awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 06:28:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add rate-limit to vercel sync fns

Browse Source
This commit is contained in:
carlosmonastyrski
2025-04-09 12:36:43 -03:00
parent d01cb282f9
commit ed5c18b5ac
1 changed files with 88 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/services/secret-sync/vercel/vercel-sync-fns.ts
+88 -52
View File
@@ -11,7 +11,14 @@ function isVercelDefaultEnvType(value: string): value is DefaultVercelEnvType {
return Object.values(VercelEnvironmentType).map(String).includes(value); return Object.values(VercelEnvironmentType).map(String).includes(value);
} }
const getVercelSecrets = async (secretSync: TVercelSyncWithCredentials) => { const MAX_RETRIES = 5;
const sleep = async () =>
new Promise((resolve) => {
setTimeout(resolve, 1000);
});
const getVercelSecrets = async (secretSync: TVercelSyncWithCredentials, attempt = 0): Promise<VercelApiSecret[]> => {
const { const {
destinationConfig, destinationConfig,
connection: { connection: {
@@ -23,64 +30,75 @@ const getVercelSecrets = async (secretSync: TVercelSyncWithCredentials) => {
decrypt: "true", decrypt: "true",
...(destinationConfig.branch ? { gitBranch: destinationConfig.branch } : {}) ...(destinationConfig.branch ? { gitBranch: destinationConfig.branch } : {})
}; };
try {
const { data } = await request.get<{ envs: VercelApiSecret[] }>( const { data } = await request.get<{ envs: VercelApiSecret[] }>(
`${IntegrationUrls.VERCEL_API_URL}/v9/projects/${destinationConfig.app}/env?teamId=${destinationConfig.teamId}`, `${IntegrationUrls.VERCEL_API_URL}/v9/projects/${destinationConfig.app}/env?teamId=${destinationConfig.teamId}`,
{ {
params, params,
headers: { headers: {
Authorization: `Bearer ${apiToken}`, Authorization: `Bearer ${apiToken}`,
"Accept-Encoding": "application/json" "Accept-Encoding": "application/json"
}
} }
} );
);
const filteredSecrets = data.envs.filter((secret) => { const filteredSecrets = data.envs.filter((secret) => {
if (!isVercelDefaultEnvType(destinationConfig.env)) { if (!isVercelDefaultEnvType(destinationConfig.env)) {
if (secret.customEnvironmentIds?.includes(destinationConfig.env)) { if (secret.customEnvironmentIds?.includes(destinationConfig.env)) {
return true;
}
return false;
}
if (secret.target.includes(destinationConfig.env)) {
// If it's preview environment with a branch specified
if (
destinationConfig.env === VercelEnvironmentType.Preview &&
destinationConfig.branch &&
secret.gitBranch &&
secret.gitBranch !== destinationConfig.branch
) {
return false;
}
return true; return true;
} }
return false; return false;
} });
if (secret.target.includes(destinationConfig.env)) {
// If it's preview environment with a branch specified
if (
destinationConfig.env === VercelEnvironmentType.Preview &&
destinationConfig.branch &&
secret.gitBranch &&
secret.gitBranch !== destinationConfig.branch
) {
return false;
}
return true;
}
return false;
});
// For secrets of type "encrypted", we need to get their decrypted value // For secrets of type "encrypted", we need to get their decrypted value
const secretsWithValues = await Promise.all( const secretsWithValues = await Promise.all(
filteredSecrets.map(async (secret) => { filteredSecrets.map(async (secret) => {
if (secret.type === "encrypted") { if (secret.type === "encrypted") {
const { data: decryptedSecret } = await request.get( const { data: decryptedSecret } = await request.get(
`${IntegrationUrls.VERCEL_API_URL}/v9/projects/${destinationConfig.app}/env/${secret.id}?teamId=${destinationConfig.teamId}`, `${IntegrationUrls.VERCEL_API_URL}/v9/projects/${destinationConfig.app}/env/${secret.id}?teamId=${destinationConfig.teamId}`,
{ {
params, params,
headers: { headers: {
Authorization: `Bearer ${apiToken}`, Authorization: `Bearer ${apiToken}`,
"Accept-Encoding": "application/json" "Accept-Encoding": "application/json"
}
} }
} );
); return decryptedSecret as VercelApiSecret;
return decryptedSecret as VercelApiSecret; }
} return secret;
return secret; })
}) );
);
return secretsWithValues; return secretsWithValues;
} catch (error) {
if ((error as { code: string }).code === "rate_limited" && attempt < MAX_RETRIES) {
await sleep();
return await getVercelSecrets(secretSync, attempt + 1);
}
throw error;
}
}; };
const deleteSecret = async (secretSync: TVercelSyncWithCredentials, vercelSecret: VercelApiSecret) => { const deleteSecret = async (
secretSync: TVercelSyncWithCredentials,
vercelSecret: VercelApiSecret,
attempt = 0
): Promise<void> => {
const { const {
destinationConfig, destinationConfig,
connection: { connection: {
@@ -99,6 +117,10 @@ const deleteSecret = async (secretSync: TVercelSyncWithCredentials, vercelSecret
} }
); );
} catch (error) { } catch (error) {
if ((error as { code: string }).code === "rate_limited" && attempt < MAX_RETRIES) {
await sleep();
return await deleteSecret(secretSync, vercelSecret, attempt + 1);
}
throw new SecretSyncError({ throw new SecretSyncError({
error, error,
secretKey: vercelSecret.key secretKey: vercelSecret.key
@@ -106,7 +128,12 @@ const deleteSecret = async (secretSync: TVercelSyncWithCredentials, vercelSecret
} }
}; };
const createSecret = async (secretSync: TVercelSyncWithCredentials, secretMap: TSecretMap, key: string) => { const createSecret = async (
secretSync: TVercelSyncWithCredentials,
secretMap: TSecretMap,
key: string,
attempt = 0
): Promise<void> => {
try { try {
const { const {
destinationConfig, destinationConfig,
@@ -135,6 +162,10 @@ const createSecret = async (secretSync: TVercelSyncWithCredentials, secretMap: T
} }
); );
} catch (error) { } catch (error) {
if ((error as { code: string }).code === "rate_limited" && attempt < MAX_RETRIES) {
await sleep();
return await createSecret(secretSync, secretMap, key, attempt + 1);
}
throw new SecretSyncError({ throw new SecretSyncError({
error, error,
secretKey: key secretKey: key
@@ -145,8 +176,9 @@ const createSecret = async (secretSync: TVercelSyncWithCredentials, secretMap: T
const updateSecret = async ( const updateSecret = async (
secretSync: TVercelSyncWithCredentials, secretSync: TVercelSyncWithCredentials,
secretMap: TSecretMap, secretMap: TSecretMap,
vercelSecret: VercelApiSecret vercelSecret: VercelApiSecret,
) => { attempt = 0
): Promise<void> => {
try { try {
const { const {
destinationConfig, destinationConfig,
@@ -187,6 +219,10 @@ const updateSecret = async (
} }
); );
} catch (error) { } catch (error) {
if ((error as { code: string }).code === "rate_limited" && attempt < MAX_RETRIES) {
await sleep();
return await updateSecret(secretSync, secretMap, vercelSecret, attempt + 1);
}
throw new SecretSyncError({ throw new SecretSyncError({
error, error,
secretKey: vercelSecret.key secretKey: vercelSecret.key