mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-10-05 07:26:34 +00:00
feat: add UI for migration from EnvKey
This commit is contained in:
@@ -13,7 +13,7 @@ export const decryptEnvKeyData = async (decryptionKey: string, encryptedJson: {
|
|||||||
const decrypted = secretbox.open(encryptedData, nonce, key);
|
const decrypted = secretbox.open(encryptedData, nonce, key);
|
||||||
|
|
||||||
if (!decrypted) {
|
if (!decrypted) {
|
||||||
throw new Error("Decryption failed");
|
throw new Error("Decryption failed, please check the entered encryption key");
|
||||||
}
|
}
|
||||||
|
|
||||||
const decryptedJson = encodeUTF8(decrypted);
|
const decryptedJson = encodeUTF8(decrypted);
|
||||||
|
|||||||
@@ -0,0 +1,31 @@
|
|||||||
|
import { useMutation } from "@tanstack/react-query";
|
||||||
|
import { AxiosError } from "axios";
|
||||||
|
|
||||||
|
import { apiRequest } from "@app/config/request";
|
||||||
|
|
||||||
|
export const useImportEnvKey = () => {
|
||||||
|
return useMutation({
|
||||||
|
mutationFn: async ({ encryptedJson, decryptionKey }: { encryptedJson: {
|
||||||
|
nonce: string,
|
||||||
|
data: string
|
||||||
|
}, decryptionKey: string }) : Promise<{ success: boolean, message:string }>=> {
|
||||||
|
try{
|
||||||
|
const { data } = await apiRequest.post<{
|
||||||
|
success: boolean,
|
||||||
|
message: string
|
||||||
|
}>("/api/v3/migrate/envkey/", {
|
||||||
|
encryptedJson,
|
||||||
|
decryptionKey
|
||||||
|
});
|
||||||
|
return data;
|
||||||
|
} catch (err) {
|
||||||
|
if ((err as AxiosError<{
|
||||||
|
message: string
|
||||||
|
}>).response) {
|
||||||
|
return { success: false, message: (err as AxiosError<{message: string}>).response?.data?.message as string};
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return { success: false, message: "Something went wrong" };
|
||||||
|
}
|
||||||
|
});
|
||||||
|
};
|
||||||
@@ -0,0 +1,199 @@
|
|||||||
|
import { useEffect, useRef } from "react";
|
||||||
|
import { Controller, useForm } from "react-hook-form";
|
||||||
|
import { faUpload } from "@fortawesome/free-solid-svg-icons";
|
||||||
|
import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";
|
||||||
|
import { zodResolver } from "@hookform/resolvers/zod";
|
||||||
|
import { z } from "zod";
|
||||||
|
|
||||||
|
import { createNotification } from "@app/components/notifications";
|
||||||
|
import { Button, FormControl, IconButton } from "@app/components/v2";
|
||||||
|
import { useImportEnvKey } from "@app/hooks/api/migration/mutations";
|
||||||
|
|
||||||
|
const formSchema = z.object({
|
||||||
|
decryptionKey: z.string().min(1),
|
||||||
|
file: z.unknown(),
|
||||||
|
encryptedJson: z.object({
|
||||||
|
nonce: z.string().min(1),
|
||||||
|
data: z.string().min(1)
|
||||||
|
})
|
||||||
|
});
|
||||||
|
|
||||||
|
type TForm = z.infer<typeof formSchema>;
|
||||||
|
|
||||||
|
export const ImportTab = () => {
|
||||||
|
const fileUploadRef = useRef<HTMLInputElement>(null);
|
||||||
|
|
||||||
|
const { mutateAsync: importEnvKey
|
||||||
|
} = useImportEnvKey();
|
||||||
|
|
||||||
|
const {
|
||||||
|
handleSubmit,
|
||||||
|
control,
|
||||||
|
watch,
|
||||||
|
setError,
|
||||||
|
setValue,
|
||||||
|
reset,
|
||||||
|
trigger,
|
||||||
|
formState: { isSubmitting, isValid }
|
||||||
|
} = useForm<TForm>({
|
||||||
|
resolver: zodResolver(formSchema),
|
||||||
|
values: {
|
||||||
|
decryptionKey: "",
|
||||||
|
encryptedJson: {
|
||||||
|
nonce: "",
|
||||||
|
data: ""
|
||||||
|
},
|
||||||
|
file: undefined
|
||||||
|
}
|
||||||
|
});
|
||||||
|
|
||||||
|
const parseJson = (src: ArrayBuffer) => {
|
||||||
|
console.log("here")
|
||||||
|
const file = src.toString();
|
||||||
|
const formatedData: Record<string, string> = JSON.parse(file);
|
||||||
|
if (Object.keys(formatedData).includes("nonce") && Object.keys(formatedData).includes("data")) {
|
||||||
|
const data = {
|
||||||
|
nonce: formatedData.nonce,
|
||||||
|
data: formatedData.data
|
||||||
|
};
|
||||||
|
setValue("encryptedJson", data);
|
||||||
|
trigger("encryptedJson");
|
||||||
|
console.log(data);
|
||||||
|
} else {
|
||||||
|
setValue("encryptedJson", {
|
||||||
|
nonce: "",
|
||||||
|
data: ""
|
||||||
|
});
|
||||||
|
if (fileUploadRef.current) {
|
||||||
|
fileUploadRef.current.value = "";
|
||||||
|
}
|
||||||
|
createNotification({
|
||||||
|
text: "Improper file format, please upload the EnvKey export.",
|
||||||
|
type: "error"
|
||||||
|
});
|
||||||
|
}
|
||||||
|
};
|
||||||
|
|
||||||
|
const parseFile = (file?: File) => {
|
||||||
|
const reader = new FileReader();
|
||||||
|
if (!file) {
|
||||||
|
createNotification({
|
||||||
|
text: "No file selected.",
|
||||||
|
type: "error"
|
||||||
|
});
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
reader.onload = (event) => {
|
||||||
|
if (!event?.target?.result) return;
|
||||||
|
// parse function's argument looks like to be ArrayBuffer
|
||||||
|
parseJson(event.target.result as ArrayBuffer);
|
||||||
|
}
|
||||||
|
reader.readAsText(file);
|
||||||
|
}
|
||||||
|
|
||||||
|
const submitExport = async (data: TForm) => {
|
||||||
|
if (!data.encryptedJson) {
|
||||||
|
setError("encryptedJson", {
|
||||||
|
type: "required",
|
||||||
|
message: "File is required"
|
||||||
|
});
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
const res = await importEnvKey({ encryptedJson: data.encryptedJson, decryptionKey: data.decryptionKey });
|
||||||
|
if (res.success) {
|
||||||
|
createNotification({
|
||||||
|
text: "Data imported successfully.",
|
||||||
|
type: "success"
|
||||||
|
});
|
||||||
|
reset();
|
||||||
|
if (fileUploadRef.current) {
|
||||||
|
fileUploadRef.current.value = "";
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
createNotification({
|
||||||
|
text: res.message,
|
||||||
|
type: "error"
|
||||||
|
});
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
const watchEncryptedJsonFile: any = watch("file");
|
||||||
|
useEffect(() => {
|
||||||
|
if (watchEncryptedJsonFile) {
|
||||||
|
parseFile(watchEncryptedJsonFile?.[0]);
|
||||||
|
}
|
||||||
|
}, [watchEncryptedJsonFile]);
|
||||||
|
|
||||||
|
return (
|
||||||
|
<div className="rounded-lg border border-mineshaft-600 bg-mineshaft-900 p-6">
|
||||||
|
<h2 className="text-lg font-medium text-white mb-4">Import from external source</h2>
|
||||||
|
<p className="text-sm text-mineshaft-400">
|
||||||
|
Import data from another secret manager to Infisical.
|
||||||
|
</p>
|
||||||
|
<div className="border-b border-mineshaft-800 my-6" />
|
||||||
|
<h3 className="text-lg font-medium text-white mb-4">Import from EnvKey</h3>
|
||||||
|
<div className="mb-4">
|
||||||
|
<form onSubmit={handleSubmit(submitExport)}>
|
||||||
|
<Controller
|
||||||
|
render={({ field: { onChange, ...field }, fieldState: { error } }) => (
|
||||||
|
<FormControl errorText={error?.message} isError={Boolean(error)} label="Decryption Key">
|
||||||
|
<input
|
||||||
|
{...field}
|
||||||
|
onChange={onChange}
|
||||||
|
type="password"
|
||||||
|
className="w-full bg-mineshaft-800 text-white rounded-lg py-2 px-4"
|
||||||
|
placeholder="Enter decryption key"
|
||||||
|
/>
|
||||||
|
</FormControl>
|
||||||
|
)}
|
||||||
|
name="decryptionKey"
|
||||||
|
control={control}
|
||||||
|
/>
|
||||||
|
<div className="flex justify-left">
|
||||||
|
<Controller
|
||||||
|
name="file"
|
||||||
|
control={control}
|
||||||
|
defaultValue={null}
|
||||||
|
rules={{ required: "File is required" }}
|
||||||
|
render={({ field, fieldState: { error } }) => (
|
||||||
|
<FormControl errorText={error?.message} isError={Boolean(error)} label="Export file from EnvKey">
|
||||||
|
<>
|
||||||
|
<input
|
||||||
|
id="fileSelect"
|
||||||
|
className="hidden"
|
||||||
|
type="file"
|
||||||
|
accept=".envkey-archive"
|
||||||
|
onChange={(e) => field.onChange(e.target.files)}
|
||||||
|
ref={fileUploadRef}
|
||||||
|
/>
|
||||||
|
<IconButton
|
||||||
|
className="p-10"
|
||||||
|
ariaLabel="upload-export"
|
||||||
|
colorSchema="secondary"
|
||||||
|
onClick={() => {
|
||||||
|
fileUploadRef?.current?.click();
|
||||||
|
}}
|
||||||
|
>
|
||||||
|
<FontAwesomeIcon icon={faUpload} size="xs" />
|
||||||
|
</IconButton>
|
||||||
|
</>
|
||||||
|
</FormControl>
|
||||||
|
)} />
|
||||||
|
|
||||||
|
</div>
|
||||||
|
<div className="mt-6">
|
||||||
|
<Button
|
||||||
|
colorSchema="primary"
|
||||||
|
type="submit"
|
||||||
|
isDisabled={!isValid}
|
||||||
|
isLoading={isSubmitting}
|
||||||
|
>
|
||||||
|
Import
|
||||||
|
</Button>
|
||||||
|
</div>
|
||||||
|
</form>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
);
|
||||||
|
};
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
export { ImportTab } from "./ImportTab";
|
||||||
@@ -2,7 +2,11 @@ import { Fragment, useEffect, useState } from "react";
|
|||||||
import { useRouter } from "next/router";
|
import { useRouter } from "next/router";
|
||||||
import { Tab } from "@headlessui/react";
|
import { Tab } from "@headlessui/react";
|
||||||
|
|
||||||
|
import { OrgPermissionCan } from "@app/components/permissions";
|
||||||
|
import { OrgPermissionActions, OrgPermissionSubjects } from "@app/context";
|
||||||
|
|
||||||
import { AuditLogStreamsTab } from "../AuditLogStreamTab";
|
import { AuditLogStreamsTab } from "../AuditLogStreamTab";
|
||||||
|
import { ImportTab } from "../ImportTab";
|
||||||
import { OrgAuthTab } from "../OrgAuthTab";
|
import { OrgAuthTab } from "../OrgAuthTab";
|
||||||
import { OrgEncryptionTab } from "../OrgEncryptionTab";
|
import { OrgEncryptionTab } from "../OrgEncryptionTab";
|
||||||
import { OrgGeneralTab } from "../OrgGeneralTab";
|
import { OrgGeneralTab } from "../OrgGeneralTab";
|
||||||
@@ -13,7 +17,8 @@ const tabs = [
|
|||||||
{ name: "Security", key: "tab-org-security" },
|
{ name: "Security", key: "tab-org-security" },
|
||||||
{ name: "Encryption", key: "tab-org-encryption" },
|
{ name: "Encryption", key: "tab-org-encryption" },
|
||||||
{ name: "Workflow Integrations", key: "workflow-integrations" },
|
{ name: "Workflow Integrations", key: "workflow-integrations" },
|
||||||
{ name: "Audit Log Streams", key: "tag-audit-log-streams" }
|
{ name: "Audit Log Streams", key: "tag-audit-log-streams" },
|
||||||
|
{ name: "Import", key: "tab-import" }
|
||||||
];
|
];
|
||||||
export const OrgTabGroup = () => {
|
export const OrgTabGroup = () => {
|
||||||
const { query } = useRouter();
|
const { query } = useRouter();
|
||||||
@@ -63,6 +68,11 @@ export const OrgTabGroup = () => {
|
|||||||
<Tab.Panel>
|
<Tab.Panel>
|
||||||
<AuditLogStreamsTab />
|
<AuditLogStreamsTab />
|
||||||
</Tab.Panel>
|
</Tab.Panel>
|
||||||
|
<OrgPermissionCan I={OrgPermissionActions.Create} an={OrgPermissionSubjects.Workspace}>
|
||||||
|
<Tab.Panel>
|
||||||
|
<ImportTab />
|
||||||
|
</Tab.Panel>
|
||||||
|
</OrgPermissionCan>
|
||||||
</Tab.Panels>
|
</Tab.Panels>
|
||||||
</Tab.Group>
|
</Tab.Group>
|
||||||
);
|
);
|
||||||
|
|||||||
Reference in New Issue
Block a user