feat(agent): added agent template support to pull dynamic secret

backend/src/server/routes/v1/dynamic-secret-lease-router.ts

@@ -34,20 +34,21 @@ export const registerDynamicSecretLeaseRouter = async (server: FastifyZodProvide
       response: {
         200: z.object({
           lease: DynamicSecretLeasesSchema,
+          dynamicSecret: SanitizedDynamicSecretSchema,
           data: z.unknown()
         })
       }
     },
     onRequest: verifyAuth([AuthMode.JWT, AuthMode.IDENTITY_ACCESS_TOKEN]),
     handler: async (req) => {
-      const { data, lease } = await server.services.dynamicSecretLease.create({
+      const { data, lease, dynamicSecret } = await server.services.dynamicSecretLease.create({
         actor: req.permission.type,
         actorId: req.permission.id,
         actorAuthMethod: req.permission.authMethod,
         actorOrgId: req.permission.orgId,
         ...req.body
       });
-      return { lease, data };
+      return { lease, data, dynamicSecret };
     }
   });
 

backend/src/services/dynamic-secret-lease/dynamic-secret-lease-dal.ts

@@ -13,7 +13,7 @@ export const dynamicSecretLeaseDALFactory = (db: TDbClient) => {
   const findById = async (id: string, tx?: Knex) => {
     try {
       const doc = await (tx || db)(TableName.DynamicSecretLease)
-        .where({ id })
+        .where({ [`${TableName.DynamicSecretLease}.id` as "id"]: id })
         .first()
         .join(
           TableName.DynamicSecret,

backend/src/services/dynamic-secret-lease/dynamic-secret-lease-queue.ts

@@ -31,6 +31,10 @@ export const dynamicSecretLeaseQueueServiceFactory = ({
       { dynamicSecretCfgId },
       {
         jobId: dynamicSecretCfgId,
+        backoff: {
+          type: "exponential",
+          delay: 3000
+        },
         removeOnFail: {
           count: 3
         },
@@ -46,6 +50,10 @@ export const dynamicSecretLeaseQueueServiceFactory = ({
       { leaseId },
       {
         jobId: leaseId,
+        backoff: {
+          type: "exponential",
+          delay: 3000
+        },
         delay: expiry,
         removeOnFail: {
           count: 3
@@ -64,12 +72,11 @@ export const dynamicSecretLeaseQueueServiceFactory = ({
       if (job.name === QueueJobs.DynamicSecretRevocation) {
         const { leaseId } = job.data as { leaseId: string };
         logger.info("Dynamic secret lease revocation started: ", leaseId, job.id);
+
         const dynamicSecretLease = await dynamicSecretLeaseDAL.findById(leaseId);
         if (!dynamicSecretLease) throw new DisableRotationErrors({ message: "Dynamic secret lease not found" });
 
-        const dynamicSecretCfg = await dynamicSecretDAL.findById(dynamicSecretLease.dynamicSecretId);
-        if (!dynamicSecretCfg) throw new DisableRotationErrors({ message: "Dynamic secret not found" });
-
+        const dynamicSecretCfg = dynamicSecretLease.dynamicSecret;
         const selectedProvider = dynamicSecretProviders[dynamicSecretCfg.type as DynamicSecretProviders];
         const decryptedStoredInput = JSON.parse(
           infisicalSymmetricDecrypt({

backend/src/services/dynamic-secret-lease/dynamic-secret-lease-service.ts

@@ -101,7 +101,7 @@ export const dynamicSecretLeaseServiceFactory = ({
       externalEntityId: entityId
     });
     await dynamicSecretQueueService.setLeaseRevocation(dynamicSecretLease.id, Number(expireAt) - Number(new Date()));
-    return { lease: dynamicSecretLease, data };
+    return { lease: dynamicSecretLease, dynamicSecret: dynamicSecretCfg, data };
   };
 
   const renewLease = async ({

backend/src/services/dynamic-secret/providers/sql-database.ts

@@ -14,7 +14,7 @@ const EXTERNAL_REQUEST_TIMEOUT = 10 * 1000;
 
 const generatePassword = (size?: number) => {
   const charset = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-_.~!*'$#";
-  return customAlphabet(charset, 20)(size);
+  return customAlphabet(charset, 32)(size);
 };
 
 export const SqlDatabaseProvider = (): TDynamicProviderFns => {
@@ -50,7 +50,7 @@ export const SqlDatabaseProvider = (): TDynamicProviderFns => {
     const providerInputs = await validateProviderInputs(inputs);
     const db = await getClient(providerInputs);
 
-    const username = alphaNumericNanoId(16);
+    const username = alphaNumericNanoId(21);
     const password = generatePassword();
     const expiration = new Date(expireAt).toISOString();