Add get call secrets route for service token and jwt

This commit is contained in:
Maidul Islam
2023-01-04 20:05:00 -05:00
parent 880f4d25a9
commit d75d9ec324
5 changed files with 53 additions and 23 deletions
@@ -6,6 +6,7 @@ import { CreateSecretRequestBody, ModifySecretRequestBody, SanitizedSecretForCre
const { ValidationError } = mongoose.Error;
import { BadRequestError, InternalServerError, UnauthorizedRequestError, ValidationError as RouteValidationError } from '../../utils/errors';
import { AnyBulkWriteOperation } from 'mongodb';
import { SECRET_PERSONAL, SECRET_SHARED } from "../../variables";
export const batchCreateSecrets = async (req: Request, res: Response) => {
const secretsToCreate: CreateSecretRequestBody[] = req.body.secrets;
@@ -135,4 +136,33 @@ export const batchModifySecrets = async (req: Request, res: Response) => {
}
return res.status(200).send()
}
export const fetchAllSecrets = async (req: Request, res: Response) => {
const { environment } = req.query;
const { workspaceId } = req.params;
let userId: string | undefined = undefined // Used for choosing the personal secrets to fetch in
if (req.user) {
userId = req.user._id.toString();
}
if (req.serviceTokenData) {
userId = req.serviceTokenData.user._id
}
const [retriveAllSecretsError, allSecrets] = await to(Secret.find(
{
workspace: workspaceId,
environment,
$or: [{ user: userId }, { user: { $exists: false } }],
type: { $in: [SECRET_SHARED, SECRET_PERSONAL] }
}
).then())
if (retriveAllSecretsError instanceof ValidationError) {
throw RouteValidationError({ message: "Unable to get secrets, please try again", stack: retriveAllSecretsError.stack })
}
return res.json(allSecrets)
}
@@ -6,7 +6,7 @@ import {
MembershipOrg,
Integration,
IntegrationAuth,
Key,
Key,
IUser,
ServiceToken,
ServiceTokenData
@@ -78,7 +78,7 @@ export const pushWorkspaceSecrets = async (req: Request, res: Response) => {
workspaceId,
keys
});
if (postHogClient) {
postHogClient.capture({
event: 'secrets pushed',
@@ -125,7 +125,7 @@ export const pullSecrets = async (req: Request, res: Response) => {
const environment: string = req.query.environment as string;
const channel: string = req.query.channel as string;
const { workspaceId } = req.params;
let userId;
if (req.user) {
userId = req.user._id.toString();
@@ -138,7 +138,7 @@ export const pullSecrets = async (req: Request, res: Response) => {
workspaceId,
environment
});
if (channel !== 'cli') {
secrets = reformatPullSecrets({ secrets });
}
@@ -178,7 +178,7 @@ export const getWorkspaceKey = async (req: Request, res: Response) => {
workspace: workspaceId,
receiver: req.user._id
}).populate('sender', '+publicKey');
if (!key) throw new Error('Failed to find workspace key');
} catch (err) {
Sentry.setUser({ email: req.user.email });
@@ -188,9 +188,7 @@ export const getWorkspaceKey = async (req: Request, res: Response) => {
});
}
return res.status(200).send({
key
});
return res.status(200).json(key);
}
export const getWorkspaceServiceTokenData = async (
req: Request,
@@ -213,7 +211,7 @@ export const getWorkspaceServiceTokenData = async (
message: 'Failed to get workspace service token data'
});
}
return res.status(200).send({
serviceTokenData
});