infisical/backend/src/ee/services/secret-rotation-v2/secret-rotation-v2-schemas.ts

import { z } from "zod";

import { SecretRotationsV2Schema } from "@app/db/schemas/secret-rotations-v2";
import { SecretRotation } from "@app/ee/services/secret-rotation-v2/secret-rotation-v2-enums";
import { SECRET_ROTATION_CONNECTION_MAP } from "@app/ee/services/secret-rotation-v2/secret-rotation-v2-maps";
import { SecretRotations } from "@app/lib/api-docs";
import { removeTrailingSlash } from "@app/lib/fn";
import { slugSchema } from "@app/server/lib/schemas";

const RotateAtUtcSchema = z.object({
  hours: z.number().min(0).max(23),
  minutes: z.number().min(0).max(59)
});

export const BaseSecretRotationSchema = (type: SecretRotation) =>
  SecretRotationsV2Schema.omit({
    encryptedGeneratedCredentials: true,
    encryptedLastRotationMessage: true,
    rotateAtUtc: true,
    // unique to provider
    type: true,
    parameters: true,
    secretMappings: true
  }).extend({
    connection: z.object({
      app: z.literal(SECRET_ROTATION_CONNECTION_MAP[type]),
      name: z.string(),
      id: z.string().uuid()
    }),
    environment: z.object({ slug: z.string(), name: z.string(), id: z.string().uuid() }),
    projectId: z.string(),
    folder: z.object({ id: z.string(), path: z.string() }),
    rotateAtUtc: RotateAtUtcSchema,
    lastRotationMessage: z.string().nullish()
  });

export const BaseCreateSecretRotationSchema = (type: SecretRotation) =>
  z.object({
    name: slugSchema({ field: "name" }).describe(SecretRotations.CREATE(type).name),
    projectId: z.string().trim().min(1, "Project ID required").describe(SecretRotations.CREATE(type).projectId),
    description: z
      .string()
      .trim()
      .max(256, "Description cannot exceed 256 characters")
      .nullish()
      .describe(SecretRotations.CREATE(type).description),
    connectionId: z.string().uuid().describe(SecretRotations.CREATE(type).connectionId),
    environment: slugSchema({ field: "environment", max: 64 }).describe(SecretRotations.CREATE(type).environment),
    secretPath: z
      .string()
      .trim()
      .min(1, "Secret path required")
      .transform(removeTrailingSlash)
      .describe(SecretRotations.CREATE(type).secretPath),
    isAutoRotationEnabled: z
      .boolean()
      .optional()
      .default(true)
      .describe(SecretRotations.CREATE(type).isAutoRotationEnabled),
    rotationInterval: z.coerce.number().min(1).describe(SecretRotations.CREATE(type).rotationInterval),
    rotateAtUtc: RotateAtUtcSchema.optional().describe(SecretRotations.CREATE(type).rotateAtUtc)
  });

export const BaseUpdateSecretRotationSchema = (type: SecretRotation) =>
  z.object({
    name: slugSchema({ field: "name" }).describe(SecretRotations.UPDATE(type).name).optional(),
    description: z
      .string()
      .trim()
      .max(256, "Description cannot exceed 256 characters")
      .nullish()
      .describe(SecretRotations.UPDATE(type).description),
    isAutoRotationEnabled: z.boolean().optional().describe(SecretRotations.UPDATE(type).isAutoRotationEnabled),
    rotationInterval: z.coerce.number().min(1).optional().describe(SecretRotations.UPDATE(type).rotationInterval),
    rotateAtUtc: RotateAtUtcSchema.optional().describe(SecretRotations.UPDATE(type).rotateAtUtc)
  });