Add frontend migration support for existing project to be blind-indexed

frontend/src/views/Settings/ProjectSettingsPage/ProjectSettingsPage.tsx

@@ -9,8 +9,8 @@ import NavHeader from '@app/components/navigation/NavHeader';
 // TODO(akhilmhdh):Refactor this into a better utility module package
 import {
   decryptAssymmetric,
-  encryptSymmetric
-} from '@app/components/utilities/cryptography/crypto';
+  decryptSymmetric,
+  encryptSymmetric} from '@app/components/utilities/cryptography/crypto';
 import { Button, FormControl, Input } from '@app/components/v2';
 import { plans } from '@app/const';
 import { useSubscription, useWorkspace } from '@app/context';
@@ -25,11 +25,13 @@ import {
   useDeleteWsTag,
   useGetUserWsKey,
   useGetUserWsServiceTokens,
+  useGetWorkspaceIndexStatus,
+  useGetWorkspaceSecrets,
   useGetWsTags,
+  useNameWorkspaceSecrets,
   useRenameWorkspace,
   useToggleAutoCapitalization,
-  useUpdateWsEnvironment
-} from '@app/hooks/api';
+  useUpdateWsEnvironment} from '@app/hooks/api';
 
 import { AutoCapitalizationSection } from './components/AutoCapitalizationSection/AutoCapitalizationSection';
 import { SecretTagsSection } from './components/SecretTagsSection';
@@ -39,9 +41,10 @@ import {
   CreateUpdateEnvFormData,
   CreateWsTag,
   EnvironmentSection,
-  ProjectEncryptionModeSection,
+  ProjectIndexSecretsSection,
   ProjectNameChangeSection,
-  ServiceTokenSection} from './components';
+  ServiceTokenSection
+} from './components';
 
 export const ProjectSettingsPage = () => {
   const { t } = useTranslation();
@@ -55,6 +58,7 @@ export const ProjectSettingsPage = () => {
   const [isDeleting, setIsDeleting] = useToggle();
 
   const renameWorkspace = useRenameWorkspace();
+  const nameWorkspaceSecrets = useNameWorkspaceSecrets();
   const toggleAutoCapitalization = useToggleAutoCapitalization();
 
   const deleteWorkspace = useDeleteWorkspace();
@@ -63,11 +67,16 @@ export const ProjectSettingsPage = () => {
   const updateWsEnv = useUpdateWsEnvironment();
   const deleteWsEnv = useDeleteWsEnvironment();
 
+  const { data: isBlindIndexed, isLoading: isBlindIndexedLoading } = useGetWorkspaceIndexStatus(workspaceID);
+
   // service token
   const { data: serviceTokens, isLoading: isServiceTokenLoading } = useGetUserWsServiceTokens({
     workspaceID: currentWorkspace?._id || ''
   });
+
   const { data: latestFileKey } = useGetUserWsKey(workspaceID);
+  const { data: encryptedSecrets } = useGetWorkspaceSecrets(workspaceID);
+
   const createServiceToken = useCreateServiceToken();
   const deleteServiceToken = useDeleteServiceToken();
 
@@ -207,14 +216,15 @@ export const ProjectSettingsPage = () => {
     // type guard
     if (!latestFileKey) return '';
     try {
-      // crypo calculation to generate the key
       const key = decryptAssymmetric({
         ciphertext: latestFileKey.encryptedKey,
         nonce: latestFileKey.nonce,
         publicKey: latestFileKey.sender.publicKey,
         privateKey: localStorage.getItem('PRIVATE_KEY') as string
       });
+
       const randomBytes = crypto.randomBytes(16).toString('hex');
+
       const { ciphertext, iv, tag } = encryptSymmetric({
         plaintext: key,
         key: randomBytes
@@ -303,6 +313,38 @@ export const ProjectSettingsPage = () => {
     }
   };
 
+  const onEnableBlindIndices = async () => {
+    if (!currentWorkspace?._id) return;
+    if (!encryptedSecrets) return;
+    if (!latestFileKey) return;
+
+    const key = decryptAssymmetric({
+      ciphertext: latestFileKey.encryptedKey,
+      nonce: latestFileKey.nonce,
+      publicKey: latestFileKey.sender.publicKey,
+      privateKey: localStorage.getItem('PRIVATE_KEY') as string
+    });
+    
+    const secretsToUpdate = encryptedSecrets.map((encryptedSecret) => {
+      const secretName = decryptSymmetric({
+        ciphertext: encryptedSecret.secretKeyCiphertext,
+        iv: encryptedSecret.secretKeyIV,
+        tag: encryptedSecret.secretKeyTag,
+        key
+      });
+      
+      return ({
+        secretName,
+        _id: encryptedSecret._id
+      });
+    });
+
+    await nameWorkspaceSecrets.mutateAsync({
+      workspaceId: currentWorkspace._id,
+      secretsToUpdate
+    });
+  }
+
   return (
     <div className="dark container mx-auto flex flex-col px-8 text-mineshaft-50 dark:[color-scheme:dark]">
       {/* TODO(akhilmhdh): Remove this right when layout is refactored  */}
@@ -349,7 +391,11 @@ export const ProjectSettingsPage = () => {
         workspaceAutoCapitalization={currentWorkspace?.autoCapitalization}
         onAutoCapitalizationChange={onAutoCapitalizationToggle}
       />
-      <ProjectEncryptionModeSection />
+      {!isBlindIndexedLoading && !isBlindIndexed && (
+        <ProjectIndexSecretsSection
+          onEnableBlindIndices={onEnableBlindIndices}
+        />
+      )}
       <div className="mb-6 mt-4 flex w-full flex-col items-start rounded-md border-l border-red bg-white/5 px-6 pl-6 pb-4 pt-4">
         <p className="text-xl font-bold text-red">{t('settings-project:danger-zone')}</p>
         <p className="text-md mt-2 text-gray-400">{t('settings-project:danger-zone-note')}</p>