@dotenvx/dotenvx 1.71.3 → 1.73.0

package/src/db/device.js

@@ -0,0 +1,73 @@
+const Conf = require('conf')
+const { PrivateKey } = require('eciesjs')
+
+const encryptDeviceValue = require('./../lib/helpers/encryptDeviceValue')
+const decryptDeviceValue = require('./../lib/helpers/decryptDeviceValue')
+
+class Device {
+  constructor () {
+    this.store = new Conf({
+      cwd: process.env.DOTENVX_CONFIG || undefined,
+      projectName: 'dotenvx',
+      configName: '.device-key',
+      projectSuffix: '',
+      fileExtension: '',
+      encryptionKey: 'dotenvxpro dotenvxpro dotenvxpro' // backwards compatible
+    })
+  }
+
+  touch () {
+    const _privateKey = this.privateKey()
+    const _publicKey = this.publicKey()
+
+    return {
+      privateKey: _privateKey,
+      publicKey: _publicKey
+    }
+  }
+
+  configPath () {
+    return this.store.path
+  }
+
+  privateKey () {
+    const currentPrivateKey = this.store.get('private_key/1')
+    if (currentPrivateKey && currentPrivateKey.length > 0) {
+      this.store.set('private_key/1', currentPrivateKey)
+
+      return currentPrivateKey
+    }
+
+    // generate privateKey for the first time
+    const kp = new PrivateKey()
+    const _privateKey = kp.secret.toString('hex')
+
+    this.store.set('private_key/1', _privateKey)
+
+    return _privateKey
+  }
+
+  publicKey () {
+    // must have private key to try and get public key
+    const privateKeyHex = this.privateKey()
+    if (!privateKeyHex || privateKeyHex.length < 1) {
+      return ''
+    }
+
+    // create keyPair object from hex string
+    const _privateKey = new PrivateKey(Buffer.from(privateKeyHex, 'hex'))
+
+    // compute publicKey from privateKey
+    return _privateKey.publicKey.toHex()
+  }
+
+  encrypt (value) {
+    return encryptDeviceValue(value, this.publicKey())
+  }
+
+  decrypt (value) {
+    return decryptDeviceValue(value, this.privateKey())
+  }
+}
+
+module.exports = Device

package/src/db/session.js

@@ -1,25 +1,208 @@
-const Armor = require('./../lib/extensions/armor')
+const fs = require('fs')
+const path = require('path')
+const Conf = require('conf')
+const dotenv = require('dotenv')
+const envPaths = require('env-paths')
+
+const jsonToEnv = require('./../lib/helpers/jsonToEnv')
 const { logger } = require('./../shared/logger')
 
+const ARMOR = {
+  HOSTNAME: 'DOTENVX_ARMOR_HOSTNAME',
+  USER: 'DOTENVX_ARMOR_USER',
+  USERNAME: 'DOTENVX_ARMOR_USERNAME',
+  TOKEN: 'DOTENVX_ARMOR_TOKEN',
+  VERSION: 'DOTENVX_ARMOR_VERSION',
+  VERSION_LAST_CHECK: 'DOTENVX_ARMOR_VERSION_LAST_CHECK'
+}
+
 class Session {
   constructor () {
-    this.armor = new Armor()
+    this._store = null
+  }
+
+  _configPath () {
+    const cwd = process.env.DOTENVX_CONFIG || this._defaultConfigCwd()
+    return path.resolve(cwd, '.env')
+  }
+
+  _defaultConfigCwd () {
+    return envPaths('dotenvx', { suffix: '' }).config
+  }
+
+  _configExists () {
+    return fs.existsSync(this._configPath())
+  }
+
+  _newStore () {
+    return new Conf({
+      cwd: process.env.DOTENVX_CONFIG || undefined,
+      projectName: 'dotenvx',
+      configName: '.env',
+      projectSuffix: '',
+      fileExtension: '',
+      serialize: function (json) {
+        return jsonToEnv(json)
+      },
+      // Convert .env format to an object
+      deserialize: function (env) {
+        return dotenv.parse(env)
+      }
+    })
+  }
+
+  createStore () {
+    if (!this._store) this._store = this._newStore()
+    return this._store
+  }
+
+  openStore () {
+    if (!this._store && !this._configExists()) {
+      return null
+    }
+
+    if (!this._store) this._store = this._newStore()
+    return this._store
+  }
+
+  get store () {
+    return this.openStore()
+  }
+
+  status () {
+    // if logged in
+    if (this.username() && this.token()) {
+      return 'on'
+    }
+
+    return 'off'
+  }
+
+  //
+  // Get
+  //
+  readSetting (key) {
+    const store = this.openStore()
+    if (!store) return undefined
+
+    return store.get(ARMOR[key])
+  }
+
+  hostname () {
+    return this.readSetting('HOSTNAME') || 'https://armor.dotenvx.com'
+  }
+
+  username () {
+    return this.readSetting('USERNAME') || undefined
+  }
+
+  token () {
+    return this.readSetting('TOKEN') || undefined
+  }
+
+  devicePublicKey () {
+    const Device = require('./device')
+    return new Device().publicKey()
+  }
+
+  path () {
+    return this._store ? this._store.path : this._configPath()
+  }
+
+  async systemInformation () {
+    const si = require('systeminformation')
+    const system = await si.system()
+    const osInfo = await si.osInfo()
+
+    return {
+      system_uuid: system.uuid,
+      os_platform: osInfo.platform,
+      os_arch: osInfo.arch
+    }
+  }
+
+  async notifyUpdate () {
+    // native login keeps this lightweight; sidecar commands still handle full update messaging
   }
 
   //
   // armor status helpers
   //
   async noArmor () {
-    const status = await this.armor.status()
+    if (process.env.DOTENVX_NO_ARMOR === 'true') {
+      logger.debug('armor: off')
+      return true
+    }
+
+    const status = this.status()
     logger.debug(`armor: ${status}`)
     return status === 'off'
   }
 
   noArmorSync () {
-    const status = this.armor.statusSync()
+    if (process.env.DOTENVX_NO_ARMOR === 'true') {
+      logger.debug('armor: off')
+      return true
+    }
+
+    const status = this.status()
     logger.debug(`armor: ${status}`)
     return status === 'off'
   }
+
+  //
+  // Set/Delete
+  //
+  login (hostname, id, username, accessToken) {
+    if (!hostname) {
+      throw new Error('DOTENVX_ARMOR_HOSTNAME not set. Run [dotenvx login]')
+    }
+
+    if (!id) {
+      throw new Error('DOTENVX_ARMOR_USER not set. Run [dotenvx login]')
+    }
+
+    if (!username) {
+      throw new Error('DOTENVX_ARMOR_USERNAME not set. Run [dotenvx login]')
+    }
+
+    if (!accessToken) {
+      throw new Error('DOTENVX_ARMOR_TOKEN not set. Run [dotenvx login]')
+    }
+
+    const store = this.createStore()
+    store.set(ARMOR.USER, id)
+    store.set(ARMOR.USERNAME, username)
+    store.set(ARMOR.TOKEN, accessToken)
+    store.set(ARMOR.HOSTNAME, hostname)
+
+    return accessToken
+  }
+
+  logout (hostname, id, accessToken) {
+    if (!hostname) {
+      throw new Error('DOTENVX_ARMOR_HOSTNAME not set. Run [dotenvx login]')
+    }
+
+    if (!id) {
+      throw new Error('DOTENVX_ARMOR_USER not set. Run [dotenvx login]')
+    }
+
+    if (!accessToken) {
+      throw new Error('DOTENVX_ARMOR_TOKEN not set. Run [dotenvx login]')
+    }
+
+    const store = this.openStore()
+    if (!store) return true
+
+    store.delete(ARMOR.USER)
+    store.delete(ARMOR.USERNAME)
+    store.delete(ARMOR.TOKEN)
+    store.delete(ARMOR.HOSTNAME)
+    store.delete(ARMOR.VERSION)
+    store.delete(ARMOR.VERSION_LAST_CHECK)
+    return true
+  }
 }
 
 module.exports = Session

package/src/lib/api/getAccount.js

@@ -0,0 +1,32 @@
+const { http } = require('../helpers/http')
+const buildApiError = require('../helpers/buildApiError')
+
+class GetAccount {
+  constructor (hostname, token) {
+    this.hostname = hostname
+    this.token = token
+  }
+
+  async run () {
+    const token = this.token
+    const url = `${this.hostname}/api/account`
+
+    const resp = await http(url, {
+      method: 'GET',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json'
+      }
+    })
+
+    const json = await resp.body.json()
+
+    if (resp.statusCode >= 400) {
+      throw buildApiError(resp.statusCode, json)
+    }
+
+    return json
+  }
+}
+
+module.exports = GetAccount

package/src/lib/api/postArmorDown.js

@@ -0,0 +1,48 @@
+const { http } = require('../helpers/http')
+const buildApiError = require('../helpers/buildApiError')
+const packageJson = require('../helpers/packageJson')
+const normalizeToken = require('../helpers/normalizeToken')
+
+class PostArmorDown {
+  constructor (hostname, token, devicePublicKey, publicKey, team) {
+    this.hostname = hostname
+    this.token = token
+    this.devicePublicKey = devicePublicKey
+    this.publicKey = publicKey
+    this.team = team
+  }
+
+  async run () {
+    const token = normalizeToken(this.token)
+    const devicePublicKey = this.devicePublicKey
+    const publicKey = this.publicKey
+    const team = this.team
+    const url = `${this.hostname}/api/armor/down`
+
+    const body = {
+      device_public_key: devicePublicKey,
+      cli_version: packageJson.version,
+      public_key: publicKey,
+      team
+    }
+
+    const resp = await http(url, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify(body)
+    })
+
+    const json = await resp.body.json()
+
+    if (resp.statusCode >= 400) {
+      throw buildApiError(resp.statusCode, json)
+    }
+
+    return json
+  }
+}
+
+module.exports = PostArmorDown

package/src/lib/api/postArmorMove.js

@@ -0,0 +1,48 @@
+const { http } = require('../helpers/http')
+const buildApiError = require('../helpers/buildApiError')
+const packageJson = require('../helpers/packageJson')
+const normalizeToken = require('../helpers/normalizeToken')
+
+class PostArmorMove {
+  constructor (hostname, token, devicePublicKey, publicKey, team) {
+    this.hostname = hostname
+    this.token = token
+    this.devicePublicKey = devicePublicKey
+    this.publicKey = publicKey
+    this.team = team
+  }
+
+  async run () {
+    const token = normalizeToken(this.token)
+    const devicePublicKey = this.devicePublicKey
+    const publicKey = this.publicKey
+    const team = this.team
+    const url = `${this.hostname}/api/armor/move`
+
+    const body = {
+      device_public_key: devicePublicKey,
+      cli_version: packageJson.version,
+      public_key: publicKey,
+      team
+    }
+
+    const resp = await http(url, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify(body)
+    })
+
+    const json = await resp.body.json()
+
+    if (resp.statusCode >= 400) {
+      throw buildApiError(resp.statusCode, json)
+    }
+
+    return json
+  }
+}
+
+module.exports = PostArmorMove

package/src/lib/api/postArmorPull.js

@@ -0,0 +1,48 @@
+const { http } = require('../helpers/http')
+const buildApiError = require('../helpers/buildApiError')
+const packageJson = require('../helpers/packageJson')
+const normalizeToken = require('../helpers/normalizeToken')
+
+class PostArmorPull {
+  constructor (hostname, token, devicePublicKey, publicKey, team) {
+    this.hostname = hostname
+    this.token = token
+    this.devicePublicKey = devicePublicKey
+    this.publicKey = publicKey
+    this.team = team
+  }
+
+  async run () {
+    const token = normalizeToken(this.token)
+    const devicePublicKey = this.devicePublicKey
+    const publicKey = this.publicKey
+    const team = this.team
+    const url = `${this.hostname}/api/armor/pull`
+
+    const body = {
+      device_public_key: devicePublicKey,
+      cli_version: packageJson.version,
+      public_key: publicKey,
+      team
+    }
+
+    const resp = await http(url, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify(body)
+    })
+
+    const json = await resp.body.json()
+
+    if (resp.statusCode >= 400) {
+      throw buildApiError(resp.statusCode, json)
+    }
+
+    return json
+  }
+}
+
+module.exports = PostArmorPull

package/src/lib/api/postArmorPush.js

@@ -0,0 +1,48 @@
+const { http } = require('../helpers/http')
+const buildApiError = require('../helpers/buildApiError')
+const packageJson = require('../helpers/packageJson')
+const normalizeToken = require('../helpers/normalizeToken')
+
+class PostArmorPush {
+  constructor (hostname, token, devicePublicKey, privateKey, team) {
+    this.hostname = hostname
+    this.token = token
+    this.devicePublicKey = devicePublicKey
+    this.privateKey = privateKey
+    this.team = team
+  }
+
+  async run () {
+    const token = normalizeToken(this.token)
+    const devicePublicKey = this.devicePublicKey
+    const privateKey = this.privateKey
+    const team = this.team
+    const url = `${this.hostname}/api/armor/push`
+
+    const body = {
+      device_public_key: devicePublicKey,
+      cli_version: packageJson.version,
+      private_key: privateKey,
+      team
+    }
+
+    const resp = await http(url, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify(body)
+    })
+
+    const json = await resp.body.json()
+
+    if (resp.statusCode >= 400) {
+      throw buildApiError(resp.statusCode, json)
+    }
+
+    return json
+  }
+}
+
+module.exports = PostArmorPush

package/src/lib/api/postArmorUp.js

@@ -0,0 +1,51 @@
+const { http } = require('../helpers/http')
+const buildApiError = require('../helpers/buildApiError')
+const packageJson = require('../helpers/packageJson')
+const normalizeToken = require('../helpers/normalizeToken')
+
+class PostArmorUp {
+  constructor (hostname, token, devicePublicKey, publicKey, privateKey, team) {
+    this.hostname = hostname
+    this.token = token
+    this.devicePublicKey = devicePublicKey
+    this.publicKey = publicKey
+    this.privateKey = privateKey
+    this.team = team
+  }
+
+  async run () {
+    const token = normalizeToken(this.token)
+    const devicePublicKey = this.devicePublicKey
+    const publicKey = this.publicKey
+    const privateKey = this.privateKey
+    const team = this.team
+    const url = `${this.hostname}/api/armor/up`
+
+    const body = {
+      device_public_key: devicePublicKey,
+      cli_version: packageJson.version,
+      public_key: publicKey,
+      private_key: privateKey,
+      team
+    }
+
+    const resp = await http(url, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify(body)
+    })
+
+    const json = await resp.body.json()
+
+    if (resp.statusCode >= 400) {
+      throw buildApiError(resp.statusCode, json)
+    }
+
+    return json
+  }
+}
+
+module.exports = PostArmorUp

package/src/lib/api/postKeypair.js

@@ -0,0 +1,60 @@
+const { http } = require('../helpers/http')
+const buildApiError = require('../helpers/buildApiError')
+const packageJson = require('../helpers/packageJson')
+const normalizeToken = require('../helpers/normalizeToken')
+
+class PostKeypair {
+  constructor (hostname, token, devicePublicKey, publicKey, team, metadata, grantToken) {
+    this.hostname = hostname || 'https://armor.dotenvx.com'
+    this.token = token
+    this.devicePublicKey = devicePublicKey
+    this.publicKey = publicKey
+    this.team = team
+    this.metadata = metadata
+    this.grantToken = grantToken
+  }
+
+  async run () {
+    const token = normalizeToken(this.token)
+    const url = `${this.hostname}/api/keypair`
+    const body = {
+      device_public_key: this.devicePublicKey,
+      cli_version: packageJson.version
+    }
+
+    if (this.publicKey) {
+      body.public_key = this.publicKey
+    }
+
+    if (this.team) {
+      body.team = this.team
+    }
+
+    if (this.metadata && Object.keys(this.metadata).length > 0) {
+      body.metadata = this.metadata
+    }
+
+    if (this.grantToken) {
+      body.grant_token = this.grantToken
+    }
+
+    const resp = await http(url, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify(body)
+    })
+
+    const json = await resp.body.json()
+
+    if (resp.statusCode >= 400) {
+      throw buildApiError(resp.statusCode, json)
+    }
+
+    return json
+  }
+}
+
+module.exports = PostKeypair

package/src/lib/api/postLogout.js

@@ -0,0 +1,34 @@
+const { http } = require('../helpers/http')
+const buildApiError = require('../helpers/buildApiError')
+const normalizeToken = require('../helpers/normalizeToken')
+
+class PostLogout {
+  constructor (hostname, token) {
+    this.hostname = hostname
+    this.token = token
+  }
+
+  async run () {
+    const token = normalizeToken(this.token)
+    const url = `${this.hostname}/api/logout`
+
+    const resp = await http(url, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify({})
+    })
+
+    const json = await resp.body.json()
+
+    if (resp.statusCode >= 400) {
+      throw buildApiError(resp.statusCode, json)
+    }
+
+    return json
+  }
+}
+
+module.exports = PostLogout

package/src/lib/api/postOauthDeviceCode.js

@@ -0,0 +1,38 @@
+const { http } = require('../helpers/http')
+const buildOauthError = require('../helpers/buildOauthError')
+
+const OAUTH_CLIENT_ID = 'oac_dotenvxcli'
+
+class PostOauthDeviceCode {
+  constructor (hostname, devicePublicKey, systemInformation, dotenvxProjectId = null) {
+    this.hostname = hostname
+    this.devicePublicKey = devicePublicKey
+    this.systemInformation = systemInformation
+    this.dotenvxProjectId = dotenvxProjectId
+  }
+
+  async run () {
+    const resp = await http(`${this.hostname}/oauth/device/code`, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify({
+        client_id: OAUTH_CLIENT_ID,
+        device_public_key: this.devicePublicKey,
+        system_information: this.systemInformation,
+        dotenvx_project_id: this.dotenvxProjectId
+      })
+    })
+
+    const json = await resp.body.json()
+
+    if (resp.statusCode >= 400) {
+      throw buildOauthError(resp.statusCode, json)
+    }
+
+    return json
+  }
+}
+
+module.exports = PostOauthDeviceCode