infisical/frontend/src/hooks/api/cmeks/mutations.tsx

import { useMutation, useQueryClient } from "@tanstack/react-query";
import { encodeBase64 } from "tweetnacl-util";

import { apiRequest } from "@app/config/request";
import { cmekKeys } from "@app/hooks/api/cmeks/queries";
import {
  TCmekDecrypt,
  TCmekDecryptResponse,
  TCmekEncrypt,
  TCmekEncryptResponse,
  TCreateCmek,
  TDeleteCmek,
  TUpdateCmek
} from "@app/hooks/api/cmeks/types";

export const useCreateCmek = () => {
  const queryClient = useQueryClient();
  return useMutation({
    mutationFn: async (payload: TCreateCmek) => {
      const { data } = await apiRequest.post("/api/v1/kms/keys", payload);

      return data;
    },
    onSuccess: (_, { projectId }) => {
      queryClient.invalidateQueries({ queryKey: cmekKeys.getCmeksByProjectId({ projectId }) });
    }
  });
};

export const useUpdateCmek = () => {
  const queryClient = useQueryClient();
  return useMutation({
    mutationFn: async ({ keyId, name, description, isDisabled }: TUpdateCmek) => {
      const { data } = await apiRequest.patch(`/api/v1/kms/keys/${keyId}`, {
        name,
        description,
        isDisabled
      });

      return data;
    },
    onSuccess: (_, { projectId }) => {
      queryClient.invalidateQueries({ queryKey: cmekKeys.getCmeksByProjectId({ projectId }) });
    }
  });
};

export const useDeleteCmek = () => {
  const queryClient = useQueryClient();
  return useMutation({
    mutationFn: async ({ keyId }: TDeleteCmek) => {
      const { data } = await apiRequest.delete(`/api/v1/kms/keys/${keyId}`);

      return data;
    },
    onSuccess: (_, { projectId }) => {
      queryClient.invalidateQueries({ queryKey: cmekKeys.getCmeksByProjectId({ projectId }) });
    }
  });
};

export const useCmekEncrypt = () => {
  return useMutation({
    mutationFn: async ({ keyId, plaintext, isBase64Encoded }: TCmekEncrypt) => {
      const { data } = await apiRequest.post<TCmekEncryptResponse>(
        `/api/v1/kms/keys/${keyId}/encrypt`,
        {
          plaintext: isBase64Encoded ? plaintext : encodeBase64(Buffer.from(plaintext))
        }
      );

      return data;
    }
  });
};

export const useCmekDecrypt = () => {
  return useMutation({
    mutationFn: async ({ keyId, ciphertext }: TCmekDecrypt) => {
      const { data } = await apiRequest.post<TCmekDecryptResponse>(
        `/api/v1/kms/keys/${keyId}/decrypt`,
        {
          ciphertext
        }
      );

      return data;
    }
  });
};