@things-factory/attachment-base 4.3.380 → 4.3.424

package/dist-server/attachment-const.js

@@ -1,9 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ATTACHMENT_PATH = exports.INVSTORAGE = exports.AWBSTORAGE = exports.STORAGE = void 0;
+exports.ATTACHMENT_PATH = exports.INVSTORAGE = exports.AWSCREDENTIAL = exports.AWBSTORAGE = exports.STORAGE = void 0;
 const env_1 = require("@things-factory/env");
 exports.STORAGE = env_1.config.get('storage');
 exports.AWBSTORAGE = env_1.config.get('awbFileStorage');
+exports.AWSCREDENTIAL = env_1.config.get('awsCredential');
 exports.INVSTORAGE = env_1.config.get('invoiceFileStorage');
 exports.ATTACHMENT_PATH = env_1.config.get('attachmentPath', 'attachment');
 //# sourceMappingURL=attachment-const.js.map

package/dist-server/attachment-const.js.map

@@ -1 +1 @@
-{"version":3,"file":"attachment-const.js","sourceRoot":"","sources":["../server/attachment-const.ts"],"names":[],"mappings":";;;AAAA,6CAA4C;AAEjC,QAAA,OAAO,GAAQ,YAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;AACpC,QAAA,UAAU,GAAQ,YAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;AAC9C,QAAA,UAAU,GAAQ,YAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;AAChD,QAAA,eAAe,GAAW,YAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAA"}
+{"version":3,"file":"attachment-const.js","sourceRoot":"","sources":["../server/attachment-const.ts"],"names":[],"mappings":";;;AAAA,6CAA4C;AAEjC,QAAA,OAAO,GAAQ,YAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;AACpC,QAAA,UAAU,GAAQ,YAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;AAC9C,QAAA,aAAa,GAAQ,YAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;AAChD,QAAA,UAAU,GAAQ,YAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;AAChD,QAAA,eAAe,GAAW,YAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAA"}

package/dist-server/awb-storage-s3.js

@@ -1,19 +1,43 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const client_s3_1 = require("@aws-sdk/client-s3");
+const client_secrets_manager_1 = require("@aws-sdk/client-secrets-manager");
 const lib_storage_1 = require("@aws-sdk/lib-storage");
 const env_1 = require("@things-factory/env");
 const attachment_const_1 = require("./attachment-const");
 if (attachment_const_1.AWBSTORAGE && attachment_const_1.AWBSTORAGE.type == 's3') {
-    const client = new client_s3_1.S3Client({
-        credentials: {
-            accessKeyId: attachment_const_1.AWBSTORAGE.accessKeyId,
-            secretAccessKey: attachment_const_1.AWBSTORAGE.secretAccessKey
-        },
-        region: attachment_const_1.AWBSTORAGE.region
-    });
+    const getAWSSecret = async () => {
+        const secretManager = new client_secrets_manager_1.SecretsManagerClient({ region: attachment_const_1.AWSCREDENTIAL.region });
+        const secretManagerParams = {
+            SecretId: attachment_const_1.AWSCREDENTIAL.secretName,
+            VersionStage: 'AWSCURRENT'
+        };
+        const command = new client_secrets_manager_1.GetSecretValueCommand(secretManagerParams);
+        try {
+            const data = await secretManager.send(command);
+            const dataSecretString = data.SecretString;
+            if (dataSecretString) {
+                const secretString = JSON.parse(dataSecretString);
+                return { accessKeyId: secretString.accessKeyId, secretAccessKey: secretString.secretAccessKey };
+            }
+            else {
+                return null;
+            }
+        }
+        catch (error) {
+            console.log(`[SFTP Get Secret]: ${error}`);
+        }
+    };
     /* upload file */
     attachment_const_1.AWBSTORAGE.uploadFile = async ({ stream, filename }) => {
+        const { accessKeyId, secretAccessKey } = await getAWSSecret();
+        const client = new client_s3_1.S3Client({
+            credentials: {
+                accessKeyId: accessKeyId,
+                secretAccessKey: secretAccessKey
+            },
+            region: attachment_const_1.AWSCREDENTIAL.region
+        });
         const upload = new lib_storage_1.Upload({
             client,
             params: {

package/dist-server/awb-storage-s3.js.map

@@ -1 +1 @@
-{"version":3,"file":"awb-storage-s3.js","sourceRoot":"","sources":["../server/awb-storage-s3.ts"],"names":[],"mappings":";;AAAA,kDAA6C;AAC7C,sDAA6C;AAC7C,6CAA4C;AAE5C,yDAA+C;AAE/C,IAAI,6BAAU,IAAI,6BAAU,CAAC,IAAI,IAAI,IAAI,EAAE;IACzC,MAAM,MAAM,GAAG,IAAI,oBAAQ,CAAC;QAC1B,WAAW,EAAE;YACX,WAAW,EAAE,6BAAU,CAAC,WAAW;YACnC,eAAe,EAAE,6BAAU,CAAC,eAAe;SAC5C;QACD,MAAM,EAAE,6BAAU,CAAC,MAAM;KAC1B,CAAC,CAAA;IAEF,iBAAiB;IACjB,6BAAU,CAAC,UAAU,GAAG,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,IAAI,oBAAM,CAAC;YACxB,MAAM;YACN,MAAM,EAAE;gBACN,MAAM,EAAE,6BAAU,CAAC,UAAU;gBAC7B,GAAG,EAAE,GAAG,QAAQ,MAAM;gBACtB,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,iBAAiB;aAC/B;SACF,CAAC,CAAA;QAEF,IAAI,MAAM,CAAA;QACV,IAAI,GAAG,CAAA;QACP,IAAI;YACF,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAQ,CAAA;YACrC,GAAG,GAAG,WAAW,6BAAU,CAAC,UAAU,OAAO,6BAAU,CAAC,MAAM,kBAAkB,QAAQ,MAAM,CAAA;SAC/F;QAAC,OAAO,CAAC,EAAE;YACV,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;SACf;QAED,OAAO;YACL,MAAM;YACN,GAAG;SACJ,CAAA;IACH,CAAC,CAAA;IAED,YAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAA;CACxD"}
+{"version":3,"file":"awb-storage-s3.js","sourceRoot":"","sources":["../server/awb-storage-s3.ts"],"names":[],"mappings":";;AAAA,kDAA6C;AAC7C,4EAA6F;AAC7F,sDAA6C;AAC7C,6CAA4C;AAE5C,yDAA8D;AAE9D,IAAI,6BAAU,IAAI,6BAAU,CAAC,IAAI,IAAI,IAAI,EAAE;IACzC,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;QAC9B,MAAM,aAAa,GAAG,IAAI,6CAAoB,CAAC,EAAE,MAAM,EAAE,gCAAa,CAAC,MAAM,EAAE,CAAC,CAAA;QAChF,MAAM,mBAAmB,GAAG;YAC1B,QAAQ,EAAE,gCAAa,CAAC,UAAU;YAClC,YAAY,EAAE,YAAY;SAC3B,CAAA;QACD,MAAM,OAAO,GAAG,IAAI,8CAAqB,CAAC,mBAAmB,CAAC,CAAA;QAC9D,IAAI;YACF,MAAM,IAAI,GAAQ,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACnD,MAAM,gBAAgB,GAAQ,IAAI,CAAC,YAAY,CAAA;YAC/C,IAAI,gBAAgB,EAAE;gBACpB,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;gBAEjD,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,eAAe,EAAE,YAAY,CAAC,eAAe,EAAE,CAAA;aAChG;iBAAM;gBACL,OAAO,IAAI,CAAA;aACZ;SACF;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAA;SAC3C;IACH,CAAC,CAAA;IAED,iBAAiB;IACjB,6BAAU,CAAC,UAAU,GAAG,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;QACrD,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,MAAM,YAAY,EAAE,CAAA;QAC7D,MAAM,MAAM,GAAG,IAAI,oBAAQ,CAAC;YAC1B,WAAW,EAAE;gBACX,WAAW,EAAE,WAAW;gBACxB,eAAe,EAAE,eAAe;aACjC;YACD,MAAM,EAAE,gCAAa,CAAC,MAAM;SAC7B,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,IAAI,oBAAM,CAAC;YACxB,MAAM;YACN,MAAM,EAAE;gBACN,MAAM,EAAE,6BAAU,CAAC,UAAU;gBAC7B,GAAG,EAAE,GAAG,QAAQ,MAAM;gBACtB,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,iBAAiB;aAC/B;SACF,CAAC,CAAA;QAEF,IAAI,MAAM,CAAA;QACV,IAAI,GAAG,CAAA;QACP,IAAI;YACF,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAQ,CAAA;YACrC,GAAG,GAAG,WAAW,6BAAU,CAAC,UAAU,OAAO,6BAAU,CAAC,MAAM,kBAAkB,QAAQ,MAAM,CAAA;SAC/F;QAAC,OAAO,CAAC,EAAE;YACV,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;SACf;QAED,OAAO;YACL,MAAM;YACN,GAAG;SACJ,CAAA;IACH,CAAC,CAAA;IAED,YAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAA;CACxD"}

package/dist-server/storage-s3.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const uuid_1 = require("uuid");
 const client_s3_1 = require("@aws-sdk/client-s3");
+const client_secrets_manager_1 = require("@aws-sdk/client-secrets-manager");
 const lib_storage_1 = require("@aws-sdk/lib-storage");
 const s3_presigned_post_1 = require("@aws-sdk/s3-presigned-post");
 const env_1 = require("@things-factory/env");
@@ -9,13 +10,28 @@ const attachment_const_1 = require("./attachment-const");
 const mime = require('mime');
 const { fs } = require('memfs');
 if (attachment_const_1.STORAGE && attachment_const_1.STORAGE.type == 's3') {
-    const client = new client_s3_1.S3Client({
-        credentials: {
-            accessKeyId: attachment_const_1.STORAGE.accessKeyId,
-            secretAccessKey: attachment_const_1.STORAGE.secretAccessKey
-        },
-        region: attachment_const_1.STORAGE.region
-    });
+    const getAWSSecret = async () => {
+        const secretManager = new client_secrets_manager_1.SecretsManagerClient({ region: attachment_const_1.AWSCREDENTIAL.region });
+        const secretManagerParams = {
+            SecretId: attachment_const_1.AWSCREDENTIAL.secretName,
+            VersionStage: 'AWSCURRENT'
+        };
+        const command = new client_secrets_manager_1.GetSecretValueCommand(secretManagerParams);
+        try {
+            const data = await secretManager.send(command);
+            const dataSecretString = data.SecretString;
+            if (dataSecretString) {
+                const secretString = JSON.parse(dataSecretString);
+                return { accessKeyId: secretString.accessKeyId, secretAccessKey: secretString.secretAccessKey };
+            }
+            else {
+                return null;
+            }
+        }
+        catch (error) {
+            console.log(`[SFTP Get Secret]: ${error}`);
+        }
+    };
     const streamToBuffer = (stream) => new Promise((resolve, reject) => {
         const chunks = [];
         stream.on('data', chunk => chunks.push(chunk));
@@ -28,6 +44,14 @@ if (attachment_const_1.STORAGE && attachment_const_1.STORAGE.type == 's3') {
         const ext = filename.split('.').pop();
         const key = ext ? `${id}.${ext}` : id;
         var size = 0;
+        const { accessKeyId, secretAccessKey } = await getAWSSecret();
+        const client = new client_s3_1.S3Client({
+            credentials: {
+                accessKeyId: accessKeyId,
+                secretAccessKey: secretAccessKey
+            },
+            region: attachment_const_1.AWSCREDENTIAL.region
+        });
         const upload = new lib_storage_1.Upload({
             client,
             params: {
@@ -45,6 +69,14 @@ if (attachment_const_1.STORAGE && attachment_const_1.STORAGE.type == 's3') {
         };
     };
     attachment_const_1.STORAGE.deleteFile = async (path) => {
+        const { accessKeyId, secretAccessKey } = await getAWSSecret();
+        const client = new client_s3_1.S3Client({
+            credentials: {
+                accessKeyId: accessKeyId,
+                secretAccessKey: secretAccessKey
+            },
+            region: attachment_const_1.AWSCREDENTIAL.region
+        });
         const command = new client_s3_1.DeleteObjectCommand({
             Bucket: attachment_const_1.STORAGE.bucketName,
             Key: path
@@ -53,6 +85,14 @@ if (attachment_const_1.STORAGE && attachment_const_1.STORAGE.type == 's3') {
     };
     /* TODO Streaming to Streaming 으로 구현하라. */
     attachment_const_1.STORAGE.sendFile = async (context, attachment, next) => {
+        const { accessKeyId, secretAccessKey } = await getAWSSecret();
+        const client = new client_s3_1.S3Client({
+            credentials: {
+                accessKeyId: accessKeyId,
+                secretAccessKey: secretAccessKey
+            },
+            region: attachment_const_1.AWSCREDENTIAL.region
+        });
         const result = await client.send(new client_s3_1.GetObjectCommand({
             Bucket: attachment_const_1.STORAGE.bucketName,
             Key: attachment
@@ -67,6 +107,14 @@ if (attachment_const_1.STORAGE && attachment_const_1.STORAGE.type == 's3') {
         context.body = result.Body;
     };
     attachment_const_1.STORAGE.readFile = async (attachment, encoding) => {
+        const { accessKeyId, secretAccessKey } = await getAWSSecret();
+        const client = new client_s3_1.S3Client({
+            credentials: {
+                accessKeyId: accessKeyId,
+                secretAccessKey: secretAccessKey
+            },
+            region: attachment_const_1.AWSCREDENTIAL.region
+        });
         /*
          * refered to
          * https://transang.me/modern-fetch-and-how-to-get-buffer-output-from-aws-sdk-v3-getobjectcommand/#the-body-type
@@ -87,6 +135,14 @@ if (attachment_const_1.STORAGE && attachment_const_1.STORAGE.type == 's3') {
     attachment_const_1.STORAGE.generateUploadURL = async (type) => {
         const expiresInMinutes = 1;
         const id = (0, uuid_1.v4)();
+        const { accessKeyId, secretAccessKey } = await getAWSSecret();
+        const client = new client_s3_1.S3Client({
+            credentials: {
+                accessKeyId: accessKeyId,
+                secretAccessKey: secretAccessKey
+            },
+            region: attachment_const_1.AWSCREDENTIAL.region
+        });
         return await (0, s3_presigned_post_1.createPresignedPost)(client, {
             Bucket: attachment_const_1.STORAGE.bucketName,
             Key: id,

package/dist-server/storage-s3.js.map

@@ -1 +1 @@
-{"version":3,"file":"storage-s3.js","sourceRoot":"","sources":["../server/storage-s3.ts"],"names":[],"mappings":";;AACA,+BAAmC;AAEnC,kDAA2G;AAC3G,sDAA6C;AAC7C,kEAAgE;AAChE,6CAA4C;AAE5C,yDAA4C;AAE5C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;AAC5B,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;AAE/B,IAAI,0BAAO,IAAI,0BAAO,CAAC,IAAI,IAAI,IAAI,EAAE;IACnC,MAAM,MAAM,GAAG,IAAI,oBAAQ,CAAC;QAC1B,WAAW,EAAE;YACX,WAAW,EAAE,0BAAO,CAAC,WAAW;YAChC,eAAe,EAAE,0BAAO,CAAC,eAAe;SACzC;QACD,MAAM,EAAE,0BAAO,CAAC,MAAM;KACvB,CAAC,CAAA;IAEF,MAAM,cAAc,GAAG,CAAC,MAAgB,EAAE,EAAE,CAC1C,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QAC9C,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACxD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEJ,iBAAiB;IACjB,0BAAO,CAAC,UAAU,GAAG,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;QAClD,MAAM,EAAE,GAAG,IAAA,SAAM,GAAE,CAAA;QACnB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACrC,IAAI,IAAI,GAAW,CAAC,CAAA;QAEpB,MAAM,MAAM,GAAG,IAAI,oBAAM,CAAC;YACxB,MAAM;YACN,MAAM,EAAE;gBACN,MAAM,EAAE,0BAAO,CAAC,UAAU;gBAC1B,GAAG,EAAE,GAAG;gBACR,IAAI,EAAE,MAAM;gBACZ,6BAA6B;aAC9B;SACF,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAQ,CAAA;QAC3C,OAAO;YACL,EAAE;YACF,IAAI,EAAE,GAAG;YACT,IAAI;SACL,CAAA;IACH,CAAC,CAAA;IAED,0BAAO,CAAC,UAAU,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,IAAI,+BAAmB,CAAC;YACtC,MAAM,EAAE,0BAAO,CAAC,UAAU;YAC1B,GAAG,EAAE,IAAI;SACV,CAAC,CAAA;QAEF,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnC,CAAC,CAAA;IAED,0CAA0C;IAC1C,0BAAO,CAAC,QAAQ,GAAG,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,4BAAgB,CAAC;YACnB,MAAM,EAAE,0BAAO,CAAC,UAAU;YAC1B,GAAG,EAAE,UAAU;SACS,CAAC,CAC5B,CAAA;QAED,OAAO,CAAC,GAAG,CAAC;YACV,gBAAgB,EAAE,MAAM,CAAC,aAAa;YACtC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE;YAClD,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,eAAe,EAAE,0BAA0B;SAC5C,CAAC,CAAA;QAEF,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;IAC5B,CAAC,CAAA;IAED,0BAAO,CAAC,QAAQ,GAAG,KAAK,EAAE,UAAkB,EAAE,QAAgB,EAAE,EAAE;QAChE;;;WAGG;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,4BAAgB,CAAC;YACnB,MAAM,EAAE,0BAAO,CAAC,UAAU;YAC1B,GAAG,EAAE,UAAU;SACS,CAAC,CAC5B,CAAA;QAED,IAAI,IAAI,GAAG,MAAM,CAAC,IAAgB,CAAA;QAClC,IAAI,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAA;QAEvC,QAAQ,QAAQ,EAAE;YAChB,KAAK,QAAQ;gBACX,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;YAClC;gBACE,OAAO,MAAM,MAAM,CAAA;SACtB;IACH,CAAC,CAAA;IAED,0BAAO,CAAC,iBAAiB,GAAG,KAAK,EAAE,IAAY,EAA+D,EAAE;QAC9G,MAAM,gBAAgB,GAAG,CAAC,CAAA;QAC1B,MAAM,EAAE,GAAG,IAAA,SAAM,GAAE,CAAA;QAEnB,OAAO,MAAM,IAAA,uCAAmB,EAAC,MAAM,EAAE;YACvC,MAAM,EAAE,0BAAO,CAAC,UAAU;YAC1B,GAAG,EAAE,EAAE;YACP,OAAO,EAAE,gBAAgB,GAAG,EAAE;YAC9B,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;SAC5C,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,YAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;CAC3C"}
+{"version":3,"file":"storage-s3.js","sourceRoot":"","sources":["../server/storage-s3.ts"],"names":[],"mappings":";;AACA,+BAAmC;AAEnC,kDAA2G;AAC3G,4EAA6F;AAC7F,sDAA6C;AAC7C,kEAAgE;AAChE,6CAA4C;AAE5C,yDAA2D;AAE3D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;AAC5B,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;AAE/B,IAAI,0BAAO,IAAI,0BAAO,CAAC,IAAI,IAAI,IAAI,EAAE;IACnC,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;QAC9B,MAAM,aAAa,GAAG,IAAI,6CAAoB,CAAC,EAAE,MAAM,EAAE,gCAAa,CAAC,MAAM,EAAE,CAAC,CAAA;QAChF,MAAM,mBAAmB,GAAG;YAC1B,QAAQ,EAAE,gCAAa,CAAC,UAAU;YAClC,YAAY,EAAE,YAAY;SAC3B,CAAA;QACD,MAAM,OAAO,GAAG,IAAI,8CAAqB,CAAC,mBAAmB,CAAC,CAAA;QAC9D,IAAI;YACF,MAAM,IAAI,GAAQ,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACnD,MAAM,gBAAgB,GAAQ,IAAI,CAAC,YAAY,CAAA;YAC/C,IAAI,gBAAgB,EAAE;gBACpB,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;gBAEjD,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,eAAe,EAAE,YAAY,CAAC,eAAe,EAAE,CAAA;aAChG;iBAAM;gBACL,OAAO,IAAI,CAAA;aACZ;SACF;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAA;SAC3C;IACH,CAAC,CAAA;IAED,MAAM,cAAc,GAAG,CAAC,MAAgB,EAAE,EAAE,CAC1C,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QAC9C,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACxD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEJ,iBAAiB;IACjB,0BAAO,CAAC,UAAU,GAAG,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;QAClD,MAAM,EAAE,GAAG,IAAA,SAAM,GAAE,CAAA;QACnB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACrC,IAAI,IAAI,GAAW,CAAC,CAAA;QAEpB,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,MAAM,YAAY,EAAE,CAAA;QAC7D,MAAM,MAAM,GAAG,IAAI,oBAAQ,CAAC;YAC1B,WAAW,EAAE;gBACX,WAAW,EAAE,WAAW;gBACxB,eAAe,EAAE,eAAe;aACjC;YACD,MAAM,EAAE,gCAAa,CAAC,MAAM;SAC7B,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,IAAI,oBAAM,CAAC;YACxB,MAAM;YACN,MAAM,EAAE;gBACN,MAAM,EAAE,0BAAO,CAAC,UAAU;gBAC1B,GAAG,EAAE,GAAG;gBACR,IAAI,EAAE,MAAM;gBACZ,6BAA6B;aAC9B;SACF,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAQ,CAAA;QAC3C,OAAO;YACL,EAAE;YACF,IAAI,EAAE,GAAG;YACT,IAAI;SACL,CAAA;IACH,CAAC,CAAA;IAED,0BAAO,CAAC,UAAU,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;QAC1C,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,MAAM,YAAY,EAAE,CAAA;QAC7D,MAAM,MAAM,GAAG,IAAI,oBAAQ,CAAC;YAC1B,WAAW,EAAE;gBACX,WAAW,EAAE,WAAW;gBACxB,eAAe,EAAE,eAAe;aACjC;YACD,MAAM,EAAE,gCAAa,CAAC,MAAM;SAC7B,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,IAAI,+BAAmB,CAAC;YACtC,MAAM,EAAE,0BAAO,CAAC,UAAU;YAC1B,GAAG,EAAE,IAAI;SACV,CAAC,CAAA;QAEF,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnC,CAAC,CAAA;IAED,0CAA0C;IAC1C,0BAAO,CAAC,QAAQ,GAAG,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,MAAM,YAAY,EAAE,CAAA;QAC7D,MAAM,MAAM,GAAG,IAAI,oBAAQ,CAAC;YAC1B,WAAW,EAAE;gBACX,WAAW,EAAE,WAAW;gBACxB,eAAe,EAAE,eAAe;aACjC;YACD,MAAM,EAAE,gCAAa,CAAC,MAAM;SAC7B,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,4BAAgB,CAAC;YACnB,MAAM,EAAE,0BAAO,CAAC,UAAU;YAC1B,GAAG,EAAE,UAAU;SACS,CAAC,CAC5B,CAAA;QAED,OAAO,CAAC,GAAG,CAAC;YACV,gBAAgB,EAAE,MAAM,CAAC,aAAa;YACtC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE;YAClD,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,eAAe,EAAE,0BAA0B;SAC5C,CAAC,CAAA;QAEF,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;IAC5B,CAAC,CAAA;IAED,0BAAO,CAAC,QAAQ,GAAG,KAAK,EAAE,UAAkB,EAAE,QAAgB,EAAE,EAAE;QAChE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,MAAM,YAAY,EAAE,CAAA;QAC7D,MAAM,MAAM,GAAG,IAAI,oBAAQ,CAAC;YAC1B,WAAW,EAAE;gBACX,WAAW,EAAE,WAAW;gBACxB,eAAe,EAAE,eAAe;aACjC;YACD,MAAM,EAAE,gCAAa,CAAC,MAAM;SAC7B,CAAC,CAAA;QAEF;;;WAGG;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,4BAAgB,CAAC;YACnB,MAAM,EAAE,0BAAO,CAAC,UAAU;YAC1B,GAAG,EAAE,UAAU;SACS,CAAC,CAC5B,CAAA;QAED,IAAI,IAAI,GAAG,MAAM,CAAC,IAAgB,CAAA;QAClC,IAAI,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAA;QAEvC,QAAQ,QAAQ,EAAE;YAChB,KAAK,QAAQ;gBACX,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;YAClC;gBACE,OAAO,MAAM,MAAM,CAAA;SACtB;IACH,CAAC,CAAA;IAED,0BAAO,CAAC,iBAAiB,GAAG,KAAK,EAAE,IAAY,EAA+D,EAAE;QAC9G,MAAM,gBAAgB,GAAG,CAAC,CAAA;QAC1B,MAAM,EAAE,GAAG,IAAA,SAAM,GAAE,CAAA;QAEnB,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,MAAM,YAAY,EAAE,CAAA;QAC7D,MAAM,MAAM,GAAG,IAAI,oBAAQ,CAAC;YAC1B,WAAW,EAAE;gBACX,WAAW,EAAE,WAAW;gBACxB,eAAe,EAAE,eAAe;aACjC;YACD,MAAM,EAAE,gCAAa,CAAC,MAAM;SAC7B,CAAC,CAAA;QAEF,OAAO,MAAM,IAAA,uCAAmB,EAAC,MAAM,EAAE;YACvC,MAAM,EAAE,0BAAO,CAAC,UAAU;YAC1B,GAAG,EAAE,EAAE;YACP,OAAO,EAAE,gBAAgB,GAAG,EAAE;YAC9B,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;SAC5C,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,YAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;CAC3C"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/attachment-base",
-  "version": "4.3.380",
+  "version": "4.3.424",
   "main": "dist-server/index.js",
   "browser": "client/index.js",
   "things-factory": true,
@@ -24,14 +24,15 @@
   },
   "dependencies": {
     "@aws-sdk/client-s3": "^3.46.0",
+    "@aws-sdk/client-secrets-manager": "^3.46.0",
     "@aws-sdk/lib-storage": "^3.46.0",
     "@aws-sdk/s3-presigned-post": "^3.46.0",
     "@koa/multer": "^3.0.0",
-    "@things-factory/auth-base": "^4.3.380",
-    "@things-factory/env": "^4.3.380",
+    "@things-factory/auth-base": "^4.3.424",
+    "@things-factory/env": "^4.3.381",
     "memfs": "^3.0.1",
     "mime": "^2.4.4",
     "multer": "^1.3.0"
   },
-  "gitHead": "675ea67e85a7ee10bee7639d92e0bf3eda8c48d1"
+  "gitHead": "0c04dd6934c7eb335fc5ad2dd55172b5e79cdca7"
 }

package/server/attachment-const.ts

@@ -2,5 +2,6 @@ import { config } from '@things-factory/env'
 
 export var STORAGE: any = config.get('storage')
 export var AWBSTORAGE: any = config.get('awbFileStorage')
+export var AWSCREDENTIAL: any = config.get('awsCredential')
 export var INVSTORAGE: any = config.get('invoiceFileStorage')
 export const ATTACHMENT_PATH: string = config.get('attachmentPath', 'attachment')

package/server/awb-storage-s3.ts

@@ -1,20 +1,44 @@
 import { S3Client } from '@aws-sdk/client-s3'
+import { GetSecretValueCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager'
 import { Upload } from '@aws-sdk/lib-storage'
 import { logger } from '@things-factory/env'
 
-import { AWBSTORAGE } from './attachment-const'
+import { AWBSTORAGE, AWSCREDENTIAL } from './attachment-const'
 
 if (AWBSTORAGE && AWBSTORAGE.type == 's3') {
-  const client = new S3Client({
-    credentials: {
-      accessKeyId: AWBSTORAGE.accessKeyId,
-      secretAccessKey: AWBSTORAGE.secretAccessKey
-    },
-    region: AWBSTORAGE.region
-  })
+  const getAWSSecret = async () => {
+    const secretManager = new SecretsManagerClient({ region: AWSCREDENTIAL.region })
+    const secretManagerParams = {
+      SecretId: AWSCREDENTIAL.secretName,
+      VersionStage: 'AWSCURRENT'
+    }
+    const command = new GetSecretValueCommand(secretManagerParams)
+    try {
+      const data: any = await secretManager.send(command)
+      const dataSecretString: any = data.SecretString
+      if (dataSecretString) {
+        const secretString = JSON.parse(dataSecretString)
+
+        return { accessKeyId: secretString.accessKeyId, secretAccessKey: secretString.secretAccessKey }
+      } else {
+        return null
+      }
+    } catch (error) {
+      console.log(`[SFTP Get Secret]: ${error}`)
+    }
+  }
 
   /* upload file */
   AWBSTORAGE.uploadFile = async ({ stream, filename }) => {
+    const { accessKeyId, secretAccessKey } = await getAWSSecret()
+    const client = new S3Client({
+      credentials: {
+        accessKeyId: accessKeyId,
+        secretAccessKey: secretAccessKey
+      },
+      region: AWSCREDENTIAL.region
+    })
+
     const upload = new Upload({
       client,
       params: {

package/server/storage-s3.ts

@@ -2,23 +2,38 @@ import type { Readable } from 'stream'
 import { v4 as uuidv4 } from 'uuid'
 
 import { DeleteObjectCommand, GetObjectCommand, GetObjectCommandInput, S3Client } from '@aws-sdk/client-s3'
+import { GetSecretValueCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager'
 import { Upload } from '@aws-sdk/lib-storage'
 import { createPresignedPost } from '@aws-sdk/s3-presigned-post'
 import { logger } from '@things-factory/env'
 
-import { STORAGE } from './attachment-const'
+import { AWSCREDENTIAL, STORAGE } from './attachment-const'
 
 const mime = require('mime')
 const { fs } = require('memfs')
 
 if (STORAGE && STORAGE.type == 's3') {
-  const client = new S3Client({
-    credentials: {
-      accessKeyId: STORAGE.accessKeyId,
-      secretAccessKey: STORAGE.secretAccessKey
-    },
-    region: STORAGE.region
-  })
+  const getAWSSecret = async () => {
+    const secretManager = new SecretsManagerClient({ region: AWSCREDENTIAL.region })
+    const secretManagerParams = {
+      SecretId: AWSCREDENTIAL.secretName,
+      VersionStage: 'AWSCURRENT'
+    }
+    const command = new GetSecretValueCommand(secretManagerParams)
+    try {
+      const data: any = await secretManager.send(command)
+      const dataSecretString: any = data.SecretString
+      if (dataSecretString) {
+        const secretString = JSON.parse(dataSecretString)
+
+        return { accessKeyId: secretString.accessKeyId, secretAccessKey: secretString.secretAccessKey }
+      } else {
+        return null
+      }
+    } catch (error) {
+      console.log(`[SFTP Get Secret]: ${error}`)
+    }
+  }
 
   const streamToBuffer = (stream: Readable) =>
     new Promise<Buffer>((resolve, reject) => {
@@ -35,6 +50,15 @@ if (STORAGE && STORAGE.type == 's3') {
     const key = ext ? `${id}.${ext}` : id
     var size: number = 0
 
+    const { accessKeyId, secretAccessKey } = await getAWSSecret()
+    const client = new S3Client({
+      credentials: {
+        accessKeyId: accessKeyId,
+        secretAccessKey: secretAccessKey
+      },
+      region: AWSCREDENTIAL.region
+    })
+
     const upload = new Upload({
       client,
       params: {
@@ -54,6 +78,15 @@ if (STORAGE && STORAGE.type == 's3') {
   }
 
   STORAGE.deleteFile = async (path: string) => {
+    const { accessKeyId, secretAccessKey } = await getAWSSecret()
+    const client = new S3Client({
+      credentials: {
+        accessKeyId: accessKeyId,
+        secretAccessKey: secretAccessKey
+      },
+      region: AWSCREDENTIAL.region
+    })
+
     const command = new DeleteObjectCommand({
       Bucket: STORAGE.bucketName,
       Key: path
@@ -64,6 +97,15 @@ if (STORAGE && STORAGE.type == 's3') {
 
   /* TODO Streaming to Streaming 으로 구현하라. */
   STORAGE.sendFile = async (context, attachment, next) => {
+    const { accessKeyId, secretAccessKey } = await getAWSSecret()
+    const client = new S3Client({
+      credentials: {
+        accessKeyId: accessKeyId,
+        secretAccessKey: secretAccessKey
+      },
+      region: AWSCREDENTIAL.region
+    })
+
     const result = await client.send(
       new GetObjectCommand({
         Bucket: STORAGE.bucketName,
@@ -83,6 +125,15 @@ if (STORAGE && STORAGE.type == 's3') {
   }
 
   STORAGE.readFile = async (attachment: string, encoding: string) => {
+    const { accessKeyId, secretAccessKey } = await getAWSSecret()
+    const client = new S3Client({
+      credentials: {
+        accessKeyId: accessKeyId,
+        secretAccessKey: secretAccessKey
+      },
+      region: AWSCREDENTIAL.region
+    })
+
     /*
      * refered to
      * https://transang.me/modern-fetch-and-how-to-get-buffer-output-from-aws-sdk-v3-getobjectcommand/#the-body-type
@@ -109,6 +160,15 @@ if (STORAGE && STORAGE.type == 's3') {
     const expiresInMinutes = 1
     const id = uuidv4()
 
+    const { accessKeyId, secretAccessKey } = await getAWSSecret()
+    const client = new S3Client({
+      credentials: {
+        accessKeyId: accessKeyId,
+        secretAccessKey: secretAccessKey
+      },
+      region: AWSCREDENTIAL.region
+    })
+
     return await createPresignedPost(client, {
       Bucket: STORAGE.bucketName,
       Key: id,