mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-10-06 07:26:45 +00:00
Merge pull request #1239 from Infisical/workspace-key-log
add workspace id and receiver to getWorkspaceKey error
This commit is contained in:
@@ -182,11 +182,11 @@ export const getWorkspaceKey = async (req: Request, res: Response) => {
|
|||||||
"apiKeyAuth": []
|
"apiKeyAuth": []
|
||||||
}]
|
}]
|
||||||
|
|
||||||
#swagger.parameters['workspaceId'] = {
|
#swagger.parameters['workspaceId'] = {
|
||||||
"description": "ID of project",
|
"description": "ID of project",
|
||||||
"required": true,
|
"required": true,
|
||||||
"type": "string"
|
"type": "string"
|
||||||
}
|
}
|
||||||
|
|
||||||
#swagger.responses[200] = {
|
#swagger.responses[200] = {
|
||||||
content: {
|
content: {
|
||||||
@@ -211,7 +211,7 @@ export const getWorkspaceKey = async (req: Request, res: Response) => {
|
|||||||
receiver: req.user._id
|
receiver: req.user._id
|
||||||
}).populate("sender", "+publicKey");
|
}).populate("sender", "+publicKey");
|
||||||
|
|
||||||
if (!key) throw new Error("Failed to find workspace key");
|
if (!key) throw new Error(`getWorkspaceKey: Failed to find workspace key [workspaceId=${workspaceId}] [receiver=${req.user._id}]`);
|
||||||
|
|
||||||
await EEAuditLogService.createAuditLog(
|
await EEAuditLogService.createAuditLog(
|
||||||
req.authData,
|
req.authData,
|
||||||
@@ -256,26 +256,26 @@ export const getWorkspaceMemberships = async (req: Request, res: Response) => {
|
|||||||
"apiKeyAuth": []
|
"apiKeyAuth": []
|
||||||
}]
|
}]
|
||||||
|
|
||||||
#swagger.parameters['workspaceId'] = {
|
#swagger.parameters['workspaceId'] = {
|
||||||
"description": "ID of project",
|
"description": "ID of project",
|
||||||
"required": true,
|
"required": true,
|
||||||
"type": "string"
|
"type": "string"
|
||||||
}
|
}
|
||||||
|
|
||||||
#swagger.responses[200] = {
|
#swagger.responses[200] = {
|
||||||
content: {
|
content: {
|
||||||
"application/json": {
|
"application/json": {
|
||||||
"schema": {
|
"schema": {
|
||||||
"type": "object",
|
"type": "object",
|
||||||
"properties": {
|
"properties": {
|
||||||
"memberships": {
|
"memberships": {
|
||||||
"type": "array",
|
"type": "array",
|
||||||
"items": {
|
"items": {
|
||||||
$ref: "#/components/schemas/Membership"
|
$ref: "#/components/schemas/Membership"
|
||||||
},
|
},
|
||||||
"description": "Memberships of project"
|
"description": "Memberships of project"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@@ -319,19 +319,19 @@ export const updateWorkspaceMembership = async (req: Request, res: Response) =>
|
|||||||
"apiKeyAuth": []
|
"apiKeyAuth": []
|
||||||
}]
|
}]
|
||||||
|
|
||||||
#swagger.parameters['workspaceId'] = {
|
#swagger.parameters['workspaceId'] = {
|
||||||
"description": "ID of project",
|
"description": "ID of project",
|
||||||
"required": true,
|
"required": true,
|
||||||
"type": "string"
|
"type": "string"
|
||||||
}
|
}
|
||||||
|
|
||||||
#swagger.parameters['membershipId'] = {
|
#swagger.parameters['membershipId'] = {
|
||||||
"description": "ID of project membership to update",
|
"description": "ID of project membership to update",
|
||||||
"required": true,
|
"required": true,
|
||||||
"type": "string"
|
"type": "string"
|
||||||
}
|
}
|
||||||
|
|
||||||
#swagger.requestBody = {
|
#swagger.requestBody = {
|
||||||
"required": true,
|
"required": true,
|
||||||
"content": {
|
"content": {
|
||||||
"application/json": {
|
"application/json": {
|
||||||
@@ -352,13 +352,13 @@ export const updateWorkspaceMembership = async (req: Request, res: Response) =>
|
|||||||
content: {
|
content: {
|
||||||
"application/json": {
|
"application/json": {
|
||||||
"schema": {
|
"schema": {
|
||||||
"type": "object",
|
"type": "object",
|
||||||
"properties": {
|
"properties": {
|
||||||
"membership": {
|
"membership": {
|
||||||
$ref: "#/components/schemas/Membership",
|
$ref: "#/components/schemas/Membership",
|
||||||
"description": "Updated membership"
|
"description": "Updated membership"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@@ -409,29 +409,29 @@ export const deleteWorkspaceMembership = async (req: Request, res: Response) =>
|
|||||||
"apiKeyAuth": []
|
"apiKeyAuth": []
|
||||||
}]
|
}]
|
||||||
|
|
||||||
#swagger.parameters['workspaceId'] = {
|
#swagger.parameters['workspaceId'] = {
|
||||||
"description": "ID of project",
|
"description": "ID of project",
|
||||||
"required": true,
|
"required": true,
|
||||||
"type": "string"
|
"type": "string"
|
||||||
}
|
}
|
||||||
|
|
||||||
#swagger.parameters['membershipId'] = {
|
#swagger.parameters['membershipId'] = {
|
||||||
"description": "ID of project membership to delete",
|
"description": "ID of project membership to delete",
|
||||||
"required": true,
|
"required": true,
|
||||||
"type": "string"
|
"type": "string"
|
||||||
}
|
}
|
||||||
|
|
||||||
#swagger.responses[200] = {
|
#swagger.responses[200] = {
|
||||||
content: {
|
content: {
|
||||||
"application/json": {
|
"application/json": {
|
||||||
"schema": {
|
"schema": {
|
||||||
"type": "object",
|
"type": "object",
|
||||||
"properties": {
|
"properties": {
|
||||||
"membership": {
|
"membership": {
|
||||||
$ref: "#/components/schemas/Membership",
|
$ref: "#/components/schemas/Membership",
|
||||||
"description": "Deleted membership"
|
"description": "Deleted membership"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@@ -511,7 +511,7 @@ export const toggleAutoCapitalization = async (req: Request, res: Response) => {
|
|||||||
* @param req
|
* @param req
|
||||||
* @param res
|
* @param res
|
||||||
*/
|
*/
|
||||||
export const addIdentityToWorkspace = async (req: Request, res: Response) => {
|
export const addIdentityToWorkspace = async (req: Request, res: Response) => {
|
||||||
const {
|
const {
|
||||||
params: { workspaceId, identityId },
|
params: { workspaceId, identityId },
|
||||||
body: {
|
body: {
|
||||||
@@ -559,7 +559,7 @@ export const toggleAutoCapitalization = async (req: Request, res: Response) => {
|
|||||||
const isAsPrivilegedAsIntendedRole = isAtLeastAsPrivilegedWorkspace(permission, rolePermission);
|
const isAsPrivilegedAsIntendedRole = isAtLeastAsPrivilegedWorkspace(permission, rolePermission);
|
||||||
|
|
||||||
if (!isAsPrivilegedAsIntendedRole) throw ForbiddenRequestError({
|
if (!isAsPrivilegedAsIntendedRole) throw ForbiddenRequestError({
|
||||||
message: "Failed to add identity to project with more privileged role"
|
message: "Failed to add identity to project with more privileged role"
|
||||||
});
|
});
|
||||||
|
|
||||||
let customRole;
|
let customRole;
|
||||||
@@ -594,7 +594,7 @@ export const toggleAutoCapitalization = async (req: Request, res: Response) => {
|
|||||||
* @param req
|
* @param req
|
||||||
* @param res
|
* @param res
|
||||||
*/
|
*/
|
||||||
export const updateIdentityWorkspaceRole = async (req: Request, res: Response) => {
|
export const updateIdentityWorkspaceRole = async (req: Request, res: Response) => {
|
||||||
const {
|
const {
|
||||||
params: { workspaceId, identityId },
|
params: { workspaceId, identityId },
|
||||||
body: {
|
body: {
|
||||||
@@ -632,14 +632,14 @@ export const toggleAutoCapitalization = async (req: Request, res: Response) => {
|
|||||||
);
|
);
|
||||||
const isAsPrivilegedAsIdentity = isAtLeastAsPrivilegedWorkspace(permission, identityRolePermission);
|
const isAsPrivilegedAsIdentity = isAtLeastAsPrivilegedWorkspace(permission, identityRolePermission);
|
||||||
if (!isAsPrivilegedAsIdentity) throw ForbiddenRequestError({
|
if (!isAsPrivilegedAsIdentity) throw ForbiddenRequestError({
|
||||||
message: "Failed to update role of more privileged identity"
|
message: "Failed to update role of more privileged identity"
|
||||||
});
|
});
|
||||||
|
|
||||||
const rolePermission = await getWorkspaceRolePermissions(role, workspaceId);
|
const rolePermission = await getWorkspaceRolePermissions(role, workspaceId);
|
||||||
const isAsPrivilegedAsIntendedRole = isAtLeastAsPrivilegedWorkspace(permission, rolePermission);
|
const isAsPrivilegedAsIntendedRole = isAtLeastAsPrivilegedWorkspace(permission, rolePermission);
|
||||||
|
|
||||||
if (!isAsPrivilegedAsIntendedRole) throw ForbiddenRequestError({
|
if (!isAsPrivilegedAsIntendedRole) throw ForbiddenRequestError({
|
||||||
message: "Failed to update identity to a more privileged role"
|
message: "Failed to update identity to a more privileged role"
|
||||||
});
|
});
|
||||||
|
|
||||||
let customRole;
|
let customRole;
|
||||||
@@ -681,7 +681,7 @@ export const toggleAutoCapitalization = async (req: Request, res: Response) => {
|
|||||||
* @param req
|
* @param req
|
||||||
* @param res
|
* @param res
|
||||||
*/
|
*/
|
||||||
export const deleteIdentityFromWorkspace = async (req: Request, res: Response) => {
|
export const deleteIdentityFromWorkspace = async (req: Request, res: Response) => {
|
||||||
const {
|
const {
|
||||||
params: { workspaceId, identityId }
|
params: { workspaceId, identityId }
|
||||||
} = await validateRequest(reqValidator.DeleteIdentityFromWorkspaceV2, req);
|
} = await validateRequest(reqValidator.DeleteIdentityFromWorkspaceV2, req);
|
||||||
@@ -716,7 +716,7 @@ export const toggleAutoCapitalization = async (req: Request, res: Response) => {
|
|||||||
);
|
);
|
||||||
const isAsPrivilegedAsIdentity = isAtLeastAsPrivilegedWorkspace(permission, identityRolePermission);
|
const isAsPrivilegedAsIdentity = isAtLeastAsPrivilegedWorkspace(permission, identityRolePermission);
|
||||||
if (!isAsPrivilegedAsIdentity) throw ForbiddenRequestError({
|
if (!isAsPrivilegedAsIdentity) throw ForbiddenRequestError({
|
||||||
message: "Failed to remove more privileged identity from project"
|
message: "Failed to remove more privileged identity from project"
|
||||||
});
|
});
|
||||||
|
|
||||||
await IdentityMembership.findByIdAndDelete(identityMembership._id);
|
await IdentityMembership.findByIdAndDelete(identityMembership._id);
|
||||||
@@ -732,7 +732,7 @@ export const toggleAutoCapitalization = async (req: Request, res: Response) => {
|
|||||||
* @param res
|
* @param res
|
||||||
* @returns
|
* @returns
|
||||||
*/
|
*/
|
||||||
export const getWorkspaceIdentityMemberships = async (req: Request, res: Response) => {
|
export const getWorkspaceIdentityMemberships = async (req: Request, res: Response) => {
|
||||||
const {
|
const {
|
||||||
params: { workspaceId }
|
params: { workspaceId }
|
||||||
} = await validateRequest(reqValidator.GetWorkspaceIdentityMembersV2, req);
|
} = await validateRequest(reqValidator.GetWorkspaceIdentityMembersV2, req);
|
||||||
|
|||||||
Reference in New Issue
Block a user