infisical/backend/src/models/secret.ts

import { Schema, model, Types } from 'mongoose';
import {
	SECRET_SHARED,
	SECRET_PERSONAL,
} from '../variables';

export interface ISecret {
	_id: Types.ObjectId;
	version: number;
	workspace: Types.ObjectId;
	type: string;
	user: Types.ObjectId;
	environment: string;
	secretKeyCiphertext: string;
	secretKeyIV: string;
	secretKeyTag: string;
	secretKeyHash: string;
	secretValueCiphertext: string;
	secretValueIV: string;
	secretValueTag: string;
	secretValueHash: string;
	secretCommentCiphertext?: string;
	secretCommentIV?: string;
	secretCommentTag?: string;
	secretCommentHash?: string;
	tags?: string[];
}

const secretSchema = new Schema<ISecret>(
	{
		version: {
			type: Number,
			required: true,
			default: 1
		},
		workspace: {
			type: Schema.Types.ObjectId,
			ref: 'Workspace',
			required: true
		},
		type: {
			type: String,
			enum: [SECRET_SHARED, SECRET_PERSONAL],
			required: true
		},
		user: {
			// user associated with the personal secret
			type: Schema.Types.ObjectId,
			ref: 'User'
		},
		tags: {
			ref: 'Tag',
			type: [Schema.Types.ObjectId],
			default: []
		},
		environment: {
			type: String,
			required: true
		},
		secretKeyCiphertext: {
			type: String,
			required: true
		},
		secretKeyIV: {
			type: String, // symmetric
			required: true
		},
		secretKeyTag: {
			type: String, // symmetric
			required: true
		},
		secretKeyHash: {
			type: String
		},
		secretValueCiphertext: {
			type: String,
			required: true
		},
		secretValueIV: {
			type: String, // symmetric
			required: true
		},
		secretValueTag: {
			type: String, // symmetric
			required: true
		},
		secretValueHash: {
			type: String
		},
		secretCommentCiphertext: {
			type: String,
			required: false
		},
		secretCommentIV: {
			type: String, // symmetric
			required: false
		},
		secretCommentTag: {
			type: String, // symmetric
			required: false
		},
		secretCommentHash: {
			type: String,
			required: false
		}
	},
	{
		timestamps: true
	}
);


secretSchema.index({ tags: 1 }, { background: true })

const Secret = model<ISecret>('Secret', secretSchema);

export default Secret;