feat: move feature to org level

backend/src/server/routes/index.ts

@@ -201,8 +201,6 @@ export const registerRoutes = async (
   const secretVersionTagDAL = secretVersionTagDALFactory(db);
   const secretBlindIndexDAL = secretBlindIndexDALFactory(db);
 
-  const secretSharingDAL = secretSharingDALFactory(db);
-
   const integrationDAL = integrationDALFactory(db);
   const integrationAuthDAL = integrationAuthDALFactory(db);
   const webhookDAL = webhookDALFactory(db);
@@ -257,6 +255,7 @@ export const registerRoutes = async (
   const groupProjectMembershipRoleDAL = groupProjectMembershipRoleDALFactory(db);
   const userGroupMembershipDAL = userGroupMembershipDALFactory(db);
   const secretScanningDAL = secretScanningDALFactory(db);
+  const secretSharingDAL = secretSharingDALFactory(db);
   const licenseDAL = licenseDALFactory(db);
   const dynamicSecretDAL = dynamicSecretDALFactory(db);
   const dynamicSecretLeaseDAL = dynamicSecretLeaseDALFactory(db);

backend/src/server/routes/v1/secret-sharing-router.ts

@@ -8,25 +8,21 @@ import { AuthMode } from "@app/services/auth/auth-type";
 export const registerSecretSharingRouter = async (server: FastifyZodProvider) => {
   server.route({
     method: "GET",
-    url: "/:projectId",
+    url: "/",
     config: {
       rateLimit: readLimit
     },
     schema: {
-      params: z.object({
-        projectId: z.string().uuid()
-      }),
       response: {
         200: z.array(SecretSharingSchema)
       }
     },
     onRequest: verifyAuth([AuthMode.JWT]),
     handler: async (req) => {
-      const { projectId } = req.params;
       const sharedSecrets = await req.server.services.secretSharing.getSharedSecrets({
         actor: req.permission.type,
         actorId: req.permission.id,
-        projectId,
+        orgId: req.permission.orgId,
         actorAuthMethod: req.permission.authMethod,
         actorOrgId: req.permission.orgId
       });
@@ -72,8 +68,7 @@ export const registerSecretSharingRouter = async (server: FastifyZodProvider) =>
         signedValue: z.string(),
         expiresAt: z.string().refine((date) => new Date(date) > new Date(), {
           message: "Expires at should be a future date"
-        }),
-        workspaceId: z.string().uuid()
+        })
       }),
       response: {
         200: z.object({
@@ -83,11 +78,11 @@ export const registerSecretSharingRouter = async (server: FastifyZodProvider) =>
     },
     onRequest: verifyAuth([AuthMode.JWT]),
     handler: async (req) => {
-      const { name, signedValue, expiresAt, workspaceId } = req.body;
+      const { name, signedValue, expiresAt } = req.body;
       const sharedSecret = await req.server.services.secretSharing.createSharedSecret({
         actor: req.permission.type,
         actorId: req.permission.id,
-        projectId: workspaceId,
+        orgId: req.permission.orgId,
         actorAuthMethod: req.permission.authMethod,
         actorOrgId: req.permission.orgId,
         name,
@@ -100,13 +95,12 @@ export const registerSecretSharingRouter = async (server: FastifyZodProvider) =>
 
   server.route({
     method: "DELETE",
-    url: "/:projectId/:sharedSecretId",
+    url: "/:sharedSecretId",
     config: {
       rateLimit: writeLimit
     },
     schema: {
       params: z.object({
-        projectId: z.string().uuid(),
         sharedSecretId: z.string().uuid()
       }),
       response: {
@@ -115,11 +109,11 @@ export const registerSecretSharingRouter = async (server: FastifyZodProvider) =>
     },
     onRequest: verifyAuth([AuthMode.JWT]),
     handler: async (req) => {
-      const { projectId, sharedSecretId } = req.params;
+      const { sharedSecretId } = req.params;
       const deletedSharedSecret = await req.server.services.secretSharing.deleteSharedSecretById({
         actor: req.permission.type,
         actorId: req.permission.id,
-        projectId,
+        orgId: req.permission.orgId,
         actorAuthMethod: req.permission.authMethod,
         actorOrgId: req.permission.orgId,
         sharedSecretId