Refactor infisical-node to config file for birds eye view of envars

backend/src/helpers/auth.ts

@@ -1,5 +1,4 @@
 import * as Sentry from '@sentry/node';
-import infisical from 'infisical-node';
 import jwt from 'jsonwebtoken';
 import bcrypt from 'bcrypt';
 import {
@@ -15,6 +14,12 @@ import {
 	UnauthorizedRequestError,
 	BadRequestError
 } from '../utils/errors';
+import {
+	getJwtAuthLifetime,
+	getJwtAuthSecret,
+	getJwtRefreshLifetime,
+	getJwtRefreshSecret
+} from '../config';
 
 /**
  * 
@@ -88,7 +93,7 @@ const getAuthUserPayload = async ({
 	let user;
 	try {
 		const decodedToken = <jwt.UserIDJwtPayload>(
-			jwt.verify(authTokenValue, infisical.get('JWT_AUTH_SECRET')!)
+			jwt.verify(authTokenValue, getJwtAuthSecret())
 		);
 
 		user = await User.findOne({
@@ -219,16 +224,16 @@ const issueAuthTokens = async ({ userId }: { userId: string }) => {
 			payload: {
 				userId
 			},
-			expiresIn: infisical.get('JWT_AUTH_LIFETIME')!,
-			secret: infisical.get('JWT_AUTH_SECRET')!
+			expiresIn: getJwtAuthLifetime(),
+			secret: getJwtAuthSecret()
 		});
 
 		refreshToken = createToken({
 			payload: {
 				userId
 			},
-			expiresIn: infisical.get('JWT_REFRESH_LIFETIME')!,
-			secret: infisical.get('JWT_REFRESH_SECRET')!
+			expiresIn: getJwtRefreshLifetime(),
+			secret: getJwtRefreshSecret()
 		});
 	} catch (err) {
 		Sentry.setUser(null);

backend/src/helpers/bot.ts

@@ -1,5 +1,4 @@
 import * as Sentry from '@sentry/node';
-import infisical from 'infisical-node';
 import {
     Bot,
     BotKey,
@@ -14,6 +13,7 @@ import {
     decryptAsymmetric
 } from '../utils/crypto';
 import { SECRET_SHARED } from '../variables';
+import { getEncryptionKey } from '../config';
 
 /**
  * Create an inactive bot with name [name] for workspace with id [workspaceId]
@@ -33,7 +33,7 @@ const createBot = async ({
         const { publicKey, privateKey } = generateKeyPair();
         const { ciphertext, iv, tag } = encryptSymmetric({
             plaintext: privateKey,
-            key: infisical.get('ENCRYPTION_KEY')!
+            key: getEncryptionKey()
         });
 
         bot = await new Bot({
@@ -130,7 +130,7 @@ const getKey = async ({ workspaceId }: { workspaceId: string }) => {
             ciphertext: bot.encryptedPrivateKey,
             iv: bot.iv,
             tag: bot.tag,
-            key: infisical.get('ENCRYPTION_KEY')!
+            key: getEncryptionKey()
         });
         
         key = decryptAsymmetric({

backend/src/helpers/nodemailer.ts

@@ -1,9 +1,9 @@
 import * as Sentry from '@sentry/node';
-import infisical from 'infisical-node';
 import fs from 'fs';
 import path from 'path';
 import handlebars from 'handlebars';
 import nodemailer from 'nodemailer';
+import { getSmtpFromName, getSmtpFromAddress } from '../config';
 
 let smtpTransporter: nodemailer.Transporter;
 
@@ -34,7 +34,7 @@ const sendMail = async ({
     const htmlToSend = temp(substitutions);
 
     await smtpTransporter.sendMail({
-      from: `"${infisical.get('SMTP_FROM_NAME')!}" <${infisical.get('SMTP_FROM_ADDRESS')!}>`,
+      from: `"${getSmtpFromName()}" <${getSmtpFromAddress()}>`,
       to: recipients.join(', '),
       subject: subjectLine,
       html: htmlToSend

backend/src/helpers/organization.ts

@@ -1,9 +1,14 @@
-import infisical from 'infisical-node';
 import * as Sentry from '@sentry/node';
 import Stripe from 'stripe';
 import { Types } from 'mongoose';
 import { ACCEPTED } from '../variables';
 import { Organization, MembershipOrg } from '../models';
+import { 
+	getStripeSecretKey,
+	getStripeProductPro,
+	getStripeProductTeam,
+	getStripeProductStarter
+} from '../config';
 
 /**
  * Create an organization with name [name]
@@ -22,11 +27,11 @@ const createOrganization = async ({
 	let organization;
 	try {
 		// register stripe account
-		const stripe = new Stripe(infisical.get('STRIPE_SECRET_KEY')!, {
+		const stripe = new Stripe(getStripeSecretKey(), {
 			apiVersion: '2022-08-01'
 		});
 
-		if (infisical.get('STRIPE_SECRET_KEY')) {
+		if (getStripeSecretKey()) {
 			const customer = await stripe.customers.create({
 				email,
 				description: name
@@ -76,14 +81,14 @@ const initSubscriptionOrg = async ({
 		if (organization) {
 			if (organization.customerId) {
 				// initialize starter subscription with quantity of 0
-				const stripe = new Stripe(infisical.get('STRIPE_SECRET_KEY')!, {
+				const stripe = new Stripe(getStripeSecretKey(), {
 					apiVersion: '2022-08-01'
 				});
 
 				const productToPriceMap = {
-					starter: infisical.get('STRIPE_PRODUCT_STARTER')!,
-					team: infisical.get('STRIPE_PRODUCT_TEAM')!,
-					pro: infisical.get('STRIPE_PRODUCT_PRO')!
+					starter: getStripeProductStarter(),
+					team: getStripeProductTeam(),
+					pro: getStripeProductPro()
 				};
 
 				stripeSubscription = await stripe.subscriptions.create({
@@ -138,7 +143,7 @@ const updateSubscriptionOrgQuantity = async ({
 				status: ACCEPTED
 			});
 
-			const stripe = new Stripe(infisical.get('STRIPE_SECRET_KEY')!, {
+			const stripe = new Stripe(getStripeSecretKey(), {
 				apiVersion: '2022-08-01'
 			});
 
@@ -170,4 +175,4 @@ export {
 	createOrganization,
 	initSubscriptionOrg,
 	updateSubscriptionOrgQuantity
-};
+};

backend/src/helpers/token.ts

@@ -1,5 +1,4 @@
 import * as Sentry from '@sentry/node';
-import infisical from 'infisical-node';
 import { Types } from 'mongoose';
 import { TokenData } from '../models';
 import crypto from 'crypto';
@@ -11,6 +10,7 @@ import {
     TOKEN_EMAIL_PASSWORD_RESET
 } from '../variables';
 import { UnauthorizedRequestError } from '../utils/errors';
+import { getSaltRounds } from '../config';
 
 /**
  * Create and store a token in the database for purpose [type]
@@ -84,7 +84,7 @@ const createTokenHelper = async ({
         const query: TokenDataQuery = { type };
         const update: TokenDataUpdate = {
             type,
-            tokenHash: await bcrypt.hash(token, parseInt(infisical.get('SALT_ROUNDS')!) || 10),
+            tokenHash: await bcrypt.hash(token, getSaltRounds()),
             expiresAt
         }