feat: changed line length to 120

backend/src/services/secret/secret-service.ts

@@ -1,17 +1,8 @@
 import { ForbiddenError, subject } from "@casl/ability";
 
-import {
-  SecretEncryptionAlgo,
-  SecretKeyEncoding,
-  SecretsSchema,
-  SecretType,
-  TableName
-} from "@app/db/schemas";
+import { SecretEncryptionAlgo, SecretKeyEncoding, SecretsSchema, SecretType, TableName } from "@app/db/schemas";
 import { TPermissionServiceFactory } from "@app/ee/services/permission/permission-service";
-import {
-  ProjectPermissionActions,
-  ProjectPermissionSub
-} from "@app/ee/services/permission/project-permission";
+import { ProjectPermissionActions, ProjectPermissionSub } from "@app/ee/services/permission/project-permission";
 import { TSecretSnapshotServiceFactory } from "@app/ee/services/secret-snapshot/secret-snapshot-service";
 import { getConfig } from "@app/lib/config/env";
 import { buildSecretBlindIndexFromName, encryptSymmetric128BitHexKeyUTF8 } from "@app/lib/crypto";
@@ -58,17 +49,11 @@ type TSecretServiceFactoryDep = {
   secretDAL: TSecretDALFactory;
   secretTagDAL: TSecretTagDALFactory;
   secretVersionDAL: TSecretVersionDALFactory;
-  folderDAL: Pick<
-    TSecretFolderDALFactory,
-    "findBySecretPath" | "updateById" | "findById" | "findByManySecretPath"
-  >;
+  folderDAL: Pick<TSecretFolderDALFactory, "findBySecretPath" | "updateById" | "findById" | "findByManySecretPath">;
   secretBlindIndexDAL: TSecretBlindIndexDALFactory;
   permissionService: Pick<TPermissionServiceFactory, "getProjectPermission">;
   snapshotService: Pick<TSecretSnapshotServiceFactory, "performSnapshot">;
-  secretQueueService: Pick<
-    TSecretQueueFactory,
-    "syncSecrets" | "handleSecretReminder" | "removeSecretReminder"
-  >;
+  secretQueueService: Pick<TSecretQueueFactory, "syncSecrets" | "handleSecretReminder" | "removeSecretReminder">;
   projectBotService: Pick<TProjectBotServiceFactory, "getBotKey">;
   secretImportDAL: Pick<TSecretImportDALFactory, "find">;
   secretVersionTagDAL: Pick<TSecretVersionTagDALFactory, "insertMany">;
@@ -93,8 +78,7 @@ export const secretServiceFactory = ({
     const appCfg = getConfig();
 
     const secretBlindIndexDoc = await secretBlindIndexDAL.findOne({ projectId });
-    if (!secretBlindIndexDoc)
-      throw new BadRequestError({ message: "Blind index not found", name: "Create secret" });
+    if (!secretBlindIndexDoc) throw new BadRequestError({ message: "Blind index not found", name: "Create secret" });
 
     const secretBlindIndex = await buildSecretBlindIndexFromName({
       secretName,
@@ -116,15 +100,11 @@ export const secretServiceFactory = ({
       inputSecrets.map(({ tags, ...el }) => ({ ...el, folderId })),
       tx
     );
-    const newSecretGroupByBlindIndex = groupBy(
-      newSecrets,
-      (item) => item.secretBlindIndex as string
-    );
+    const newSecretGroupByBlindIndex = groupBy(newSecrets, (item) => item.secretBlindIndex as string);
     const newSecretTags = inputSecrets.flatMap(({ tags: secretTags = [], secretBlindIndex }) =>
       secretTags.map((tag) => ({
         [`${TableName.SecretTag}Id` as const]: tag,
-        [`${TableName.Secret}Id` as const]:
-          newSecretGroupByBlindIndex[secretBlindIndex as string][0].id
+        [`${TableName.Secret}Id` as const]: newSecretGroupByBlindIndex[secretBlindIndex as string][0].id
       }))
     );
     const secretVersions = await secretVersionDAL.insertMany(
@@ -148,12 +128,7 @@ export const secretServiceFactory = ({
     return newSecrets.map((secret) => ({ ...secret, _id: secret.id }));
   };
 
-  const fnSecretBulkUpdate = async ({
-    tx,
-    inputSecrets,
-    folderId,
-    projectId
-  }: TFnSecretBulkUpdate) => {
+  const fnSecretBulkUpdate = async ({ tx, inputSecrets, folderId, projectId }: TFnSecretBulkUpdate) => {
     const newSecrets = await secretDAL.bulkUpdate(
       inputSecrets.map(({ filter, data: { tags, ...data } }) => ({
         filter: { ...filter, folderId },
@@ -197,12 +172,7 @@ export const secretServiceFactory = ({
     return newSecrets.map((secret) => ({ ...secret, _id: secret.id }));
   };
 
-  const fnSecretBulkDelete = async ({
-    folderId,
-    inputSecrets,
-    tx,
-    actorId
-  }: TFnSecretBulkDelete) => {
+  const fnSecretBulkDelete = async ({ folderId, inputSecrets, tx, actorId }: TFnSecretBulkDelete) => {
     const deletedSecrets = await secretDAL.deleteMany(
       inputSecrets.map(({ type, secretBlindIndex }) => ({
         blindIndex: secretBlindIndex,
@@ -245,9 +215,7 @@ export const secretServiceFactory = ({
   }: TFnSecretBlindIndexCheck) => {
     const blindIndex2KeyName: Record<string, string> = {}; // used at audit log point
     const keyName2BlindIndex = await Promise.all(
-      inputSecrets.map(({ secretName }) =>
-        generateSecretBlindIndexBySalt(secretName, blindIndexCfg)
-      )
+      inputSecrets.map(({ secretName }) => generateSecretBlindIndexBySalt(secretName, blindIndexCfg))
     ).then((blindIndexes) =>
       blindIndexes.reduce<Record<string, string>>((prev, curr, i) => {
         // eslint-disable-next-line
@@ -282,11 +250,7 @@ export const secretServiceFactory = ({
 
   // this is used when secret blind index already exist
   // mainly for secret approval
-  const fnSecretBlindIndexCheckV2 = async ({
-    inputSecrets,
-    folderId,
-    userId
-  }: TFnSecretBlindIndexCheckV2) => {
+  const fnSecretBlindIndexCheckV2 = async ({ inputSecrets, folderId, userId }: TFnSecretBlindIndexCheckV2) => {
     if (inputSecrets.some(({ type }) => type === SecretType.Personal) && !userId) {
       throw new BadRequestError({ message: "Missing user id for personal secret" });
     }
@@ -303,14 +267,7 @@ export const secretServiceFactory = ({
     return { secsGroupedByBlindIndex, secrets };
   };
 
-  const createSecret = async ({
-    path,
-    actor,
-    actorId,
-    environment,
-    projectId,
-    ...inputSecret
-  }: TCreateSecretDTO) => {
+  const createSecret = async ({ path, actor, actorId, environment, projectId, ...inputSecret }: TCreateSecretDTO) => {
     const { permission } = await permissionService.getProjectPermission(actor, actorId, projectId);
     ForbiddenError.from(permission).throwUnlessCan(
       ProjectPermissionActions.Create,
@@ -322,8 +279,7 @@ export const secretServiceFactory = ({
     const folderId = folder.id;
 
     const blindIndexCfg = await secretBlindIndexDAL.findOne({ projectId });
-    if (!blindIndexCfg)
-      throw new BadRequestError({ message: "Blind index not found", name: "CreateSecret" });
+    if (!blindIndexCfg) throw new BadRequestError({ message: "Blind index not found", name: "CreateSecret" });
 
     if (ActorType.USER !== actor && inputSecret.type === SecretType.Personal) {
       throw new BadRequestError({ message: "Must be user to create personal secret" });
@@ -352,11 +308,8 @@ export const secretServiceFactory = ({
 
     // validate tags
     // fetch all tags and if not same count throw error meaning one was invalid tags
-    const tags = inputSecret.tags
-      ? await secretTagDAL.findManyTagsById(projectId, inputSecret.tags)
-      : [];
-    if ((inputSecret.tags || []).length !== tags.length)
-      throw new BadRequestError({ message: "Tag not found" });
+    const tags = inputSecret.tags ? await secretTagDAL.findManyTagsById(projectId, inputSecret.tags) : [];
+    if ((inputSecret.tags || []).length !== tags.length) throw new BadRequestError({ message: "Tag not found" });
 
     const { secretName, type, ...el } = inputSecret;
     const secret = await secretDAL.transaction((tx) =>
@@ -384,14 +337,7 @@ export const secretServiceFactory = ({
     return { ...secret[0], environment, workspace: projectId, tags };
   };
 
-  const updateSecret = async ({
-    path,
-    actor,
-    actorId,
-    environment,
-    projectId,
-    ...inputSecret
-  }: TUpdateSecretDTO) => {
+  const updateSecret = async ({ path, actor, actorId, environment, projectId, ...inputSecret }: TUpdateSecretDTO) => {
     const { permission } = await permissionService.getProjectPermission(actor, actorId, projectId);
     ForbiddenError.from(permission).throwUnlessCan(
       ProjectPermissionActions.Edit,
@@ -403,8 +349,7 @@ export const secretServiceFactory = ({
     const folderId = folder.id;
 
     const blindIndexCfg = await secretBlindIndexDAL.findOne({ projectId });
-    if (!blindIndexCfg)
-      throw new BadRequestError({ message: "Blind index not found", name: "CreateSecret" });
+    if (!blindIndexCfg) throw new BadRequestError({ message: "Blind index not found", name: "CreateSecret" });
 
     if (ActorType.USER !== actor && inputSecret.type === SecretType.Personal) {
       throw new BadRequestError({ message: "Must be user to create personal secret" });
@@ -441,11 +386,8 @@ export const secretServiceFactory = ({
       projectId
     });
 
-    const tags = inputSecret.tags
-      ? await secretTagDAL.findManyTagsById(projectId, inputSecret.tags)
-      : [];
-    if ((inputSecret.tags || []).length !== tags.length)
-      throw new BadRequestError({ message: "Tag not found" });
+    const tags = inputSecret.tags ? await secretTagDAL.findManyTagsById(projectId, inputSecret.tags) : [];
+    if ((inputSecret.tags || []).length !== tags.length) throw new BadRequestError({ message: "Tag not found" });
 
     const { secretName, ...el } = inputSecret;
     const updatedSecret = await secretDAL.transaction(async (tx) =>
@@ -487,14 +429,7 @@ export const secretServiceFactory = ({
     return { ...updatedSecret[0], workspace: projectId, environment };
   };
 
-  const deleteSecret = async ({
-    path,
-    actor,
-    actorId,
-    environment,
-    projectId,
-    ...inputSecret
-  }: TDeleteSecretDTO) => {
+  const deleteSecret = async ({ path, actor, actorId, environment, projectId, ...inputSecret }: TDeleteSecretDTO) => {
     const { permission } = await permissionService.getProjectPermission(actor, actorId, projectId);
     ForbiddenError.from(permission).throwUnlessCan(
       ProjectPermissionActions.Delete,
@@ -506,8 +441,7 @@ export const secretServiceFactory = ({
     const folderId = folder.id;
 
     const blindIndexCfg = await secretBlindIndexDAL.findOne({ projectId });
-    if (!blindIndexCfg)
-      throw new BadRequestError({ message: "Blind index not found", name: "CreateSecret" });
+    if (!blindIndexCfg) throw new BadRequestError({ message: "Blind index not found", name: "CreateSecret" });
 
     if (ActorType.USER !== actor && inputSecret.type === SecretType.Personal) {
       throw new BadRequestError({ message: "Must be user to create personal secret" });
@@ -542,14 +476,7 @@ export const secretServiceFactory = ({
     return { ...deletedSecret[0], _id: deletedSecret[0].id, workspace: projectId, environment };
   };
 
-  const getSecrets = async ({
-    actorId,
-    path,
-    environment,
-    projectId,
-    actor,
-    includeImports
-  }: TGetSecretsDTO) => {
+  const getSecrets = async ({ actorId, path, environment, projectId, actor, includeImports }: TGetSecretsDTO) => {
     const { permission } = await permissionService.getProjectPermission(actor, actorId, projectId);
     ForbiddenError.from(permission).throwUnlessCan(
       ProjectPermissionActions.Read,
@@ -683,8 +610,7 @@ export const secretServiceFactory = ({
     const folderId = folder.id;
 
     const blindIndexCfg = await secretBlindIndexDAL.findOne({ projectId });
-    if (!blindIndexCfg)
-      throw new BadRequestError({ message: "Blind index not found", name: "Update secret" });
+    if (!blindIndexCfg) throw new BadRequestError({ message: "Blind index not found", name: "Update secret" });
 
     const { keyName2BlindIndex } = await fnSecretBlindIndexCheck({
       inputSecrets,
@@ -738,8 +664,7 @@ export const secretServiceFactory = ({
     const folderId = folder.id;
 
     const blindIndexCfg = await secretBlindIndexDAL.findOne({ projectId });
-    if (!blindIndexCfg)
-      throw new BadRequestError({ message: "Blind index not found", name: "Update secret" });
+    if (!blindIndexCfg) throw new BadRequestError({ message: "Blind index not found", name: "Update secret" });
 
     const { keyName2BlindIndex } = await fnSecretBlindIndexCheck({
       inputSecrets,
@@ -809,8 +734,7 @@ export const secretServiceFactory = ({
     const folderId = folder.id;
 
     const blindIndexCfg = await secretBlindIndexDAL.findOne({ projectId });
-    if (!blindIndexCfg)
-      throw new BadRequestError({ message: "Blind index not found", name: "Update secret" });
+    if (!blindIndexCfg) throw new BadRequestError({ message: "Blind index not found", name: "Update secret" });
 
     const { keyName2BlindIndex } = await fnSecretBlindIndexCheck({
       inputSecrets,
@@ -838,46 +762,22 @@ export const secretServiceFactory = ({
     return secretsDeleted;
   };
 
-  const listSecretVersionsBySecretId = async ({
-    actorId,
-    actor,
-    limit,
-    offset,
-    secretId
-  }: TListSecretVersionDTO) => {
+  const listSecretVersionsBySecretId = async ({ actorId, actor, limit, offset, secretId }: TListSecretVersionDTO) => {
     const secret = await secretDAL.findById(secretId);
     if (!secret) throw new BadRequestError({ message: "Failed to find secret" });
 
     const folder = await folderDAL.findById(secret.folderId);
     if (!folder) throw new BadRequestError({ message: "Folder not found" });
-    const { permission } = await permissionService.getProjectPermission(
-      actor,
-      actorId,
-      folder.projectId
-    );
-    ForbiddenError.from(permission).throwUnlessCan(
-      ProjectPermissionActions.Read,
-      ProjectPermissionSub.SecretRollback
-    );
+    const { permission } = await permissionService.getProjectPermission(actor, actorId, folder.projectId);
+    ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.SecretRollback);
 
-    const secretVersions = await secretVersionDAL.find(
-      { secretId },
-      { limit, offset, sort: [["createdAt", "desc"]] }
-    );
+    const secretVersions = await secretVersionDAL.find({ secretId }, { limit, offset, sort: [["createdAt", "desc"]] });
     return secretVersions;
   };
 
-  const getSecretsRaw = async ({
-    projectId,
-    path,
-    actor,
-    actorId,
-    environment,
-    includeImports
-  }: TGetSecretsRawDTO) => {
+  const getSecretsRaw = async ({ projectId, path, actor, actorId, environment, includeImports }: TGetSecretsRawDTO) => {
     const botKey = await projectBotService.getBotKey(projectId);
-    if (!botKey)
-      throw new BadRequestError({ message: "Project bot not found", name: "bot_not_found_error" });
+    if (!botKey) throw new BadRequestError({ message: "Project bot not found", name: "bot_not_found_error" });
 
     const { secrets, imports } = await getSecrets({
       actorId,
@@ -911,8 +811,7 @@ export const secretServiceFactory = ({
     version
   }: TGetASecretRawDTO) => {
     const botKey = await projectBotService.getBotKey(projectId);
-    if (!botKey)
-      throw new BadRequestError({ message: "Project bot not found", name: "bot_not_found_error" });
+    if (!botKey) throw new BadRequestError({ message: "Project bot not found", name: "bot_not_found_error" });
 
     const secret = await getSecretByName({
       actorId,
@@ -941,8 +840,7 @@ export const secretServiceFactory = ({
     skipMultilineEncoding
   }: TCreateSecretRawDTO) => {
     const botKey = await projectBotService.getBotKey(projectId);
-    if (!botKey)
-      throw new BadRequestError({ message: "Project bot not found", name: "bot_not_found_error" });
+    if (!botKey) throw new BadRequestError({ message: "Project bot not found", name: "bot_not_found_error" });
 
     const secretKeyEncrypted = encryptSymmetric128BitHexKeyUTF8(secretName, botKey);
     const secretValueEncrypted = encryptSymmetric128BitHexKeyUTF8(secretValue || "", botKey);
@@ -986,8 +884,7 @@ export const secretServiceFactory = ({
     skipMultilineEncoding
   }: TUpdateSecretRawDTO) => {
     const botKey = await projectBotService.getBotKey(projectId);
-    if (!botKey)
-      throw new BadRequestError({ message: "Project bot not found", name: "bot_not_found_error" });
+    if (!botKey) throw new BadRequestError({ message: "Project bot not found", name: "bot_not_found_error" });
 
     const secretValueEncrypted = encryptSymmetric128BitHexKeyUTF8(secretValue || "", botKey);
 
@@ -1021,8 +918,7 @@ export const secretServiceFactory = ({
     secretPath
   }: TDeleteSecretRawDTO) => {
     const botKey = await projectBotService.getBotKey(projectId);
-    if (!botKey)
-      throw new BadRequestError({ message: "Project bot not found", name: "bot_not_found_error" });
+    if (!botKey) throw new BadRequestError({ message: "Project bot not found", name: "bot_not_found_error" });
 
     const secret = await deleteSecret({
       secretName,
@@ -1040,33 +936,17 @@ export const secretServiceFactory = ({
     return decryptSecretRaw(secret, botKey);
   };
 
-  const getSecretVersions = async ({
-    actorId,
-    actor,
-    limit = 20,
-    offset = 0,
-    secretId
-  }: TGetSecretVersionsDTO) => {
+  const getSecretVersions = async ({ actorId, actor, limit = 20, offset = 0, secretId }: TGetSecretVersionsDTO) => {
     const secret = await secretDAL.findById(secretId);
     if (!secret) throw new BadRequestError({ message: "Failed to find secret" });
 
     const folder = await folderDAL.findById(secret.folderId);
     if (!folder) throw new BadRequestError({ message: "Failed to find secret" });
 
-    const { permission } = await permissionService.getProjectPermission(
-      actor,
-      actorId,
-      folder.projectId
-    );
-    ForbiddenError.from(permission).throwUnlessCan(
-      ProjectPermissionActions.Read,
-      ProjectPermissionSub.SecretRollback
-    );
+    const { permission } = await permissionService.getProjectPermission(actor, actorId, folder.projectId);
+    ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.SecretRollback);
 
-    const secretVersions = await secretVersionDAL.find(
-      { secretId },
-      { offset, limit, sort: [["createdAt", "desc"]] }
-    );
+    const secretVersions = await secretVersionDAL.find({ secretId }, { offset, limit, sort: [["createdAt", "desc"]] });
     return secretVersions;
   };