@riocrypto/common-server 1.0.548 → 1.0.556

package/build/common/src/types/rio-env.d.ts

@@ -0,0 +1,6 @@
+export declare enum RioEnv {
+    Development = "development",
+    Sandbox = "sandbox",
+    Staging = "staging",
+    Production = "production"
+}

package/build/common/src/types/rio-env.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RioEnv = void 0;
+var RioEnv;
+(function (RioEnv) {
+    RioEnv["Development"] = "development";
+    RioEnv["Sandbox"] = "sandbox";
+    RioEnv["Staging"] = "staging";
+    RioEnv["Production"] = "production";
+})(RioEnv = exports.RioEnv || (exports.RioEnv = {}));

package/build/{clients → common-server/src/clients}/bitstamp-client.d.ts

@@ -12,5 +12,5 @@ declare class BitstampClient {
     }>;
     getTransactions(): Promise<any>;
 }
-export declare const bitstampClient: BitstampClient;
+export declare const bitstampClient: Promise<BitstampClient>;
 export {};

package/build/{clients → common-server/src/clients}/bitstamp-client.js

@@ -39,6 +39,7 @@ exports.bitstampClient = void 0;
 const axios_1 = __importDefault(require("axios"));
 const crypto = __importStar(require("crypto"));
 const uuid = __importStar(require("uuid"));
+const secret_manager_client_1 = require("./secret-manager-client");
 class BitstampClient {
     constructor(apiKey, apiSecret) {
         this.apiKey = apiKey;
@@ -80,4 +81,15 @@ class BitstampClient {
         });
     }
 }
-exports.bitstampClient = new BitstampClient(process.env.BITSTAMP_API_KEY, process.env.BITSTAMP_SECRET);
+exports.bitstampClient = (() => __awaiter(void 0, void 0, void 0, function* () {
+    const BITSTAMP_API_KEY = yield secret_manager_client_1.secretManagerClient.getSecretValue("BITSTAMP_API_KEY");
+    if (!BITSTAMP_API_KEY) {
+        throw new Error("Unable to get BITSTAMP_API_KEY");
+    }
+    const BITSTAMP_SECRET = yield secret_manager_client_1.secretManagerClient.getSecretValue("BITSTAMP_SECRET");
+    if (!BITSTAMP_SECRET) {
+        throw new Error("Unable to get BITSTAMP_SECRET");
+    }
+    const bitstampClient = new BitstampClient(BITSTAMP_API_KEY, BITSTAMP_SECRET);
+    return bitstampClient;
+}))();

package/build/{clients → common-server/src/clients}/ccxt-client.js

@@ -15,6 +15,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ccxtWrapper = void 0;
 const common_1 = require("@riocrypto/common");
 const ccxt_1 = __importDefault(require("ccxt"));
+const secret_manager_client_1 = require("./secret-manager-client");
 class CCXTClient {
     constructor(env) {
         this.env = env;
@@ -123,10 +124,18 @@ class CCXTClient {
         return __awaiter(this, void 0, void 0, function* () {
             for (let exchangeId of ccxt_1.default.exchanges) {
                 if (exchangeId === "bitstamp") {
+                    const SECRET = yield secret_manager_client_1.secretManagerClient.getSecretValue(`${exchangeId.toLocaleUpperCase()}_SECRET`);
+                    if (!SECRET) {
+                        throw new Error("Unable to get SECRET");
+                    }
+                    const API_KEY = yield secret_manager_client_1.secretManagerClient.getSecretValue(`${exchangeId.toLocaleUpperCase()}_API_KEY`);
+                    if (!API_KEY) {
+                        throw new Error("Unable to get API_KEY");
+                    }
                     //@ts-ignore
                     const exchangeClass = ccxt_1.default[exchangeId], exchange = new exchangeClass({
-                        apiKey: process.env[`${exchangeId.toLocaleUpperCase()}_API_KEY`],
-                        secret: process.env[`${exchangeId.toLocaleUpperCase()}_SECRET`],
+                        apiKey: API_KEY,
+                        secret: SECRET,
                     });
                     return exchange;
                 }
@@ -146,10 +155,18 @@ class CCXTClient {
     }
     getExchange(ccxtLiquidityProvider) {
         return __awaiter(this, void 0, void 0, function* () {
+            const SECRET = yield secret_manager_client_1.secretManagerClient.getSecretValue(`${ccxtLiquidityProvider.toLocaleUpperCase()}_SECRET`);
+            if (!SECRET) {
+                throw new Error("Unable to get SECRET");
+            }
+            const API_KEY = yield secret_manager_client_1.secretManagerClient.getSecretValue(`${ccxtLiquidityProvider.toLocaleUpperCase()}_API_KEY`);
+            if (!API_KEY) {
+                throw new Error("Unable to get API_KEY");
+            }
             // @ts-ignore
             const exchangeClass = ccxt_1.default[ccxtLiquidityProvider], exchange = new exchangeClass({
-                apiKey: process.env[`${ccxtLiquidityProvider.toLocaleUpperCase()}_API_KEY`],
-                secret: process.env[`${ccxtLiquidityProvider.toLocaleUpperCase()}_SECRET`],
+                apiKey: API_KEY,
+                secret: SECRET,
             });
             return exchange;
         });

package/build/{clients → common-server/src/clients}/etherscan-client.js

@@ -10,13 +10,18 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.EtherscanClient = void 0;
+const secret_manager_client_1 = require("./secret-manager-client");
 class EtherscanClient {
     constructor(axios) {
         this.axios = axios;
     }
     getTransactions(address) {
         return __awaiter(this, void 0, void 0, function* () {
-            const { data } = yield this.axios.get(`https://api.etherscan.io/api?module=account&action=txlist&address=${address}&startblock=0&endblock=99999999&page=1&offset=100&sort=asc&apikey=${"DDR78IVPYXCVGFKTT6YWBBYZBRD18S2EW1"}`);
+            const ETHERSCAN_API_KEY = yield secret_manager_client_1.secretManagerClient.getSecretValue("ETHERSCAN_API_KEY");
+            if (!ETHERSCAN_API_KEY) {
+                throw new Error("Unable to get ETHERSCAN_API_KEY");
+            }
+            const { data } = yield this.axios.get(`https://api.etherscan.io/api?module=account&action=txlist&address=${address}&startblock=0&endblock=99999999&page=1&offset=100&sort=asc&apikey=${ETHERSCAN_API_KEY}`);
             return data.result;
         });
     }

package/build/{clients → common-server/src/clients}/fireblocks-client.d.ts

@@ -13,5 +13,5 @@ declare class FireblocksClient {
     getTransactions(crypto: Crypto): Promise<any>;
     getDepositAddress(crypto: Crypto): Promise<string>;
 }
-export declare const fireblocksClient: FireblocksClient;
+export declare const fireblocksClient: Promise<FireblocksClient>;
 export {};

package/build/{clients → common-server/src/clients}/fireblocks-client.js

@@ -11,6 +11,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.fireblocksClient = void 0;
 const fireblocks_sdk_1 = require("fireblocks-sdk");
+const secret_manager_client_1 = require("./secret-manager-client");
 class FireblocksClient {
     constructor(privateKey, apiKey) {
         this.fireblocks = new fireblocks_sdk_1.FireblocksSDK(privateKey, apiKey, "https://api.fireblocks.io");
@@ -142,4 +143,15 @@ class FireblocksClient {
         });
     }
 }
-exports.fireblocksClient = new FireblocksClient(process.env.FIREBLOCKS_PRIVATE_KEY, process.env.FIREBLOCKS_API_KEY);
+exports.fireblocksClient = (() => __awaiter(void 0, void 0, void 0, function* () {
+    const FIREBLOCKS_PRIVATE_KEY = yield secret_manager_client_1.secretManagerClient.getSecretValue("FIREBLOCKS_PRIVATE_KEY");
+    if (!FIREBLOCKS_PRIVATE_KEY) {
+        throw new Error("Unable to get FIREBLOCKS_PRIVATE_KEY");
+    }
+    const FIREBLOCKS_API_KEY = yield secret_manager_client_1.secretManagerClient.getSecretValue("FIREBLOCKS_API_KEY");
+    if (!FIREBLOCKS_API_KEY) {
+        throw new Error("Unable to get FIREBLOCKS_API_KEY");
+    }
+    const fireblocksClient = new FireblocksClient(FIREBLOCKS_PRIVATE_KEY, FIREBLOCKS_API_KEY);
+    return fireblocksClient;
+}))();

package/build/{clients → common-server/src/clients}/fixer-client.d.ts

@@ -4,5 +4,5 @@ declare class FixerClient {
     constructor(apiKey: string);
     convert(from: Fiat, to: Fiat): Promise<number>;
 }
-export declare const fixerClient: FixerClient;
+export declare const fixerClient: Promise<FixerClient>;
 export {};

package/build/{clients → common-server/src/clients}/fixer-client.js

@@ -14,6 +14,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.fixerClient = void 0;
 const axios_1 = __importDefault(require("axios"));
+const secret_manager_client_1 = require("./secret-manager-client");
 class FixerClient {
     constructor(apiKey) {
         this.apiKey = apiKey;
@@ -31,4 +32,12 @@ class FixerClient {
         });
     }
 }
-exports.fixerClient = new FixerClient(process.env.FIXER_API_KEY);
+exports.fixerClient = (() => __awaiter(void 0, void 0, void 0, function* () {
+    // Retrieve secret asynchronously
+    const FIXER_API_KEY = yield secret_manager_client_1.secretManagerClient.getSecretValue("FIXER_API_KEY");
+    if (!FIXER_API_KEY) {
+        throw new Error("Unable to get FIXER_API_KEY");
+    }
+    // Create FixerClient instance and return
+    return new FixerClient(FIXER_API_KEY);
+}))();

package/build/{clients → common-server/src/clients}/gueno-client.d.ts

@@ -6,5 +6,5 @@ declare class GuenoClient {
     getAddressRiskScore(address: string, protocol: Crypto): Promise<any>;
     getAccessToken(): Promise<any>;
 }
-export declare const guenoClient: GuenoClient;
+export declare const guenoClient: Promise<GuenoClient>;
 export {};

package/build/{clients → common-server/src/clients}/gueno-client.js

@@ -13,6 +13,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.guenoClient = void 0;
+const secret_manager_client_1 = require("./secret-manager-client");
 const axios_1 = __importDefault(require("axios"));
 class GuenoClient {
     constructor(email, password, env) {
@@ -41,4 +42,16 @@ class GuenoClient {
         });
     }
 }
-exports.guenoClient = new GuenoClient(process.env.GUENO_EMAIL, process.env.GUENO_PASSWORD, process.env.GUENO_ENV);
+exports.guenoClient = (() => __awaiter(void 0, void 0, void 0, function* () {
+    // Retrieve secrets asynchronously
+    const GUENO_EMAIL = yield secret_manager_client_1.secretManagerClient.getSecretValue("GUENO_EMAIL");
+    if (!GUENO_EMAIL) {
+        throw new Error("Unable to get GUENO_EMAIL");
+    }
+    const GUENO_PASSWORD = yield secret_manager_client_1.secretManagerClient.getSecretValue("GUENO_PASSWORD");
+    if (!GUENO_PASSWORD) {
+        throw new Error("Unable to get GUENO_PASSWORD");
+    }
+    // Create GuenoClient instance and return
+    return new GuenoClient(GUENO_EMAIL, GUENO_PASSWORD, process.env.GUENO_ENV);
+}))();

package/build/{clients → common-server/src/clients}/kushki-client.d.ts

@@ -8,5 +8,5 @@ declare class KushkiClient {
     createBankPaymentToken(order: Order, user: User | BusinessUser): Promise<any>;
     createBankPayment(order: Order, user: User | BusinessUser, token: string): Promise<any>;
 }
-export declare const kushkiClient: KushkiClient;
+export declare const kushkiClient: Promise<KushkiClient>;
 export {};

package/build/{clients → common-server/src/clients}/kushki-client.js

@@ -15,6 +15,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.kushkiClient = void 0;
 const common_1 = require("@riocrypto/common");
 const axios_1 = __importDefault(require("axios"));
+const secret_manager_client_1 = require("./secret-manager-client");
 class KushkiClient {
     constructor(privateMerchantId, environment) {
         this.privateMerchantId = privateMerchantId;
@@ -147,4 +148,12 @@ class KushkiClient {
         });
     }
 }
-exports.kushkiClient = new KushkiClient(process.env.KUSHKI_PRIVATE_MERCHANT_ID, process.env.KUSHKI_ENV);
+const createKushkiClient = () => __awaiter(void 0, void 0, void 0, function* () {
+    const KUSHKI_PRIVATE_MERCHANT_ID = yield secret_manager_client_1.secretManagerClient.getSecretValue("KUSHKI_PRIVATE_MERCHANT_ID");
+    if (!KUSHKI_PRIVATE_MERCHANT_ID) {
+        throw new Error("Unable to get KUSHKI_PRIVATE_MERCHANT_ID");
+    }
+    const kushkiClient = new KushkiClient(KUSHKI_PRIVATE_MERCHANT_ID, process.env.KUSHKI_ENV);
+    return kushkiClient;
+});
+exports.kushkiClient = createKushkiClient();

package/build/common-server/src/clients/s3-client.d.ts

@@ -0,0 +1,6 @@
+export declare class s3 {
+    _client: any;
+    constructor(endpoint: string, region: string, accessKey: string, secretKey: string);
+    get client(): any;
+}
+export declare const s3Client: Promise<s3>;

package/build/common-server/src/clients/s3-client.js

@@ -0,0 +1,50 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.s3Client = exports.s3 = void 0;
+const client_s3_1 = require("@aws-sdk/client-s3");
+const secret_manager_client_1 = require("./secret-manager-client");
+class s3 {
+    constructor(endpoint, region, accessKey, secretKey) {
+        this._client = new client_s3_1.S3Client({
+            endpoint,
+            forcePathStyle: false,
+            region,
+            credentials: {
+                accessKeyId: accessKey,
+                secretAccessKey: secretKey, // Secret access key defined through an environment variable.
+            },
+        });
+    }
+    get client() {
+        return this._client;
+    }
+}
+exports.s3 = s3;
+exports.s3Client = (() => __awaiter(void 0, void 0, void 0, function* () {
+    const S3_ENDPOINT = yield secret_manager_client_1.secretManagerClient.getSecretValue("S3_ENDPOINT");
+    if (!S3_ENDPOINT) {
+        throw new Error("Unable to get S3_ENDPOINT");
+    }
+    const S3_ACCESS_KEY = yield secret_manager_client_1.secretManagerClient.getSecretValue("S3_ACCESS_KEY");
+    if (!S3_ACCESS_KEY) {
+        throw new Error("Unable to get S3_ACCESS_KEY");
+    }
+    const S3_SECRET_KEY = yield secret_manager_client_1.secretManagerClient.getSecretValue("S3_SECRET_KEY");
+    if (!S3_SECRET_KEY) {
+        throw new Error("Unable to get S3_SECRET_KEY");
+    }
+    const S3_REGION = yield secret_manager_client_1.secretManagerClient.getSecretValue("S3_REGION");
+    if (!S3_REGION) {
+        throw new Error("Unable to get S3_REGION");
+    }
+    return new s3(S3_ENDPOINT, S3_REGION, S3_ACCESS_KEY, S3_SECRET_KEY);
+}))();

package/build/common-server/src/clients/secret-manager-client.d.ts

@@ -0,0 +1,11 @@
+import { SecretManagerServiceClient } from "@google-cloud/secret-manager";
+import { RioEnv } from "../../../common/src/types/rio-env";
+declare class SecretManagerClient {
+    private env;
+    client: SecretManagerServiceClient;
+    projectId: string;
+    constructor(env: RioEnv);
+    getSecretValue(secretId: string): Promise<string | null>;
+}
+export declare const secretManagerClient: SecretManagerClient;
+export {};

package/build/common-server/src/clients/secret-manager-client.js

@@ -0,0 +1,90 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.secretManagerClient = void 0;
+const secret_manager_1 = require("@google-cloud/secret-manager");
+const rio_env_1 = require("../../../common/src/types/rio-env");
+const fs = __importStar(require("fs"));
+class SecretManagerClient {
+    constructor(env) {
+        this.env = env;
+        const secretFilePath = "/etc/secrets/secret-manager-service-account-key.json";
+        const secretFileContents = fs.readFileSync(secretFilePath, "utf8");
+        const secretData = JSON.parse(secretFileContents);
+        this.projectId = secretData.project_id;
+        const clientEmail = secretData.client_email;
+        const privateKey = secretData.private_key;
+        this.client = new secret_manager_1.SecretManagerServiceClient({
+            projectId: this.projectId,
+            credentials: {
+                client_email: clientEmail,
+                private_key: privateKey,
+            },
+        });
+    }
+    getSecretValue(secretId) {
+        var _a, _b, _c, _d;
+        return __awaiter(this, void 0, void 0, function* () {
+            let file;
+            if (this.env === rio_env_1.RioEnv.Development) {
+                file = "dev-secrets";
+            }
+            else if (this.env === rio_env_1.RioEnv.Sandbox) {
+                file = "sandbox-secrets";
+            }
+            else if (this.env === rio_env_1.RioEnv.Staging) {
+                file = "staging-secrets";
+            }
+            else if (this.env === rio_env_1.RioEnv.Production) {
+                file = "production-secrets";
+            }
+            try {
+                // Access the secret version
+                const [version] = yield this.client.accessSecretVersion({
+                    name: `projects/${this.projectId}/secrets/${file}/versions/latest`,
+                });
+                if (!((_b = (_a = version.payload) === null || _a === void 0 ? void 0 : _a.data) === null || _b === void 0 ? void 0 : _b.toString())) {
+                    throw new Error();
+                }
+                const secrets = JSON.parse((_d = (_c = version.payload) === null || _c === void 0 ? void 0 : _c.data) === null || _d === void 0 ? void 0 : _d.toString());
+                return secrets[secretId];
+            }
+            catch (err) {
+                console.error(`Failed to access secret ${secretId}: ${err}`);
+                return null;
+            }
+        });
+    }
+}
+exports.secretManagerClient = new SecretManagerClient(process.env.RIO_ENV || process.env.NEXT_PUBLIC_RIO_ENV);

package/build/{index.d.ts → common-server/src/index.d.ts}

@@ -14,7 +14,6 @@ export * from "./middlewares/validate-kyc";
 export * from "./middlewares/authorize";
 export * from "./services/apiKey";
 export * from "./services/password";
-export * from "./services/s3";
 export * from "./models/admin-auth";
 export * from "./models/auth";
 export * from "./models/business-user";
@@ -38,4 +37,6 @@ export * from "./clients/fireblocks-client";
 export * from "./clients/kapstar-client";
 export * from "./clients/etherscan-client";
 export * from "./clients/rio-client";
+export * from "./clients/s3-client";
+export * from "./clients/secret-manager-client";
 export * from "./helpers/get-user-helper";

package/build/{index.js → common-server/src/index.js}

@@ -30,7 +30,6 @@ __exportStar(require("./middlewares/validate-kyc"), exports);
 __exportStar(require("./middlewares/authorize"), exports);
 __exportStar(require("./services/apiKey"), exports);
 __exportStar(require("./services/password"), exports);
-__exportStar(require("./services/s3"), exports);
 __exportStar(require("./models/admin-auth"), exports);
 __exportStar(require("./models/auth"), exports);
 __exportStar(require("./models/business-user"), exports);
@@ -54,4 +53,6 @@ __exportStar(require("./clients/fireblocks-client"), exports);
 __exportStar(require("./clients/kapstar-client"), exports);
 __exportStar(require("./clients/etherscan-client"), exports);
 __exportStar(require("./clients/rio-client"), exports);
+__exportStar(require("./clients/s3-client"), exports);
+__exportStar(require("./clients/secret-manager-client"), exports);
 __exportStar(require("./helpers/get-user-helper"), exports);

package/build/{middlewares → common-server/src/middlewares}/authorize.js

@@ -20,12 +20,17 @@ const partner_1 = require("../models/partner");
 const common_1 = require("@riocrypto/common");
 const auth_1 = require("../models/auth");
 const apiKey_1 = require("../services/apiKey");
+const secret_manager_client_1 = require("../clients/secret-manager-client");
 const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(void 0, void 0, void 0, function* () {
     var _a, _b, _c, _d, _e, _f, _g, _h;
     let missingKYC = false;
     if (authorizationTypes.includes(common_1.AuthorizationType.AdminAPI)) {
         let apiKey = req.header("x-api-key");
-        if (apiKey === process.env.ORIGINAL_ADMIN_API_KEY) {
+        const ADMIN_API_KEY = yield secret_manager_client_1.secretManagerClient.getSecretValue("ADMIN_API_KEY");
+        if (!ADMIN_API_KEY) {
+            throw new Error("Unable to get ADMIN_API_KEY");
+        }
+        if (apiKey === ADMIN_API_KEY) {
             req.validAdminApiKey = true;
         }
     }
@@ -63,7 +68,11 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
         }
         else if ((_a = req.cookies) === null || _a === void 0 ? void 0 : _a.accessToken) {
             try {
-                const payload = jsonwebtoken_1.default.verify(req.cookies.accessToken, process.env.JWT_KEY);
+                const ACCESS_TOKEN_SECRET = yield secret_manager_client_1.secretManagerClient.getSecretValue("ACCESS_TOKEN_SECRET");
+                if (!ACCESS_TOKEN_SECRET) {
+                    throw new Error("Unable to get ACCESS_TOKEN_SECRET");
+                }
+                const payload = jsonwebtoken_1.default.verify(req.cookies.accessToken, ACCESS_TOKEN_SECRET);
                 req.currentAuth = payload;
             }
             catch (err) { }
@@ -80,7 +89,11 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
     if (authorizationTypes.includes(common_1.AuthorizationType.Admin)) {
         if ((_f = req.cookies) === null || _f === void 0 ? void 0 : _f.adminAccessToken) {
             try {
-                const payload = jsonwebtoken_1.default.verify(req.cookies.adminAccessToken, process.env.JWT_KEY_ADMIN);
+                const ADMIN_ACCESS_TOKEN_SECRET = yield secret_manager_client_1.secretManagerClient.getSecretValue("ADMIN_ACCESS_TOKEN_SECRET");
+                if (!ADMIN_ACCESS_TOKEN_SECRET) {
+                    throw new Error("Unable to get ADMIN_ACCESS_TOKEN_SECRET");
+                }
+                const payload = jsonwebtoken_1.default.verify(req.cookies.adminAccessToken, ADMIN_ACCESS_TOKEN_SECRET);
                 req.currentAdminAuth = payload;
             }
             catch (err) { }

package/build/{middlewares → common-server/src/middlewares}/current-admin-auth.d.ts

@@ -11,5 +11,5 @@ declare global {
         }
     }
 }
-export declare const currentAdminAuth: (req: Request, res: Response, next: NextFunction) => void;
+export declare const currentAdminAuth: (req: Request, res: Response, next: NextFunction) => Promise<void>;
 export {};

package/build/common-server/src/middlewares/current-admin-auth.js

@@ -0,0 +1,34 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.currentAdminAuth = void 0;
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const secret_manager_client_1 = require("../clients/secret-manager-client");
+const currentAdminAuth = (req, res, next) => __awaiter(void 0, void 0, void 0, function* () {
+    var _a;
+    if (!((_a = req.cookies) === null || _a === void 0 ? void 0 : _a.adminAccesToken)) {
+        return next();
+    }
+    try {
+        const ADMIN_ACCESS_TOKEN_SECRET = yield secret_manager_client_1.secretManagerClient.getSecretValue("ADMIN_ACCESS_TOKEN_SECRET");
+        if (!ADMIN_ACCESS_TOKEN_SECRET) {
+            throw new Error("ADMIN_ACCESS_TOKEN_SECRET");
+        }
+        const payload = jsonwebtoken_1.default.verify(req.cookies.adminAccesToken, ADMIN_ACCESS_TOKEN_SECRET);
+        req.currentAdminAuth = payload;
+    }
+    catch (err) { }
+    next();
+});
+exports.currentAdminAuth = currentAdminAuth;

package/build/{middlewares → common-server/src/middlewares}/current-auth.d.ts

@@ -12,5 +12,5 @@ declare global {
         }
     }
 }
-export declare const currentAuth: (req: Request, res: Response, next: NextFunction) => void;
+export declare const currentAuth: (req: Request, res: Response, next: NextFunction) => Promise<void>;
 export {};

package/build/common-server/src/middlewares/current-auth.js

@@ -0,0 +1,34 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.currentAuth = void 0;
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const secret_manager_client_1 = require("../clients/secret-manager-client");
+const currentAuth = (req, res, next) => __awaiter(void 0, void 0, void 0, function* () {
+    var _a;
+    if (!((_a = req.cookies) === null || _a === void 0 ? void 0 : _a.accessToken)) {
+        return next();
+    }
+    try {
+        const ACCESS_TOKEN_SECRET = yield secret_manager_client_1.secretManagerClient.getSecretValue("ACCESS_TOKEN_SECRET");
+        if (!ACCESS_TOKEN_SECRET) {
+            throw new Error("Unable to get ACCESS_TOKEN_SECRET");
+        }
+        const payload = jsonwebtoken_1.default.verify(req.cookies.accessToken, ACCESS_TOKEN_SECRET);
+        req.currentAuth = payload;
+    }
+    catch (err) { }
+    next();
+});
+exports.currentAuth = currentAuth;

package/build/{middlewares → common-server/src/middlewares}/get-partner.js

@@ -16,10 +16,15 @@ exports.getPartner = void 0;
 const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
 const partner_1 = require("../models/partner");
 const apiKey_1 = require("../services/apiKey");
+const secret_manager_client_1 = require("../clients/secret-manager-client");
 const getPartner = (req, res, next, mongoose) => __awaiter(void 0, void 0, void 0, function* () {
     try {
         if (!req.headers["x-api-key"]) {
-            const payload = jsonwebtoken_1.default.verify(req.cookies.partnerAuthJwt, process.env.JWT_KEY_PARTNER);
+            const PARTNER_ACCESS_TOKEN_SECRET = yield secret_manager_client_1.secretManagerClient.getSecretValue("PARTNER_ACCESS_TOKEN_SECRET");
+            if (!PARTNER_ACCESS_TOKEN_SECRET) {
+                throw new Error("Unable to get PARTNER_ACCESS_TOKEN_SECRET");
+            }
+            const payload = jsonwebtoken_1.default.verify(req.cookies.partnerAuthJwt, PARTNER_ACCESS_TOKEN_SECRET);
             req.partnerId = payload.partnerId;
         }
         else {

package/build/{middlewares → common-server/src/middlewares}/verify-admin-api-key.d.ts

@@ -6,4 +6,4 @@ declare global {
         }
     }
 }
-export declare const verifyAdminApiKey: (req: Request, res: Response, next: NextFunction) => void;
+export declare const verifyAdminApiKey: (req: Request, res: Response, next: NextFunction) => Promise<void>;

package/build/common-server/src/middlewares/verify-admin-api-key.js

@@ -0,0 +1,25 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyAdminApiKey = void 0;
+const secret_manager_client_1 = require("../clients/secret-manager-client");
+const verifyAdminApiKey = (req, res, next) => __awaiter(void 0, void 0, void 0, function* () {
+    let apiKey = req.header("x-api-key");
+    const ADMIN_API_KEY = yield secret_manager_client_1.secretManagerClient.getSecretValue("ADMIN_API_KEY");
+    if (!ADMIN_API_KEY) {
+        throw new Error("Unable to get ADMIN_API_KEY");
+    }
+    if (apiKey === ADMIN_API_KEY) {
+        req.validAdminApiKey = true;
+    }
+    next();
+});
+exports.verifyAdminApiKey = verifyAdminApiKey;

package/build/{services → common-server/src/services}/apiKey.js

@@ -11,10 +11,15 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ApiKey = void 0;
 const crypto_1 = require("crypto");
+const secret_manager_client_1 = require("../clients/secret-manager-client");
 class ApiKey {
     static toHash(apiKey) {
         return __awaiter(this, void 0, void 0, function* () {
-            const salt = process.env.API_KEY_SALT;
+            const API_KEY_SALT = yield secret_manager_client_1.secretManagerClient.getSecretValue("API_KEY_SALT");
+            if (!API_KEY_SALT) {
+                throw new Error("Unable to get API_KEY_SALT");
+            }
+            const salt = API_KEY_SALT;
             const hash = (0, crypto_1.createHmac)("sha256", salt);
             hash.update(apiKey);
             return hash.digest("hex");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riocrypto/common-server",
-  "version": "1.0.548",
+  "version": "1.0.556",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -22,7 +22,7 @@
   },
   "dependencies": {
     "@aws-sdk/client-s3": "^3.297.0",
-    "@riocrypto/common": "^1.0.548",
+    "@riocrypto/common": "^1.0.551",
     "@types/express": "^4.17.13",
     "axios": "^0.27.2",
     "ccxt": "^3.0.30",

package/build/middlewares/current-admin-auth.js

@@ -1,20 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.currentAdminAuth = void 0;
-const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
-const currentAdminAuth = (req, res, next) => {
-    var _a;
-    if (!((_a = req.cookies) === null || _a === void 0 ? void 0 : _a.adminAccesToken)) {
-        return next();
-    }
-    try {
-        const payload = jsonwebtoken_1.default.verify(req.cookies.adminAccesToken, process.env.JWT_KEY_ADMIN);
-        req.currentAdminAuth = payload;
-    }
-    catch (err) { }
-    next();
-};
-exports.currentAdminAuth = currentAdminAuth;

package/build/middlewares/current-auth.js

@@ -1,20 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.currentAuth = void 0;
-const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
-const currentAuth = (req, res, next) => {
-    var _a;
-    if (!((_a = req.cookies) === null || _a === void 0 ? void 0 : _a.accessToken)) {
-        return next();
-    }
-    try {
-        const payload = jsonwebtoken_1.default.verify(req.cookies.accessToken, process.env.JWT_KEY);
-        req.currentAuth = payload;
-    }
-    catch (err) { }
-    next();
-};
-exports.currentAuth = currentAuth;

package/build/middlewares/verify-admin-api-key.js

@@ -1,11 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyAdminApiKey = void 0;
-const verifyAdminApiKey = (req, res, next) => {
-    let apiKey = req.header("x-api-key");
-    if (apiKey === process.env.ORIGINAL_ADMIN_API_KEY) {
-        req.validAdminApiKey = true;
-    }
-    next();
-};
-exports.verifyAdminApiKey = verifyAdminApiKey;

package/build/services/s3.d.ts

@@ -1,5 +0,0 @@
-export declare class s3 {
-    _client: any;
-    constructor();
-    get client(): any;
-}

package/build/services/s3.js

@@ -1,21 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.s3 = void 0;
-const client_s3_1 = require("@aws-sdk/client-s3");
-class s3 {
-    constructor() {
-        this._client = new client_s3_1.S3Client({
-            endpoint: process.env.S3_ENDPOINT,
-            forcePathStyle: false,
-            region: process.env.S3_REGION,
-            credentials: {
-                accessKeyId: process.env.S3_ACCESS_KEY,
-                secretAccessKey: process.env.S3_SECRET_KEY, // Secret access key defined through an environment variable.
-            },
-        });
-    }
-    get client() {
-        return this._client;
-    }
-}
-exports.s3 = s3;