infisical/backend/src/ee/routes/v1/app-connection-routers/oci-connection-router.ts

import z from "zod";

import {
  CreateOCIConnectionSchema,
  SanitizedOCIConnectionSchema,
  UpdateOCIConnectionSchema
} from "@app/ee/services/app-connections/oci";
import { readLimit } from "@app/server/config/rateLimiter";
import { verifyAuth } from "@app/server/plugins/auth/verify-auth";
import { AppConnection } from "@app/services/app-connection/app-connection-enums";
import { AuthMode } from "@app/services/auth/auth-type";

import { registerAppConnectionEndpoints } from "../../../../server/routes/v1/app-connection-routers/app-connection-endpoints";

export const registerOCIConnectionRouter = async (server: FastifyZodProvider) => {
  registerAppConnectionEndpoints({
    app: AppConnection.OCI,
    server,
    sanitizedResponseSchema: SanitizedOCIConnectionSchema,
    createSchema: CreateOCIConnectionSchema,
    updateSchema: UpdateOCIConnectionSchema
  });

  // The following endpoints are for internal Infisical App use only and not part of the public API
  server.route({
    method: "GET",
    url: `/:connectionId/compartments`,
    config: {
      rateLimit: readLimit
    },
    schema: {
      params: z.object({
        connectionId: z.string().uuid()
      }),
      response: {
        200: z
          .object({
            id: z.string(),
            name: z.string()
          })
          .array()
      }
    },
    onRequest: verifyAuth([AuthMode.JWT]),
    handler: async (req) => {
      const { connectionId } = req.params;

      const compartments = await server.services.appConnection.oci.listCompartments(connectionId, req.permission);
      return compartments;
    }
  });

  server.route({
    method: "GET",
    url: `/:connectionId/vaults`,
    config: {
      rateLimit: readLimit
    },
    schema: {
      params: z.object({
        connectionId: z.string().uuid()
      }),
      querystring: z.object({
        compartmentOcid: z.string().min(1, "Compartment OCID required")
      }),
      response: {
        200: z
          .object({
            id: z.string(),
            displayName: z.string()
          })
          .array()
      }
    },
    onRequest: verifyAuth([AuthMode.JWT]),
    handler: async (req) => {
      const { connectionId } = req.params;
      const { compartmentOcid } = req.query;

      const vaults = await server.services.appConnection.oci.listVaults(
        { connectionId, compartmentOcid },
        req.permission
      );
      return vaults;
    }
  });

  server.route({
    method: "GET",
    url: `/:connectionId/vault-keys`,
    config: {
      rateLimit: readLimit
    },
    schema: {
      params: z.object({
        connectionId: z.string().uuid()
      }),
      querystring: z.object({
        compartmentOcid: z.string().min(1, "Compartment OCID required"),
        vaultOcid: z.string().min(1, "Vault OCID required")
      }),
      response: {
        200: z
          .object({
            id: z.string(),
            displayName: z.string()
          })
          .array()
      }
    },
    onRequest: verifyAuth([AuthMode.JWT]),
    handler: async (req) => {
      const { connectionId } = req.params;
      const { compartmentOcid, vaultOcid } = req.query;

      const keys = await server.services.appConnection.oci.listVaultKeys(
        { connectionId, compartmentOcid, vaultOcid },
        req.permission
      );
      return keys;
    }
  });
};