feat: ui removed all private key except secret rotation to raw endpoints version

frontend/src/hooks/api/secretSnapshots/queries.tsx

@@ -1,13 +1,9 @@
 /* eslint-disable no-param-reassign */
 import { useInfiniteQuery, useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
 
-import {
-  decryptAssymmetric,
-  decryptSymmetric
-} from "@app/components/utilities/cryptography/crypto";
 import { apiRequest } from "@app/config/request";
 
-import { SecretType,SecretV3RawSanitized } from "../secrets/types";
+import { SecretType, SecretV3RawSanitized } from "../secrets/types";
 import {
   TGetSecretSnapshotsDTO,
   TSecretRollbackDTO,
@@ -65,55 +61,33 @@ const fetchSnapshotEncSecrets = async (snapshotId: string) => {
   return res.data.secretSnapshot;
 };
 
-export const useGetSnapshotSecrets = ({ decryptFileKey, snapshotId }: TSnapshotDataProps) =>
+export const useGetSnapshotSecrets = ({ snapshotId }: TSnapshotDataProps) =>
   useQuery({
     queryKey: secretSnapshotKeys.snapshotData(snapshotId),
-    enabled: Boolean(snapshotId && decryptFileKey),
+    enabled: Boolean(snapshotId),
     queryFn: () => fetchSnapshotEncSecrets(snapshotId),
     select: (data) => {
-      const PRIVATE_KEY = localStorage.getItem("PRIVATE_KEY") as string;
-      const latestKey = decryptFileKey;
-      const key = decryptAssymmetric({
-        ciphertext: latestKey.encryptedKey,
-        nonce: latestKey.nonce,
-        publicKey: latestKey.sender.publicKey,
-        privateKey: PRIVATE_KEY
-      });
-
       const sharedSecrets: SecretV3RawSanitized[] = [];
       const personalSecrets: Record<string, { id: string; value: string }> = {};
-      data.secretVersions.forEach((encSecret) => {
-        const secretKey = decryptSymmetric({
-          ciphertext: encSecret.secretKeyCiphertext,
-          iv: encSecret.secretKeyIV,
-          tag: encSecret.secretKeyTag,
-          key
-        });
-
-        const secretValue = decryptSymmetric({
-          ciphertext: encSecret.secretValueCiphertext,
-          iv: encSecret.secretValueIV,
-          tag: encSecret.secretValueTag,
-          key
-        });
-
-        const secretComment = "";
-
+      data.secretVersions.forEach((secretVersion) => {
         const decryptedSecret = {
-          id: encSecret.secretId,
+          id: secretVersion.secretId,
           env: data.environment.slug,
-          key: secretKey,
-          value: secretValue,
-          tags: encSecret.tags,
-          comment: secretComment,
-          createdAt: encSecret.createdAt,
-          updatedAt: encSecret.updatedAt,
+          key: secretVersion.secretKey,
+          value: secretVersion.secretValue || "",
+          tags: secretVersion.tags,
+          comment: secretVersion.secretComment,
+          createdAt: secretVersion.createdAt,
+          updatedAt: secretVersion.updatedAt,
           type: "modified",
-          version: encSecret.version
+          version: secretVersion.version
         };
 
-        if (encSecret.type === SecretType.Personal) {
-          personalSecrets[decryptedSecret.key] = { id: encSecret.secretId, value: secretValue };
+        if (secretVersion.type === SecretType.Personal) {
+          personalSecrets[decryptedSecret.key] = {
+            id: secretVersion.secretId,
+            value: secretVersion.secretValue || ""
+          };
         } else {
           sharedSecrets.push(decryptedSecret);
         }

frontend/src/hooks/api/secretSnapshots/types.ts

@@ -1,5 +1,4 @@
-import { UserWsKeyPair } from "../keys/types";
-import { EncryptedSecretVersion } from "../secrets/types";
+import { SecretVersions } from "../secrets/types";
 import { WorkspaceEnv } from "../types";
 
 export type TSecretSnapshot = {
@@ -12,7 +11,7 @@ export type TSecretSnapshot = {
 
 export type TSnapshotData = Omit<TSecretSnapshot, "secretVersions"> & {
   id: string;
-  secretVersions: EncryptedSecretVersion[];
+  secretVersions: SecretVersions[];
   folderVersion: Array<{ name: string; id: string }>;
   environment: WorkspaceEnv;
 };
@@ -20,7 +19,6 @@ export type TSnapshotData = Omit<TSecretSnapshot, "secretVersions"> & {
 export type TSnapshotDataProps = {
   snapshotId: string;
   env: string;
-  decryptFileKey: UserWsKeyPair;
 };
 
 export type TGetSecretSnapshotsDTO = {