@scaffoldly/serverless-util/dist/secrets.js

Scaffoldly Serverless Helper Functionality

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.SetSecret = exports.GetSecret = void 0;
const boolean_1 = require("boolean");
const constants_1 = require("./constants");
const exports_1 = require("./exports");
const cache = {};
const GetSecretFromEnv = (key) => {
    console.log(`Checking local env for ${key}`);
    if (process.env[key]) {
        console.debug(`Found ${key} in local env!`);
        return process.env[`${key}`];
    }
    return null;
};
const GetSecretFromCache = (key, serviceName, stage) => {
    if (!cache[stage]) {
        return null;
    }
    if (!cache[stage][serviceName]) {
        return null;
    }
    console.log(`Fetching secret from cache: key=${key}, serviceName=${serviceName}, stage=${stage}`);
    if (key) {
        return cache[stage][serviceName][key];
    }
    return cache[stage][serviceName];
};
const GetSecret = async (key, serviceName = constants_1.SERVICE_NAME, stage = constants_1.STAGE) => {
    const cached = GetSecretFromCache(key, serviceName, stage);
    if (cached) {
        return cached;
    }
    if (stage === 'local' && !boolean_1.boolean(exports_1.LOCALSTACK)) {
        return GetSecretFromEnv(key);
    }
    let secretsManager = await exports_1.SecretsManager(serviceName, stage);
    try {
        const secretResponse = await secretsManager
            .getSecretValue({
            SecretId: `lambda/${stage}/${serviceName}`,
        })
            .promise();
        if (!cache[stage]) {
            cache[stage] = {};
        }
        const parsed = JSON.parse(secretResponse.SecretString);
        if (!parsed[key]) {
            console.warn(`Key not in secrets manager, skipping cache: key=${key} serviceName=${serviceName} stage=${stage}`);
            if (stage === 'local') {
                return GetSecretFromEnv(key);
            }
            return null;
        }
        cache[stage][serviceName] = parsed;
        console.log(`Added secrets to cache: serviceName=${serviceName} stage=${stage}`);
        return GetSecretFromCache(key, serviceName, stage);
    }
    catch (e) {
        console.error(`Error fetching secret: key=${key} serviceName=${serviceName} stage=${stage}`, e.message);
        if (stage === 'local') {
            return GetSecretFromEnv(key);
        }
        throw new Error(`Error fetching secret: ${e.message}`);
    }
};
exports.GetSecret = GetSecret;
const SetSecret = async (key, value, base64Encode = false, serviceName = constants_1.SERVICE_NAME, stage = constants_1.STAGE) => {
    const _value = base64Encode ? Buffer.from(value, 'utf8').toString('base64') : value;
    if (stage === 'local' && !boolean_1.boolean(exports_1.LOCALSTACK)) {
        if (!cache[stage]) {
            cache[stage] = {};
        }
        if (!cache[stage][serviceName]) {
            cache[stage][serviceName] = {};
        }
        cache[stage][serviceName][key] = _value;
        console.log(`Saved secret to cache: key=${key} serviceName=${serviceName} stage=${stage}`);
        return _value;
    }
    const secretsManager = await exports_1.SecretsManager(serviceName, stage);
    try {
        const secretResponse = await secretsManager
            .getSecretValue({
            SecretId: `lambda/${stage}/${serviceName}`,
        })
            .promise();
        let secretString = secretResponse.SecretString;
        if (!secretString) {
            console.warn('No secrets set in Secrets Manager, generating an empty object');
            secretString = '{}';
        }
        const secrets = JSON.parse(secretString);
        secrets[key] = _value;
        await secretsManager
            .putSecretValue({ SecretId: `lambda/${stage}/${serviceName}`, SecretString: JSON.stringify(secrets) })
            .promise();
        console.log(`Added secret to Secrets Manager: key=${key} serviceName=${serviceName} stage=${stage}`);
        const ret = await exports.GetSecret(key, serviceName, stage);
        return ret;
    }
    catch (e) {
        console.error(`Error setting secret: key=${key} serviceName=${serviceName} stage=${stage}`, e.message);
        throw new Error(`Error fetching secret: ${e.message}`);
    }
};
exports.SetSecret = SetSecret;
//# sourceMappingURL=secrets.js.map