
+ }
+ }
+ },
+ "get": {
+ "summary": "Retrieve folders based on specific conditions",
+ "description": "Fetches folders from the specified workspace and environment, optionally providing either a parentFolderId or a parentFolderPath to narrow down results",
+ "parameters": [
+ {
+ "name": "workspaceId",
+ "description": "ID of the workspace from which the folders are to be fetched",
+ "required": true,
+ "in": "query",
+ "schema": {
+ "type": "string"
+ }
},
{
- "name": "appId",
+ "name": "environment",
+ "description": "Environment where the folder is located",
+ "required": true,
"in": "query",
"schema": {
"type": "string"
}
+ },
+ {
+ "name": "parentFolderId",
+ "description": "ID of the parent folder",
+ "required": false,
+ "in": "query",
+ "schema": {
+ "type": "string"
+ }
+ },
+ {
+ "name": "parentFolderPath",
+ "description": "Path of the parent folder, like /folder1/folder2",
+ "required": false,
+ "in": "query",
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "folders": {
+ "type": "array",
+ "items": {
+ "type": "object",
+ "properties": {
+ "id": {
+ "type": "string",
+ "example": "someFolderId"
+ },
+ "name": {
+ "type": "string",
+ "example": "someFolderName"
+ }
+ }
+ },
+ "description": "List of folders"
+ },
+ "dir": {
+ "type": "array",
+ "items": {
+ "type": "object",
+ "properties": {
+ "name": {
+ "type": "string",
+ "example": "parentFolderName"
+ },
+ "id": {
+ "type": "string",
+ "example": "parentFolderId"
+ }
+ }
+ },
+ "description": "List of directories"
+ }
+ }
+ }
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request. For instance, 'The folder doesn't exist'"
+ },
+ "401": {
+ "description": "Unauthorized request. For example, 'Folder Permission Denied'"
+ }
+ },
+ "security": [
+ {
+ "apiKeyAuth": []
+ }
+ ]
+ }
+ },
+ "/api/v1/folders/{folderId}": {
+ "patch": {
+ "summary": "Update a folder by ID",
+ "description": "Update the name of a folder in a specified workspace and environment by its ID",
+ "parameters": [
+ {
+ "name": "folderId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ },
+ "description": "ID of the folder to be updated"
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "message": {
+ "type": "string",
+ "example": "Successfully updated folder"
+ },
+ "folder": {
+ "type": "object",
+ "properties": {
+ "name": {
+ "type": "string",
+ "example": "updated_folder_name"
+ },
+ "id": {
+ "type": "string",
+ "example": "someFolderId"
+ }
+ },
+ "description": "Details of the updated folder"
+ }
+ }
+ }
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request. Reasons can include 'The folder doesn't exist' or 'Folder name cannot contain spaces. Only underscore and dashes'"
+ },
+ "401": {
+ "description": "Unauthorized request. For example, 'Folder Permission Denied'"
+ }
+ },
+ "security": [
+ {
+ "apiKeyAuth": []
+ }
+ ],
+ "requestBody": {
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "workspaceId": {
+ "type": "string",
+ "description": "ID of the workspace where the folder is located",
+ "example": "someWorkspaceId"
+ },
+ "environment": {
+ "type": "string",
+ "description": "Environment where the folder is located",
+ "example": "production"
+ },
+ "name": {
+ "type": "string",
+ "description": "New name for the folder",
+ "example": "updated_folder_name"
+ }
+ },
+ "required": [
+ "workspaceId",
+ "environment",
+ "name"
+ ]
+ }
+ }
+ }
+ }
+ },
+ "delete": {
+ "summary": "Delete a folder by ID",
+ "description": "Delete the specified folder from a specified workspace and environment using its ID",
+ "parameters": [
+ {
+ "name": "folderId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ },
+ "description": "ID of the folder to be deleted"
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "message": {
+ "type": "string",
+ "example": "successfully deleted folders"
+ },
+ "folders": {
+ "type": "array",
+ "items": {
+ "type": "object",
+ "properties": {
+ "id": {
+ "type": "string",
+ "example": "someFolderId"
+ },
+ "name": {
+ "type": "string",
+ "example": "someFolderName"
+ }
+ }
+ },
+ "description": "List of IDs and names of the deleted folders"
+ }
+ }
+ }
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request. Reasons can include 'The folder doesn't exist'"
+ },
+ "401": {
+ "description": "Unauthorized request. For example, 'Folder Permission Denied'"
+ }
+ },
+ "security": [
+ {
+ "apiKeyAuth": []
+ }
+ ],
+ "requestBody": {
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "workspaceId": {
+ "type": "string",
+ "description": "ID of the workspace where the folder is located",
+ "example": "someWorkspaceId"
+ },
+ "environment": {
+ "type": "string",
+ "description": "Environment where the folder is located",
+ "example": "production"
+ }
+ },
+ "required": [
+ "workspaceId",
+ "environment"
+ ]
+ }
+ }
+ }
+ }
+ }
+ },
+ "/api/v1/secret-scanning/create-installation-session/organization/{organizationId}": {
+ "post": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/secret-scanning/link-installation": {
+ "post": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/secret-scanning/installation-status/organization/{organizationId}": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/secret-scanning/organization/{organizationId}/risks": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/secret-scanning/organization/{organizationId}/risks/{riskId}/status": {
+ "post": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "organizationId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ },
+ {
+ "name": "riskId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/webhooks/": {
+ "post": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ },
+ "get": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/webhooks/{webhookId}": {
+ "patch": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "webhookId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ },
+ "delete": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "webhookId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/webhooks/{webhookId}/test": {
+ "post": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "webhookId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ },
+ "400": {
+ "description": "Bad Request"
+ }
+ }
+ }
+ },
+ "/api/v1/secret-imports/": {
+ "post": {
+ "summary": "Create secret import",
+ "description": "Create a new secret import for a specified workspace and environment",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "message": {
+ "type": "string",
+ "example": "successfully created secret import"
+ }
+ },
+ "description": "Confirmation of secret import creation"
+ }
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request. For example, 'Secret import already exist'"
+ },
+ "401": {
+ "description": "Unauthorized request. For example, 'Folder Permission Denied'"
+ },
+ "404": {
+ "description": "Resource Not Found. For example, 'Failed to find folder'"
+ }
+ },
+ "requestBody": {
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "workspaceId": {
+ "type": "string",
+ "description": "ID of the workspace where the secret import will be created",
+ "example": "someWorkspaceId"
+ },
+ "environment": {
+ "type": "string",
+ "description": "Environment to import to",
+ "example": "production"
+ },
+ "folderId": {
+ "type": "string",
+ "description": "Folder ID. Use root for the root folder.",
+ "example": "my_folder"
+ },
+ "secretImport": {
+ "type": "object",
+ "properties": {
+ "environment": {
+ "type": "string",
+ "description": "Import from environment",
+ "example": "development"
+ },
+ "secretPath": {
+ "type": "string",
+ "description": "Import from secret path",
+ "example": "/user/oauth"
+ }
+ }
+ }
+ },
+ "required": [
+ "workspaceId",
+ "environment",
+ "folderName"
+ ]
+ }
+ }
+ }
+ }
+ },
+ "get": {
+ "summary": "Retrieve secret imports",
+ "description": "Fetches the secret imports based on the workspaceId, environment, and folderId",
+ "parameters": [
+ {
+ "name": "workspaceId",
+ "in": "query",
+ "description": "ID of the workspace of secret imports to get",
+ "required": true,
+ "example": "workspace12345",
+ "schema": {
+ "type": "string"
+ }
+ },
+ {
+ "name": "environment",
+ "in": "query",
+ "description": "Environment of secret imports to get",
+ "required": true,
+ "example": "production",
+ "schema": {
+ "type": "string"
+ }
+ },
+ {
+ "name": "folderId",
+ "in": "query",
+ "description": "ID of the folder containing the secret imports. Default: root",
+ "required": false,
+ "example": "folder12345",
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "Successfully retrieved secret import",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "secretImport": {
+ "type": "object",
+ "description": "Details of a secret import"
+ }
+ }
+ }
+ }
+ }
+ },
+ "401": {
+ "description": "Unauthorized access due to invalid token or scope"
+ },
+ "403": {
+ "description": "Forbidden access due to insufficient permissions"
+ }
+ }
+ }
+ },
+ "/api/v1/secret-imports/{id}": {
+ "put": {
+ "summary": "Update a secret import",
+ "description": "Updates an existing secret import based on the provided ID and new import details",
+ "parameters": [
+ {
+ "name": "id",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ },
+ "description": "ID of the secret import to be updated",
+ "example": "import12345"
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "Successfully updated the secret import",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "message": {
+ "type": "string",
+ "example": "successfully updated secret import"
+ }
+ }
+ }
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request - Import not found"
+ },
+ "401": {
+ "description": "Unauthorized access due to invalid token or scope"
+ },
+ "403": {
+ "description": "Forbidden access due to insufficient permissions"
+ }
+ },
+ "requestBody": {
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "secretImports": {
+ "type": "array",
+ "description": "List of new secret imports",
+ "items": {
+ "type": "object",
+ "properties": {
+ "environment": {
+ "type": "string",
+ "description": "Environment of the secret import",
+ "example": "production"
+ },
+ "secretPath": {
+ "type": "string",
+ "description": "Path of the secret import",
+ "example": "/path/to/secret"
+ }
+ },
+ "required": [
+ "environment",
+ "secretPath"
+ ]
+ }
+ }
+ },
+ "required": [
+ "secretImports"
+ ]
+ }
+ }
+ }
+ }
+ },
+ "delete": {
+ "summary": "Delete secret import",
+ "description": "Delete secret import",
+ "parameters": [
+ {
+ "name": "id",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ },
+ "description": "ID of the secret import",
+ "example": "12345abcde"
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "message": {
+ "type": "string",
+ "example": "successfully delete secret import"
+ }
+ },
+ "description": "Confirmation of secret import deletion"
+ }
+ }
+ }
+ }
+ },
+ "requestBody": {
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "secretImportEnv": {
+ "type": "string",
+ "description": "Import from environment",
+ "example": "someWorkspaceId"
+ },
+ "secretImportPath": {
+ "type": "string",
+ "description": "Import from secret path",
+ "example": "production"
+ }
+ },
+ "required": [
+ "id",
+ "secretImportEnv",
+ "secretImportPath"
+ ]
+ }
+ }
+ }
+ }
+ }
+ },
+ "/api/v1/secret-imports/secrets": {
+ "get": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/roles/": {
+ "post": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ },
+ "get": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/roles/{id}": {
+ "patch": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "id",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ },
+ "delete": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "id",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/roles/organization/{orgId}/permissions": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "orgId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v1/roles/workspace/{workspaceId}/permissions": {
+ "get": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "workspaceId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
}
],
"responses": {
@@ -2437,14 +3216,19 @@
"/api/v2/signup/complete-account/signup": {
"post": {
"description": "",
- "parameters": [],
+ "parameters": [
+ {
+ "name": "user-agent",
+ "in": "header",
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
"responses": {
"200": {
"description": "OK"
},
- "400": {
- "description": "Bad Request"
- },
"403": {
"description": "Forbidden"
}
@@ -2504,14 +3288,19 @@
"/api/v2/signup/complete-account/invite": {
"post": {
"description": "",
- "parameters": [],
+ "parameters": [
+ {
+ "name": "user-agent",
+ "in": "header",
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
"responses": {
"200": {
"description": "OK"
},
- "400": {
- "description": "Bad Request"
- },
"403": {
"description": "Forbidden"
}
@@ -2568,13 +3357,9 @@
"/api/v2/auth/login1": {
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
},
"requestBody": {
@@ -2638,27 +3423,9 @@
"/api/v2/auth/mfa/send": {
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "email": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -2679,23 +3446,6 @@
"200": {
"description": "OK"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "email": {
- "example": "any"
- },
- "mfaToken": {
- "example": "any"
- }
- }
- }
- }
- }
}
}
},
@@ -2703,7 +3453,6 @@
"get": {
"summary": "Retrieve the current user on the request",
"description": "Retrieve the current user on the request",
- "parameters": [],
"responses": {
"200": {
"description": "OK",
@@ -2721,9 +3470,6 @@
}
}
}
- },
- "400": {
- "description": "Bad Request"
}
},
"security": [
@@ -2736,7 +3482,26 @@
"/api/v2/users/me/mfa": {
"patch": {
"description": "",
- "parameters": [],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v2/users/me/name": {
+ "patch": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v2/users/me/auth-methods": {
+ "put": {
+ "description": "",
"responses": {
"200": {
"description": "OK"
@@ -2744,20 +3509,6 @@
"400": {
"description": "Bad Request"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "isMfaEnabled": {
- "example": "any"
- }
- }
- }
- }
- }
}
}
},
@@ -2765,7 +3516,6 @@
"get": {
"summary": "Return organizations that current user is part of",
"description": "Return organizations that current user is part of",
- "parameters": [],
"responses": {
"200": {
"description": "OK",
@@ -2785,9 +3535,6 @@
}
}
}
- },
- "400": {
- "description": "Bad Request"
}
},
"security": [
@@ -2797,6 +3544,62 @@
]
}
},
+ "/api/v2/users/me/api-keys": {
+ "get": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ },
+ "post": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v2/users/me/api-keys/{apiKeyDataId}": {
+ "delete": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "apiKeyDataId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v2/users/me/sessions": {
+ "get": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ },
+ "delete": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
"/api/v2/organizations/{organizationId}/memberships": {
"get": {
"summary": "Return organization memberships",
@@ -2831,9 +3634,6 @@
}
}
}
- },
- "400": {
- "description": "Bad Request"
}
},
"security": [
@@ -2883,9 +3683,6 @@
}
}
}
- },
- "400": {
- "description": "Bad Request"
}
},
"security": [
@@ -2949,9 +3746,6 @@
}
}
}
- },
- "400": {
- "description": "Bad Request"
}
},
"security": [
@@ -3026,7 +3820,8 @@
},
"/api/v2/workspace/{workspaceId}/environments": {
"post": {
- "description": "",
+ "summary": "Create environment",
+ "description": "Create environment",
"parameters": [
{
"name": "workspaceId",
@@ -3034,17 +3829,54 @@
"required": true,
"schema": {
"type": "string"
- }
+ },
+ "description": "ID of project"
}
],
"responses": {
"200": {
- "description": "OK"
+ "description": "OK",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "message": {
+ "type": "string",
+ "example": "Successfully created new environment"
+ },
+ "workspace": {
+ "type": "string",
+ "example": "someWorkspaceId"
+ },
+ "environment": {
+ "type": "object",
+ "properties": {
+ "name": {
+ "type": "string",
+ "example": "someEnvironmentName"
+ },
+ "slug": {
+ "type": "string",
+ "example": "someEnvironmentSlug"
+ }
+ }
+ }
+ },
+ "description": "Response after creating a new environment"
+ }
+ }
+ }
},
"400": {
"description": "Bad Request"
}
},
+ "security": [
+ {
+ "apiKeyAuth": []
+ }
+ ],
"requestBody": {
"content": {
"application/json": {
@@ -3052,19 +3884,28 @@
"type": "object",
"properties": {
"environmentName": {
- "example": "any"
+ "type": "string",
+ "description": "Name of the environment",
+ "example": "development"
},
"environmentSlug": {
- "example": "any"
+ "type": "string",
+ "description": "Slug of the environment",
+ "example": "dev-environment"
}
- }
+ },
+ "required": [
+ "environmentName",
+ "environmentSlug"
+ ]
}
}
}
}
},
"put": {
- "description": "",
+ "summary": "Rename workspace environment",
+ "description": "Rename a specific environment within a workspace",
"parameters": [
{
"name": "workspaceId",
@@ -3072,15 +3913,44 @@
"required": true,
"schema": {
"type": "string"
- }
+ },
+ "description": "ID of the workspace"
}
],
"responses": {
"200": {
- "description": "OK"
- },
- "400": {
- "description": "Bad Request"
+ "description": "OK",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "message": {
+ "type": "string",
+ "example": "Successfully update environment"
+ },
+ "workspace": {
+ "type": "string",
+ "example": "someWorkspaceId"
+ },
+ "environment": {
+ "type": "object",
+ "properties": {
+ "name": {
+ "type": "string",
+ "example": "Staging-Renamed"
+ },
+ "slug": {
+ "type": "string",
+ "example": "staging-renamed"
+ }
+ }
+ }
+ },
+ "description": "Details of the renamed environment"
+ }
+ }
+ }
}
},
"requestBody": {
@@ -3090,21 +3960,32 @@
"type": "object",
"properties": {
"environmentName": {
- "example": "any"
+ "type": "string",
+ "description": "New name for the environment",
+ "example": "Staging-Renamed"
},
"environmentSlug": {
- "example": "any"
+ "type": "string",
+ "description": "New slug for the environment",
+ "example": "staging-renamed"
},
"oldEnvironmentSlug": {
- "example": "any"
+ "type": "string",
+ "description": "Current slug of the environment to rename",
+ "example": "staging-old"
}
- }
+ },
+ "required": [
+ "environmentName",
+ "environmentSlug",
+ "oldEnvironmentSlug"
+ ]
}
}
}
}
},
- "delete": {
+ "patch": {
"description": "",
"parameters": [
{
@@ -3119,11 +4000,55 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
+ }
+ }
+ },
+ "delete": {
+ "summary": "Delete workspace environment",
+ "description": "Delete a specific environment from a workspace",
+ "parameters": [
+ {
+ "name": "workspaceId",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ },
+ "description": "ID of the workspace"
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "message": {
+ "type": "string",
+ "example": "Successfully deleted environment"
+ },
+ "workspace": {
+ "type": "string",
+ "example": "someWorkspaceId"
+ },
+ "environment": {
+ "type": "string",
+ "example": "dev-environment"
+ }
+ },
+ "description": "Response after deleting an environment from a workspace"
+ }
+ }
+ }
}
},
+ "security": [
+ {
+ "apiKeyAuth": []
+ }
+ ],
"requestBody": {
"content": {
"application/json": {
@@ -3131,16 +4056,22 @@
"type": "object",
"properties": {
"environmentSlug": {
- "example": "any"
+ "type": "string",
+ "description": "Slug of the environment to delete",
+ "example": "dev-environment"
}
- }
+ },
+ "required": [
+ "environmentSlug"
+ ]
}
}
}
}
},
"get": {
- "description": "",
+ "summary": "Get all accessible environments of a workspace",
+ "description": "Fetch all environments that the user has access to in a specified workspace",
"parameters": [
{
"name": "workspaceId",
@@ -3148,14 +4079,54 @@
"required": true,
"schema": {
"type": "string"
- }
+ },
+ "description": "ID of the workspace"
}
],
"responses": {
"200": {
- "description": "OK"
+ "description": "OK",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "accessibleEnvironments": {
+ "type": "array",
+ "items": {
+ "type": "object",
+ "properties": {
+ "name": {
+ "type": "string",
+ "example": "Development"
+ },
+ "slug": {
+ "type": "string",
+ "example": "development"
+ },
+ "isWriteDenied": {
+ "type": "boolean",
+ "example": false
+ },
+ "isReadDenied": {
+ "type": "boolean",
+ "example": false
+ }
+ }
+ }
+ }
+ },
+ "description": "List of environments the user has access to in the specified workspace"
+ }
+ }
+ }
}
- }
+ },
+ "security": [
+ {
+ "apiKeyAuth": []
+ }
+ ]
}
},
"/api/v2/workspace/{workspaceId}/tags": {
@@ -3193,26 +4164,6 @@
"200": {
"description": "OK"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "name": {
- "example": "any"
- },
- "tagColor": {
- "example": "any"
- },
- "slug": {
- "example": "any"
- }
- }
- }
- }
- }
}
}
},
@@ -3252,9 +4203,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
},
"requestBody": {
@@ -3310,9 +4258,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -3346,9 +4291,6 @@
}
}
}
- },
- "400": {
- "description": "Bad Request"
}
},
"security": [
@@ -3374,9 +4316,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
}
}
}
@@ -3415,9 +4354,6 @@
}
}
}
- },
- "400": {
- "description": "Bad Request"
}
},
"security": [
@@ -3467,9 +4403,6 @@
}
}
}
- },
- "400": {
- "description": "Bad Request"
}
},
"security": [
@@ -3533,9 +4466,6 @@
}
}
}
- },
- "400": {
- "description": "Bad Request"
}
},
"security": [
@@ -3561,23 +4491,6 @@
"responses": {
"200": {
"description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "autoCapitalization": {
- "example": "any"
- }
- }
- }
- }
}
}
}
@@ -3873,26 +4786,6 @@
"200": {
"description": "OK"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "workspaceId": {
- "example": "any"
- },
- "environment": {
- "example": "any"
- },
- "requests": {
- "example": "any"
- }
- }
- }
- }
- }
}
}
},
@@ -3988,13 +4881,6 @@
"schema": {
"type": "string"
}
- },
- {
- "name": "content",
- "in": "query",
- "schema": {
- "type": "string"
- }
}
],
"responses": {
@@ -4027,7 +4913,6 @@
"patch": {
"summary": "Update secret(s)",
"description": "Update secret(s)",
- "parameters": [],
"responses": {
"200": {
"description": "OK",
@@ -4131,7 +5016,6 @@
"get": {
"summary": "Return Infisical Token data",
"description": "Return Infisical Token data",
- "parameters": [],
"responses": {
"200": {
"description": "OK",
@@ -4159,46 +5043,10 @@
},
"post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "name": {
- "example": "any"
- },
- "workspaceId": {
- "example": "any"
- },
- "environment": {
- "example": "any"
- },
- "encryptedKey": {
- "example": "any"
- },
- "iv": {
- "example": "any"
- },
- "tag": {
- "example": "any"
- },
- "expiresIn": {
- "example": "any"
- },
- "permissions": {
- "example": "any"
- }
- }
- }
- }
- }
}
}
},
@@ -4222,10 +5070,9 @@
}
}
},
- "/api/v2/service-accounts/me": {
- "get": {
+ "/api/v3/auth/login1": {
+ "post": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
@@ -4233,12 +5080,44 @@
}
}
},
- "/api/v2/service-accounts/{serviceAccountId}": {
+ "/api/v3/auth/login2": {
+ "post": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "user-agent",
+ "in": "header",
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ },
+ "400": {
+ "description": "Bad Request"
+ }
+ }
+ }
+ },
+ "/api/v3/secrets/raw": {
+ "get": {
+ "description": "",
+ "responses": {
+ "200": {
+ "description": "OK"
+ }
+ }
+ }
+ },
+ "/api/v3/secrets/raw/{secretName}": {
"get": {
"description": "",
"parameters": [
{
- "name": "serviceAccountId",
+ "name": "secretName",
"in": "path",
"required": true,
"schema": {
@@ -4252,11 +5131,11 @@
}
}
},
- "delete": {
+ "post": {
"description": "",
"parameters": [
{
- "name": "serviceAccountId",
+ "name": "secretName",
"in": "path",
"required": true,
"schema": {
@@ -4269,59 +5148,12 @@
"description": "OK"
}
}
- }
- },
- "/api/v2/service-accounts/": {
- "post": {
- "description": "",
- "parameters": [],
- "responses": {
- "200": {
- "description": "OK"
- }
- }
- }
- },
- "/api/v2/service-accounts/{serviceAccountId}/name": {
+ },
"patch": {
"description": "",
"parameters": [
{
- "name": "serviceAccountId",
- "in": "path",
- "required": true,
- "schema": {
- "type": "string"
- }
- }
- ],
- "responses": {
- "200": {
- "description": "OK"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "name": {
- "example": "any"
- }
- }
- }
- }
- }
- }
- }
- },
- "/api/v2/service-accounts/{serviceAccountId}/permissions/workspace": {
- "get": {
- "description": "",
- "parameters": [
- {
- "name": "serviceAccountId",
+ "name": "secretName",
"in": "path",
"required": true,
"schema": {
@@ -4335,71 +5167,11 @@
}
}
},
- "post": {
- "description": "",
- "parameters": [
- {
- "name": "serviceAccountId",
- "in": "path",
- "required": true,
- "schema": {
- "type": "string"
- }
- }
- ],
- "responses": {
- "200": {
- "description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "environment": {
- "example": "any"
- },
- "workspaceId": {
- "example": "any"
- },
- "read": {
- "example": "any"
- },
- "write": {
- "example": "any"
- },
- "encryptedKey": {
- "example": "any"
- },
- "nonce": {
- "example": "any"
- }
- }
- }
- }
- }
- }
- }
- },
- "/api/v2/service-accounts/{serviceAccountId}/permissions/workspace/{serviceAccountWorkspacePermissionId}": {
"delete": {
"description": "",
"parameters": [
{
- "name": "serviceAccountId",
- "in": "path",
- "required": true,
- "schema": {
- "type": "string"
- }
- },
- {
- "name": "serviceAccountWorkspacePermissionId",
+ "name": "secretName",
"in": "path",
"required": true,
"schema": {
@@ -4414,118 +5186,9 @@
}
}
},
- "/api/v2/service-accounts/{serviceAccountId}/keys": {
- "get": {
- "description": "",
- "parameters": [
- {
- "name": "serviceAccountId",
- "in": "path",
- "required": true,
- "schema": {
- "type": "string"
- }
- },
- {
- "name": "workspaceId",
- "in": "query",
- "schema": {
- "type": "string"
- }
- }
- ],
- "responses": {
- "200": {
- "description": "OK"
- }
- }
- }
- },
- "/api/v2/api-key/": {
- "get": {
- "description": "",
- "parameters": [],
- "responses": {
- "200": {
- "description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- }
- },
- "post": {
- "description": "",
- "parameters": [],
- "responses": {
- "200": {
- "description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "name": {
- "example": "any"
- },
- "expiresIn": {
- "example": "any"
- }
- }
- }
- }
- }
- }
- }
- },
- "/api/v2/api-key/{apiKeyDataId}": {
- "delete": {
- "description": "",
- "parameters": [
- {
- "name": "apiKeyDataId",
- "in": "path",
- "required": true,
- "schema": {
- "type": "string"
- }
- }
- ],
- "responses": {
- "200": {
- "description": "OK"
- },
- "400": {
- "description": "Bad Request"
- }
- }
- }
- },
"/api/v3/secrets/": {
"get": {
"description": "",
- "parameters": [
- {
- "name": "workspaceId",
- "in": "query",
- "schema": {
- "type": "string"
- }
- },
- {
- "name": "environment",
- "in": "query",
- "schema": {
- "type": "string"
- }
- }
- ],
"responses": {
"200": {
"description": "OK"
@@ -4550,53 +5213,6 @@
"200": {
"description": "OK"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "workspaceId": {
- "example": "any"
- },
- "environment": {
- "example": "any"
- },
- "type": {
- "example": "any"
- },
- "secretKeyCiphertext": {
- "example": "any"
- },
- "secretKeyIV": {
- "example": "any"
- },
- "secretKeyTag": {
- "example": "any"
- },
- "secretValueCiphertext": {
- "example": "any"
- },
- "secretValueIV": {
- "example": "any"
- },
- "secretValueTag": {
- "example": "any"
- },
- "secretCommentCiphertext": {
- "example": "any"
- },
- "secretCommentIV": {
- "example": "any"
- },
- "secretCommentTag": {
- "example": "any"
- }
- }
- }
- }
- }
}
},
"get": {
@@ -4609,27 +5225,6 @@
"schema": {
"type": "string"
}
- },
- {
- "name": "workspaceId",
- "in": "query",
- "schema": {
- "type": "string"
- }
- },
- {
- "name": "environment",
- "in": "query",
- "schema": {
- "type": "string"
- }
- },
- {
- "name": "type",
- "in": "query",
- "schema": {
- "type": "string"
- }
}
],
"responses": {
@@ -4654,35 +5249,6 @@
"200": {
"description": "OK"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "workspaceId": {
- "example": "any"
- },
- "environment": {
- "example": "any"
- },
- "type": {
- "example": "any"
- },
- "secretValueCiphertext": {
- "example": "any"
- },
- "secretValueIV": {
- "example": "any"
- },
- "secretValueTag": {
- "example": "any"
- }
- }
- }
- }
- }
}
},
"delete": {
@@ -4701,26 +5267,6 @@
"200": {
"description": "OK"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "workspaceId": {
- "example": "any"
- },
- "environment": {
- "example": "any"
- },
- "type": {
- "example": "any"
- }
- }
- }
- }
- }
}
}
},
@@ -4781,19 +5327,37 @@
"200": {
"description": "OK"
}
- },
- "requestBody": {
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "secretsToUpdate": {
- "example": "any"
- }
- }
- }
+ }
+ }
+ },
+ "/api/v3/signup/complete-account/signup": {
+ "post": {
+ "description": "",
+ "parameters": [
+ {
+ "name": "authorization",
+ "in": "header",
+ "schema": {
+ "type": "string"
}
+ },
+ {
+ "name": "user-agent",
+ "in": "header",
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK"
+ },
+ "400": {
+ "description": "Bad Request"
+ },
+ "403": {
+ "description": "Forbidden"
}
}
}
@@ -4801,7 +5365,6 @@
"/api/status": {
"get": {
"description": "",
- "parameters": [],
"responses": {
"200": {
"description": "OK"
diff --git a/backend/src/controllers/v1/authController.ts b/backend/src/controllers/v1/authController.ts
index 14c717e38..6f6411541 100644
--- a/backend/src/controllers/v1/authController.ts
+++ b/backend/src/controllers/v1/authController.ts
@@ -17,6 +17,8 @@ import {
getJwtRefreshSecret
} from "../../config";
import { ActorType } from "../../ee/models";
+import { validateRequest } from "../../helpers/validation";
+import * as reqValidator from "../../validation/auth";
declare module "jsonwebtoken" {
export interface UserIDJwtPayload extends jwt.JwtPayload {
@@ -32,7 +34,9 @@ declare module "jsonwebtoken" {
* @returns
*/
export const login1 = async (req: Request, res: Response) => {
- const { email, clientPublicKey }: { email: string; clientPublicKey: string } = req.body;
+ const {
+ body: { email, clientPublicKey }
+ } = await validateRequest(reqValidator.Login1V1, req);
const user = await User.findOne({
email
@@ -76,7 +80,10 @@ export const login1 = async (req: Request, res: Response) => {
* @returns
*/
export const login2 = async (req: Request, res: Response) => {
- const { email, clientProof } = req.body;
+ const {
+ body: { email, clientProof }
+ } = await validateRequest(reqValidator.Login2V1, req);
+
const user = await User.findOne({
email
}).select("+salt +verifier +publicKey +encryptedPrivateKey +iv +tag");
diff --git a/backend/src/controllers/v1/botController.ts b/backend/src/controllers/v1/botController.ts
index b2e757541..65251e83a 100644
--- a/backend/src/controllers/v1/botController.ts
+++ b/backend/src/controllers/v1/botController.ts
@@ -2,10 +2,19 @@ import { Request, Response } from "express";
import { Types } from "mongoose";
import { Bot, BotKey } from "../../models";
import { createBot } from "../../helpers/bot";
+import { validateRequest } from "../../helpers/validation";
+import * as reqValidator from "../../validation/bot";
+import {
+ ProjectPermissionActions,
+ ProjectPermissionSub,
+ getUserProjectPermissions
+} from "../../ee/services/ProjectRoleService";
+import { ForbiddenError } from "@casl/ability";
+import { BadRequestError } from "../../utils/errors";
interface BotKey {
- encryptedKey: string;
- nonce: string;
+ encryptedKey: string;
+ nonce: string;
}
/**
@@ -16,23 +25,30 @@ interface BotKey {
* @returns
*/
export const getBotByWorkspaceId = async (req: Request, res: Response) => {
- const { workspaceId } = req.params;
+ const {
+ params: { workspaceId }
+ } = await validateRequest(reqValidator.GetBotByWorkspaceIdV1, req);
+ const { permission } = await getUserProjectPermissions(req.user._id, workspaceId);
+ ForbiddenError.from(permission).throwUnlessCan(
+ ProjectPermissionActions.Read,
+ ProjectPermissionSub.Integrations
+ );
let bot = await Bot.findOne({
- workspace: workspaceId,
+ workspace: workspaceId
});
-
+
if (!bot) {
- // case: bot doesn't exist for workspace with id [workspaceId]
- // -> create a new bot and return it
- bot = await createBot({
- name: "Infisical Bot",
- workspaceId: new Types.ObjectId(workspaceId),
- });
+ // case: bot doesn't exist for workspace with id [workspaceId]
+ // -> create a new bot and return it
+ bot = await createBot({
+ name: "Infisical Bot",
+ workspaceId: new Types.ObjectId(workspaceId)
+ });
}
-
+
return res.status(200).send({
- bot,
+ bot
});
};
@@ -43,46 +59,69 @@ export const getBotByWorkspaceId = async (req: Request, res: Response) => {
* @returns
*/
export const setBotActiveState = async (req: Request, res: Response) => {
- const { isActive, botKey }: { isActive: boolean, botKey: BotKey } = req.body;
-
- if (isActive) {
- // bot state set to active -> share workspace key with bot
- if (!botKey?.encryptedKey || !botKey?.nonce) {
- return res.status(400).send({
- message: "Failed to set bot state to active - missing bot key",
- });
- }
-
- await BotKey.findOneAndUpdate({
- workspace: req.bot.workspace,
- }, {
- encryptedKey: botKey.encryptedKey,
- nonce: botKey.nonce,
- sender: req.user._id,
- bot: req.bot._id,
- workspace: req.bot.workspace,
- }, {
- upsert: true,
- new: true,
- });
- } else {
- // case: bot state set to inactive -> delete bot's workspace key
- await BotKey.deleteOne({
- bot: req.bot._id,
- });
+ const {
+ body: { botKey, isActive },
+ params: { botId }
+ } = await validateRequest(reqValidator.SetBotActiveStateV1, req);
+
+ const bot = await Bot.findById(botId);
+ if (!bot) {
+ throw BadRequestError({ message: "Bot not found" });
+ }
+ const userId = req.user._id;
+
+ const { permission } = await getUserProjectPermissions(userId, bot.workspace.toString());
+ ForbiddenError.from(permission).throwUnlessCan(
+ ProjectPermissionActions.Edit,
+ ProjectPermissionSub.Integrations
+ );
+
+ if (isActive) {
+ // bot state set to active -> share workspace key with bot
+ if (!botKey?.encryptedKey || !botKey?.nonce) {
+ return res.status(400).send({
+ message: "Failed to set bot state to active - missing bot key"
+ });
}
- const bot = await Bot.findOneAndUpdate({
- _id: req.bot._id,
- }, {
- isActive,
- }, {
- new: true,
- });
-
- if (!bot) throw new Error("Failed to update bot active state");
-
- return res.status(200).send({
- bot,
+ await BotKey.findOneAndUpdate(
+ {
+ workspace: bot.workspace
+ },
+ {
+ encryptedKey: botKey.encryptedKey,
+ nonce: botKey.nonce,
+ sender: userId,
+ bot: bot._id,
+ workspace: bot.workspace
+ },
+ {
+ upsert: true,
+ new: true
+ }
+ );
+ } else {
+ // case: bot state set to inactive -> delete bot's workspace key
+ await BotKey.deleteOne({
+ bot: bot._id
});
+ }
+
+ const updatedBot = await Bot.findOneAndUpdate(
+ {
+ _id: bot._id
+ },
+ {
+ isActive
+ },
+ {
+ new: true
+ }
+ );
+
+ if (!updatedBot) throw new Error("Failed to update bot active state");
+
+ return res.status(200).send({
+ bot
+ });
};
diff --git a/backend/src/controllers/v1/index.ts b/backend/src/controllers/v1/index.ts
index 422aaa5ec..a9bde9971 100644
--- a/backend/src/controllers/v1/index.ts
+++ b/backend/src/controllers/v1/index.ts
@@ -15,7 +15,7 @@ import * as userController from "./userController";
import * as workspaceController from "./workspaceController";
import * as secretScanningController from "./secretScanningController";
import * as webhookController from "./webhookController";
-import * as secretImportController from "./secretImportController";
+import * as secretImpsController from "./secretImpsController";
export {
authController,
@@ -35,5 +35,5 @@ export {
workspaceController,
secretScanningController,
webhookController,
- secretImportController
+ secretImpsController
};
diff --git a/backend/src/controllers/v1/integrationAuthController.ts b/backend/src/controllers/v1/integrationAuthController.ts
index a32bedf72..a7390abaa 100644
--- a/backend/src/controllers/v1/integrationAuthController.ts
+++ b/backend/src/controllers/v1/integrationAuthController.ts
@@ -2,7 +2,7 @@ import { Request, Response } from "express";
import { Types } from "mongoose";
import { standardRequest } from "../../config/request";
import { getApps, getTeams, revokeAccess } from "../../integrations";
-import { Bot, IntegrationAuth } from "../../models";
+import { Bot, IntegrationAuth, Workspace } from "../../models";
import { EventType } from "../../ee/models";
import { IntegrationService } from "../../services";
import { EEAuditLogService } from "../../ee/services";
@@ -18,12 +18,25 @@ import {
getIntegrationOptions as getIntegrationOptionsFunc
} from "../../variables";
import { exchangeRefresh } from "../../integrations";
+import { validateRequest } from "../../helpers/validation";
+import * as reqValidator from "../../validation/integrationAuth";
+import {
+ ProjectPermissionActions,
+ ProjectPermissionSub,
+ getUserProjectPermissions
+} from "../../ee/services/ProjectRoleService";
+import { ForbiddenError } from "@casl/ability";
+import { getIntegrationAuthAccessHelper } from "../../helpers";
+import { ObjectId } from "mongodb";
/***
* Return integration authorization with id [integrationAuthId]
*/
export const getIntegrationAuth = async (req: Request, res: Response) => {
- const { integrationAuthId } = req.params;
+ const {
+ params: { integrationAuthId }
+ } = await validateRequest(reqValidator.GetIntegrationAuthV1, req);
+
const integrationAuth = await IntegrationAuth.findById(integrationAuthId);
if (!integrationAuth)
@@ -31,6 +44,15 @@ export const getIntegrationAuth = async (req: Request, res: Response) => {
message: "Failed to find integration authorization"
});
+ const { permission } = await getUserProjectPermissions(
+ req.user._id,
+ integrationAuth.workspace.toString()
+ );
+ ForbiddenError.from(permission).throwUnlessCan(
+ ProjectPermissionActions.Read,
+ ProjectPermissionSub.Integrations
+ );
+
return res.status(200).send({
integrationAuth
});
@@ -51,15 +73,19 @@ export const getIntegrationOptions = async (req: Request, res: Response) => {
* @returns
*/
export const oAuthExchange = async (req: Request, res: Response) => {
- const {
- workspaceId,
- code,
- integration,
- url
- } = req.body;
+ const {
+ body: { integration, workspaceId, code, url }
+ } = await validateRequest(reqValidator.OauthExchangeV1, req);
if (!INTEGRATION_SET.has(integration)) throw new Error("Failed to validate integration");
- const environments = req.membership.workspace?.environments || [];
+ const { permission } = await getUserProjectPermissions(req.user._id, workspaceId);
+ ForbiddenError.from(permission).throwUnlessCan(
+ ProjectPermissionActions.Create,
+ ProjectPermissionSub.Integrations
+ );
+
+ const workspace = await Workspace.findById(workspaceId);
+ const environments = workspace?.environments || [];
if (environments.length === 0) {
throw new Error("Failed to get environments");
}
@@ -99,25 +125,16 @@ export const oAuthExchange = async (req: Request, res: Response) => {
export const saveIntegrationToken = async (req: Request, res: Response) => {
// TODO: refactor
// TODO: check if access token is valid for each integration
-
let integrationAuth;
const {
- workspaceId,
- accessId,
- refreshToken,
- accessToken,
- url,
- namespace,
- integration
- }: {
- workspaceId: string;
- accessId: string | undefined;
- refreshToken: string | undefined;
- accessToken: string | undefined;
- url: string;
- namespace: string;
- integration: string;
- } = req.body;
+ body: { workspaceId, integration, url, accessId, namespace, accessToken, refreshToken }
+ } = await validateRequest(reqValidator.SaveIntegrationAccessTokenV1, req);
+
+ const { permission } = await getUserProjectPermissions(req.user._id, workspaceId);
+ ForbiddenError.from(permission).throwUnlessCan(
+ ProjectPermissionActions.Create,
+ ProjectPermissionSub.Integrations
+ );
const bot = await Bot.findOne({
workspace: new Types.ObjectId(workspaceId),
@@ -138,18 +155,20 @@ export const saveIntegrationToken = async (req: Request, res: Response) => {
namespace,
algorithm: ALGORITHM_AES_256_GCM,
keyEncoding: ENCODING_SCHEME_UTF8,
- ...(integration === INTEGRATION_GCP_SECRET_MANAGER ? {
- metadata: {
- authMethod: "serviceAccount"
- }
- } : {})
+ ...(integration === INTEGRATION_GCP_SECRET_MANAGER
+ ? {
+ metadata: {
+ authMethod: "serviceAccount"
+ }
+ }
+ : {})
},
{
new: true,
upsert: true
}
);
-
+
// encrypt and save integration access details
if (refreshToken) {
await exchangeRefresh({
@@ -169,7 +188,7 @@ export const saveIntegrationToken = async (req: Request, res: Response) => {
}
if (!integrationAuth) throw new Error("Failed to save integration access token");
-
+
await EEAuditLogService.createAuditLog(
req.authData,
{
@@ -195,13 +214,29 @@ export const saveIntegrationToken = async (req: Request, res: Response) => {
* @returns
*/
export const getIntegrationAuthApps = async (req: Request, res: Response) => {
- const teamId = req.query.teamId as string;
- const workspaceSlug = req.query.workspaceSlug as string;
+ const {
+ params: { integrationAuthId },
+ query: { teamId, workspaceSlug }
+ } = await validateRequest(reqValidator.GetIntegrationAuthAppsV1, req);
+
+ // TODO(akhilmhdh): remove class -> static function path and makes these into reusable independent functions
+ const { integrationAuth, accessToken, accessId } = await getIntegrationAuthAccessHelper({
+ integrationAuthId: new ObjectId(integrationAuthId)
+ });
+
+ const { permission } = await getUserProjectPermissions(
+ req.user._id,
+ integrationAuth.workspace.toString()
+ );
+ ForbiddenError.from(permission).throwUnlessCan(
+ ProjectPermissionActions.Read,
+ ProjectPermissionSub.Integrations
+ );
const apps = await getApps({
- integrationAuth: req.integrationAuth,
- accessToken: req.accessToken,
- accessId: req.accessId,
+ integrationAuth: integrationAuth,
+ accessToken: accessToken,
+ accessId: accessId,
...(teamId && { teamId }),
...(workspaceSlug && { workspaceSlug })
});
@@ -218,9 +253,27 @@ export const getIntegrationAuthApps = async (req: Request, res: Response) => {
* @returns
*/
export const getIntegrationAuthTeams = async (req: Request, res: Response) => {
+ const {
+ params: { integrationAuthId }
+ } = await validateRequest(reqValidator.GetIntegrationAuthTeamsV1, req);
+
+ // TODO(akhilmhdh): remove class -> static function path and makes these into reusable independent functions
+ const { integrationAuth, accessToken } = await getIntegrationAuthAccessHelper({
+ integrationAuthId: new ObjectId(integrationAuthId)
+ });
+
+ const { permission } = await getUserProjectPermissions(
+ req.user._id,
+ integrationAuth.workspace.toString()
+ );
+ ForbiddenError.from(permission).throwUnlessCan(
+ ProjectPermissionActions.Read,
+ ProjectPermissionSub.Integrations
+ );
+
const teams = await getTeams({
- integrationAuth: req.integrationAuth,
- accessToken: req.accessToken
+ integrationAuth: integrationAuth,
+ accessToken: accessToken
});
return res.status(200).send({
@@ -235,7 +288,24 @@ export const getIntegrationAuthTeams = async (req: Request, res: Response) => {
* @param res
*/
export const getIntegrationAuthVercelBranches = async (req: Request, res: Response) => {
- const appId = req.query.appId as string;
+ const {
+ params: { integrationAuthId },
+ query: { appId }
+ } = await validateRequest(reqValidator.GetIntegrationAuthVercelBranchesV1, req);
+
+ // TODO(akhilmhdh): remove class -> static function path and makes these into reusable independent functions
+ const { integrationAuth, accessToken } = await getIntegrationAuthAccessHelper({
+ integrationAuthId: new ObjectId(integrationAuthId)
+ });
+
+ const { permission } = await getUserProjectPermissions(
+ req.user._id,
+ integrationAuth.workspace.toString()
+ );
+ ForbiddenError.from(permission).throwUnlessCan(
+ ProjectPermissionActions.Read,
+ ProjectPermissionSub.Integrations
+ );
interface VercelBranch {
ref: string;
@@ -245,9 +315,9 @@ export const getIntegrationAuthVercelBranches = async (req: Request, res: Respon
const params = new URLSearchParams({
projectId: appId,
- ...(req.integrationAuth.teamId
+ ...(integrationAuth.teamId
? {
- teamId: req.integrationAuth.teamId
+ teamId: integrationAuth.teamId
}
: {})
});
@@ -260,7 +330,7 @@ export const getIntegrationAuthVercelBranches = async (req: Request, res: Respon
{
params,
headers: {
- Authorization: `Bearer ${req.accessToken}`,
+ Authorization: `Bearer ${accessToken}`,
"Accept-Encoding": "application/json"
}
}
@@ -281,7 +351,24 @@ export const getIntegrationAuthVercelBranches = async (req: Request, res: Respon
* @param res
*/
export const getIntegrationAuthRailwayEnvironments = async (req: Request, res: Response) => {
- const appId = req.query.appId as string;
+ const {
+ params: { integrationAuthId },
+ query: { appId }
+ } = await validateRequest(reqValidator.GetIntegrationAuthRailwayEnvironmentsV1, req);
+
+ // TODO(akhilmhdh): remove class -> static function path and makes these into reusable independent functions
+ const { integrationAuth, accessToken } = await getIntegrationAuthAccessHelper({
+ integrationAuthId: new ObjectId(integrationAuthId)
+ });
+
+ const { permission } = await getUserProjectPermissions(
+ req.user._id,
+ integrationAuth.workspace.toString()
+ );
+ ForbiddenError.from(permission).throwUnlessCan(
+ ProjectPermissionActions.Read,
+ ProjectPermissionSub.Integrations
+ );
interface RailwayEnvironment {
node: {
@@ -331,7 +418,7 @@ export const getIntegrationAuthRailwayEnvironments = async (req: Request, res: R
},
{
headers: {
- Authorization: `Bearer ${req.accessToken}`,
+ Authorization: `Bearer ${accessToken}`,
"Content-Type": "application/json"
}
}
@@ -357,7 +444,24 @@ export const getIntegrationAuthRailwayEnvironments = async (req: Request, res: R
* @param res
*/
export const getIntegrationAuthRailwayServices = async (req: Request, res: Response) => {
- const appId = req.query.appId as string;
+ const {
+ params: { integrationAuthId },
+ query: { appId }
+ } = await validateRequest(reqValidator.GetIntegrationAuthRailwayServicesV1, req);
+
+ // TODO(akhilmhdh): remove class -> static function path and makes these into reusable independent functions
+ const { integrationAuth, accessToken } = await getIntegrationAuthAccessHelper({
+ integrationAuthId: new ObjectId(integrationAuthId)
+ });
+
+ const { permission } = await getUserProjectPermissions(
+ req.user._id,
+ integrationAuth.workspace.toString()
+ );
+ ForbiddenError.from(permission).throwUnlessCan(
+ ProjectPermissionActions.Read,
+ ProjectPermissionSub.Integrations
+ );
interface RailwayService {
node: {
@@ -422,7 +526,7 @@ export const getIntegrationAuthRailwayServices = async (req: Request, res: Respo
},
{
headers: {
- Authorization: `Bearer ${req.accessToken}`,
+ Authorization: `Bearer ${accessToken}`,
"Content-Type": "application/json"
}
}
@@ -446,7 +550,6 @@ export const getIntegrationAuthRailwayServices = async (req: Request, res: Respo
* @returns
*/
export const getIntegrationAuthBitBucketWorkspaces = async (req: Request, res: Response) => {
-
interface WorkspaceResponse {
size: number;
page: number;
@@ -466,31 +569,46 @@ export const getIntegrationAuthBitBucketWorkspaces = async (req: Request, res: R
updated_on: string;
}
+ const {
+ params: { integrationAuthId }
+ } = await validateRequest(reqValidator.GetIntegrationAuthBitbucketWorkspacesV1, req);
+
+ // TODO(akhilmhdh): remove class -> static function path and makes these into reusable independent functions
+ const { integrationAuth, accessToken } = await getIntegrationAuthAccessHelper({
+ integrationAuthId: new ObjectId(integrationAuthId)
+ });
+
+ const { permission } = await getUserProjectPermissions(
+ req.user._id,
+ integrationAuth.workspace.toString()
+ );
+ ForbiddenError.from(permission).throwUnlessCan(
+ ProjectPermissionActions.Read,
+ ProjectPermissionSub.Integrations
+ );
+
const workspaces: Workspace[] = [];
let hasNextPage = true;
- let workspaceUrl = `${INTEGRATION_BITBUCKET_API_URL}/2.0/workspaces`
+ let workspaceUrl = `${INTEGRATION_BITBUCKET_API_URL}/2.0/workspaces`;
while (hasNextPage) {
- const { data }: { data: WorkspaceResponse } = await standardRequest.get(
- workspaceUrl,
- {
- headers: {
- Authorization: `Bearer ${req.accessToken}`,
- "Accept-Encoding": "application/json"
- }
+ const { data }: { data: WorkspaceResponse } = await standardRequest.get(workspaceUrl, {
+ headers: {
+ Authorization: `Bearer ${accessToken}`,
+ "Accept-Encoding": "application/json"
}
- );
-
+ });
+
if (data?.values.length > 0) {
data.values.forEach((workspace) => {
- workspaces.push(workspace)
- })
+ workspaces.push(workspace);
+ });
}
if (data.next) {
- workspaceUrl = data.next
+ workspaceUrl = data.next;
} else {
- hasNextPage = false
+ hasNextPage = false;
}
}
@@ -501,13 +619,30 @@ export const getIntegrationAuthBitBucketWorkspaces = async (req: Request, res: R
/**
* Return list of secret groups for Northflank project with id [appId]
- * @param req
- * @param res
- * @returns
+ * @param req
+ * @param res
+ * @returns
*/
export const getIntegrationAuthNorthflankSecretGroups = async (req: Request, res: Response) => {
- const appId = req.query.appId as string;
-
+ const {
+ params: { integrationAuthId },
+ query: { appId }
+ } = await validateRequest(reqValidator.GetIntegrationAuthNorthflankSecretGroupsV1, req);
+
+ // TODO(akhilmhdh): remove class -> static function path and makes these into reusable independent functions
+ const { integrationAuth, accessToken } = await getIntegrationAuthAccessHelper({
+ integrationAuthId: new ObjectId(integrationAuthId)
+ });
+
+ const { permission } = await getUserProjectPermissions(
+ req.user._id,
+ integrationAuth.workspace.toString()
+ );
+ ForbiddenError.from(permission).throwUnlessCan(
+ ProjectPermissionActions.Read,
+ ProjectPermissionSub.Integrations
+ );
+
interface NorthflankSecretGroup {
id: string;
name: string;
@@ -515,43 +650,41 @@ export const getIntegrationAuthNorthflankSecretGroups = async (req: Request, res
priority: number;
projectId: string;
}
-
+
interface SecretGroup {
name: string;
groupId: string;
}
-
+
const secretGroups: SecretGroup[] = [];
- if (appId && appId !== "") {
+ if (appId && appId !== "") {
let page = 1;
const perPage = 10;
let hasMorePages = true;
-
- while(hasMorePages) {
+
+ while (hasMorePages) {
const params = new URLSearchParams({
page: String(page),
per_page: String(perPage),
- filter: "all",
+ filter: "all"
});
const {
data: {
- data: {
- secrets
- }
+ data: { secrets }
}
- } = await standardRequest.get<{ data: { secrets: NorthflankSecretGroup[] }}>(
+ } = await standardRequest.get<{ data: { secrets: NorthflankSecretGroup[] } }>(
`${INTEGRATION_NORTHFLANK_API_URL}/v1/projects/${appId}/secrets`,
{
params,
headers: {
- Authorization: `Bearer ${req.accessToken}`,
- "Accept-Encoding": "application/json",
- },
+ Authorization: `Bearer ${accessToken}`,
+ "Accept-Encoding": "application/json"
+ }
}
);
-
+
secrets.forEach((a: any) => {
secretGroups.push({
name: a.name,
@@ -566,21 +699,37 @@ export const getIntegrationAuthNorthflankSecretGroups = async (req: Request, res
page++;
}
}
-
+
return res.status(200).send({
secretGroups
});
-}
+};
/**
* Return list of build configs for TeamCity project with id [appId]
- * @param req
- * @param res
- * @returns
+ * @param req
+ * @param res
+ * @returns
*/
export const getIntegrationAuthTeamCityBuildConfigs = async (req: Request, res: Response) => {
- const appId = req.query.appId as string;
-
+ const {
+ params: { integrationAuthId, appId }
+ } = await validateRequest(reqValidator.GetIntegrationAuthTeamCityBuildConfigsV1, req);
+
+ // TODO(akhilmhdh): remove class -> static function path and makes these into reusable independent functions
+ const { integrationAuth } = await getIntegrationAuthAccessHelper({
+ integrationAuthId: new ObjectId(integrationAuthId)
+ });
+
+ const { permission } = await getUserProjectPermissions(
+ req.user._id,
+ integrationAuth.workspace.toString()
+ );
+ ForbiddenError.from(permission).throwUnlessCan(
+ ProjectPermissionActions.Read,
+ ProjectPermissionSub.Integrations
+ );
+
interface TeamCityBuildConfig {
id: string;
name: string;
@@ -589,27 +738,29 @@ export const getIntegrationAuthTeamCityBuildConfigs = async (req: Request, res:
href: string;
webUrl: string;
}
-
+
interface GetTeamCityBuildConfigsRes {
count: number;
href: string;
buildType: TeamCityBuildConfig[];
}
-
if (appId && appId !== "") {
- const { data: { buildType } } = (
- await standardRequest.get