@things-factory/shell 6.1.182 → 6.1.189

package/dist-server/typeorm/encrypt-transform.d.ts

@@ -0,0 +1,2 @@
+import { ValueTransformer } from 'typeorm';
+export declare const encryptTransformer: ValueTransformer;

package/dist-server/typeorm/encrypt-transform.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encryptTransformer = void 0;
+const crypto_1 = require("crypto");
+const get_data_encryption_key_1 = require("./get-data-encryption-key");
+const ALGORITHM = 'aes-256-cbc';
+const KEY_LENGTH = 32;
+const SALT_LENGTH = 16;
+const IV_LENGTH = 16;
+exports.encryptTransformer = {
+    to: (entityValue) => encrypt(entityValue),
+    from: (databaseValue) => decrypt(databaseValue) // DB에서 값을 가져올 때 복호화
+};
+function encrypt(text) {
+    if (!text) {
+        return null;
+    }
+    const iv = (0, crypto_1.randomBytes)(IV_LENGTH);
+    const cipher = (0, crypto_1.createCipheriv)(ALGORITHM, get_data_encryption_key_1.dataEncryptionKey, iv);
+    const encrypted = Buffer.concat([cipher.update(text, 'utf8'), cipher.final()]);
+    return `${iv.toString('hex')}:${encrypted.toString('hex')}`;
+}
+function decrypt(text) {
+    if (!text) {
+        return null;
+    }
+    try {
+        const parts = text.split(':');
+        const iv = Buffer.from(parts.shift(), 'hex');
+        const encryptedText = Buffer.from(parts.join(':'), 'hex');
+        const decipher = (0, crypto_1.createDecipheriv)(ALGORITHM, get_data_encryption_key_1.dataEncryptionKey, iv);
+        return Buffer.concat([decipher.update(encryptedText), decipher.final()]).toString('utf8');
+    }
+    catch (err) {
+        console.error(`decryption for encrypted field failed in encryptTransformer`);
+        return null;
+    }
+}
+//# sourceMappingURL=encrypt-transform.js.map

package/dist-server/typeorm/encrypt-transform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt-transform.js","sourceRoot":"","sources":["../../server/typeorm/encrypt-transform.ts"],"names":[],"mappings":";;;AACA,mCAAkF;AAElF,uEAA6D;AAE7D,MAAM,SAAS,GAAG,aAAa,CAAA;AAC/B,MAAM,UAAU,GAAG,EAAE,CAAA;AACrB,MAAM,WAAW,GAAG,EAAE,CAAA;AACtB,MAAM,SAAS,GAAG,EAAE,CAAA;AAEP,QAAA,kBAAkB,GAAqB;IAClD,EAAE,EAAE,CAAC,WAAmB,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACjD,IAAI,EAAE,CAAC,aAAqB,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,oBAAoB;CAC7E,CAAA;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,CAAC,IAAI,EAAE;QACT,OAAO,IAAI,CAAA;KACZ;IAED,MAAM,EAAE,GAAG,IAAA,oBAAW,EAAC,SAAS,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,SAAS,EAAE,2CAAiB,EAAE,EAAE,CAAC,CAAA;IAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IAE9E,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;AAC7D,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,CAAC,IAAI,EAAE;QACT,OAAO,IAAI,CAAA;KACZ;IAED,IAAI;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC7B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAA;QAC5C,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAA;QACzD,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAAC,SAAS,EAAE,2CAAiB,EAAE,EAAE,CAAC,CAAA;QAEnE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;KAC1F;IAAC,OAAO,GAAG,EAAE;QACZ,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAA;QAC5E,OAAO,IAAI,CAAA;KACZ;AACH,CAAC","sourcesContent":["import { ValueTransformer } from 'typeorm'\nimport { createCipheriv, createDecipheriv, randomBytes, scryptSync } from 'crypto'\n\nimport { dataEncryptionKey } from './get-data-encryption-key'\n\nconst ALGORITHM = 'aes-256-cbc'\nconst KEY_LENGTH = 32\nconst SALT_LENGTH = 16\nconst IV_LENGTH = 16\n\nexport const encryptTransformer: ValueTransformer = {\n  to: (entityValue: string) => encrypt(entityValue), // DB에 저장하기 전에 암호화\n  from: (databaseValue: string) => decrypt(databaseValue) // DB에서 값을 가져올 때 복호화\n}\n\nfunction encrypt(text: string): string {\n  if (!text) {\n    return null\n  }\n\n  const iv = randomBytes(IV_LENGTH)\n  const cipher = createCipheriv(ALGORITHM, dataEncryptionKey, iv)\n  const encrypted = Buffer.concat([cipher.update(text, 'utf8'), cipher.final()])\n\n  return `${iv.toString('hex')}:${encrypted.toString('hex')}`\n}\n\nfunction decrypt(text: string): string {\n  if (!text) {\n    return null\n  }\n\n  try {\n    const parts = text.split(':')\n    const iv = Buffer.from(parts.shift(), 'hex')\n    const encryptedText = Buffer.from(parts.join(':'), 'hex')\n    const decipher = createDecipheriv(ALGORITHM, dataEncryptionKey, iv)\n\n    return Buffer.concat([decipher.update(encryptedText), decipher.final()]).toString('utf8')\n  } catch (err) {\n    console.error(`decryption for encrypted field failed in encryptTransformer`)\n    return null\n  }\n}\n"]}

package/dist-server/typeorm/encrypted-column.d.ts

@@ -0,0 +1 @@
+export declare function EncryptedColumn(): PropertyDecorator;

package/dist-server/typeorm/encrypted-column.js

@@ -0,0 +1,114 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EncryptedColumn = void 0;
+const typeorm_1 = require("typeorm");
+const ALGORITHM = 'aes-256-cbc';
+const KEY_LENGTH = 32;
+const SALT_LENGTH = 16;
+const IV_LENGTH = 16;
+function EncryptedColumn() {
+    return function (target, propertyName) {
+        (0, typeorm_1.Column)('text', { nullable: true })(target, propertyName);
+        const beforeHandlerName = `encrypt_${String(propertyName)}`;
+        const afterHandlerName = `decrypt_${String(propertyName)}`;
+        // BeforeInsert and BeforeUpdate logic
+        (0, typeorm_1.BeforeInsert)()(target, beforeHandlerName);
+        // getMetadataArgsStorage().entityListeners.push({
+        //   target: target.constructor,
+        //   propertyName: beforeHandlerName,
+        //   type: 'before-insert'
+        // })
+        (0, typeorm_1.BeforeUpdate)()(target, beforeHandlerName);
+        // getMetadataArgsStorage().entityListeners.push({
+        //   target: target.constructor,
+        //   propertyName: beforeHandlerName,
+        //   type: 'before-update'
+        // })
+        (0, typeorm_1.AfterLoad)()(target, afterHandlerName);
+        // getMetadataArgsStorage().entityListeners.push({
+        //   target: target.constructor,
+        //   propertyName: afterHandlerName,
+        //   type: 'after-load'
+        // })
+        target[beforeHandlerName] = function () {
+            // TODO 암호화 로직
+            if (this[propertyName]) {
+                // const salt = randomBytes(16).toString('hex')
+                // const key = scryptSync(process.env.ENCRYPTION_KEY!, salt, 32)
+                // const iv = randomBytes(16)
+                // const cipher = createCipheriv(ALGORITHM, key, iv)
+                // const encrypted = Buffer.concat([cipher.update(this[propertyName]), cipher.final()])
+                // this[propertyName] = `${salt}.${iv.toString('hex')}.${encrypted.toString('hex')}`
+            }
+        };
+        target[afterHandlerName] = function () {
+            // TODO 복호화 로직
+            if (this[propertyName]) {
+                // const salt = randomBytes(16).toString('hex')
+                // const key = scryptSync(process.env.ENCRYPTION_KEY!, salt, 32)
+                // const iv = randomBytes(16)
+                // const cipher = createCipheriv(ALGORITHM, key, iv)
+                // const encrypted = Buffer.concat([cipher.update(this[propertyName]), cipher.final()])
+                // this[propertyName] = `${salt}.${iv.toString('hex')}.${encrypted.toString('hex')}`
+            }
+        };
+    };
+}
+exports.EncryptedColumn = EncryptedColumn;
+// import { BeforeInsert, BeforeUpdate, Column, getMetadataArgsStorage } from 'typeorm'
+// import { randomBytes, createCipheriv, createDecipheriv, scryptSync } from 'crypto'
+// import { dataEncryptionKey } from './get-data-encryption-key'
+// const ALGORITHM = 'aes-256-gcm'
+// export function EncryptedColumn(): PropertyDecorator {
+//   return function (target: Object, propertyName: string | symbol) {
+//     Column("text", { nullable: true })(target, propertyName);
+//     const className = target.constructor.name;
+//     BeforeInsert()(target, "encryptField");
+//     BeforeUpdate()(target, "encryptField");
+//     getMetadataArgsStorage().entityListeners.push({
+//         target: className,
+//         propertyName: "encryptField",
+//         type: "beforeInsert"
+//     });
+//     getMetadataArgsStorage().entityListeners.push({
+//         target: className,
+//         propertyName: "encryptField",
+//         type: "beforeUpdate"
+//     });
+//     target["encryptField"] = function() {
+//         const salt = randomBytes(16).toString('hex');
+//         const key = scryptSync(dataEncryptionKey!, salt, 32);
+//         const iv = randomBytes(16);
+//         const cipher = createCipheriv(ALGORITHM, key, iv);
+//         const encrypted = Buffer.concat([cipher.update(this[propertyName as string]), cipher.final()]);
+//         this[propertyName as string] = `${salt}.${iv.toString('hex')}.${encrypted.toString('hex')}`;
+//     }
+//     // 원래의 프로퍼티 이름을 저장하는 변수를 선언
+//     const originalPropertyName = `_${String(propertyName)}`
+//     // 기본 컬럼 데코레이터
+//     Column('text', { nullable: true })(target, originalPropertyName)
+//     Object.defineProperty(target, propertyName, {
+//       get: function () {
+//         const [salt, ivHex, encryptedHex] = (this[originalPropertyName] || '').split('.')
+//         const key = scryptSync(dataEncryptionKey!, salt, 32)
+//         try {
+//           const decipher = createDecipheriv(ALGORITHM, key, Buffer.from(ivHex, 'hex'))
+//           const decrypted = Buffer.concat([decipher.update(Buffer.from(encryptedHex, 'hex')), decipher.final()])
+//           return decrypted.toString()
+//         } catch (err) {
+//           console.error(`decryption for ${String(propertyName)} field failed`)
+//           return null
+//         }
+//       },
+//       set: function (value) {
+//         const salt = randomBytes(16).toString('hex')
+//         const key = scryptSync(dataEncryptionKey!, salt, 32)
+//         const iv = randomBytes(16)
+//         const cipher = createCipheriv(ALGORITHM, key, iv)
+//         const encrypted = Buffer.concat([cipher.update(value), cipher.final()])
+//         this[originalPropertyName] = `${salt}.${iv.toString('hex')}.${encrypted.toString('hex')}`
+//       }
+//     })
+//   }
+// }
+//# sourceMappingURL=encrypted-column.js.map

package/dist-server/typeorm/encrypted-column.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted-column.js","sourceRoot":"","sources":["../../server/typeorm/encrypted-column.ts"],"names":[],"mappings":";;;AAAA,qCAA+F;AAI/F,MAAM,SAAS,GAAG,aAAa,CAAA;AAC/B,MAAM,UAAU,GAAG,EAAE,CAAA;AACrB,MAAM,WAAW,GAAG,EAAE,CAAA;AACtB,MAAM,SAAS,GAAG,EAAE,CAAA;AAEpB,SAAgB,eAAe;IAC7B,OAAO,UAAU,MAAc,EAAE,YAA6B;QAC5D,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;QAExD,MAAM,iBAAiB,GAAG,WAAW,MAAM,CAAC,YAAY,CAAC,EAAE,CAAA;QAC3D,MAAM,gBAAgB,GAAG,WAAW,MAAM,CAAC,YAAY,CAAC,EAAE,CAAA;QAE1D,sCAAsC;QACtC,IAAA,sBAAY,GAAE,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;QACzC,kDAAkD;QAClD,gCAAgC;QAChC,qCAAqC;QACrC,0BAA0B;QAC1B,KAAK;QAEL,IAAA,sBAAY,GAAE,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;QACzC,kDAAkD;QAClD,gCAAgC;QAChC,qCAAqC;QACrC,0BAA0B;QAC1B,KAAK;QAEL,IAAA,mBAAS,GAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;QACrC,kDAAkD;QAClD,gCAAgC;QAChC,oCAAoC;QACpC,uBAAuB;QACvB,KAAK;QAEL,MAAM,CAAC,iBAAiB,CAAC,GAAG;YAC1B,cAAc;YACd,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE;gBACtB,+CAA+C;gBAC/C,gEAAgE;gBAChE,6BAA6B;gBAC7B,oDAAoD;gBACpD,uFAAuF;gBACvF,oFAAoF;aACrF;QACH,CAAC,CAAA;QAED,MAAM,CAAC,gBAAgB,CAAC,GAAG;YACzB,cAAc;YACd,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE;gBACtB,+CAA+C;gBAC/C,gEAAgE;gBAChE,6BAA6B;gBAC7B,oDAAoD;gBACpD,uFAAuF;gBACvF,oFAAoF;aACrF;QACH,CAAC,CAAA;IACH,CAAC,CAAA;AACH,CAAC;AArDD,0CAqDC;AAED,uFAAuF;AACvF,qFAAqF;AACrF,gEAAgE;AAEhE,kCAAkC;AAElC,yDAAyD;AACzD,sEAAsE;AACtE,gEAAgE;AAEhE,iDAAiD;AAEjD,8CAA8C;AAC9C,8CAA8C;AAE9C,sDAAsD;AACtD,6BAA6B;AAC7B,wCAAwC;AACxC,+BAA+B;AAC/B,UAAU;AAEV,sDAAsD;AACtD,6BAA6B;AAC7B,wCAAwC;AACxC,+BAA+B;AAC/B,UAAU;AAEV,4CAA4C;AAC5C,wDAAwD;AACxD,gEAAgE;AAEhE,sCAAsC;AACtC,6DAA6D;AAC7D,0GAA0G;AAE1G,uGAAuG;AACvG,QAAQ;AAER,kCAAkC;AAClC,8DAA8D;AAE9D,qBAAqB;AACrB,uEAAuE;AAEvE,oDAAoD;AACpD,2BAA2B;AAC3B,4FAA4F;AAC5F,+DAA+D;AAE/D,gBAAgB;AAChB,yFAAyF;AACzF,mHAAmH;AAEnH,wCAAwC;AACxC,0BAA0B;AAC1B,iFAAiF;AACjF,wBAAwB;AACxB,YAAY;AACZ,WAAW;AACX,gCAAgC;AAChC,uDAAuD;AACvD,+DAA+D;AAE/D,qCAAqC;AACrC,4DAA4D;AAC5D,kFAAkF;AAElF,oGAAoG;AACpG,UAAU;AACV,SAAS;AACT,MAAM;AACN,IAAI","sourcesContent":["import { AfterLoad, BeforeInsert, BeforeUpdate, Column, getMetadataArgsStorage } from 'typeorm'\nimport { createCipheriv, createDecipheriv, randomBytes, scryptSync } from 'crypto'\nimport { dataEncryptionKey } from './get-data-encryption-key'\n\nconst ALGORITHM = 'aes-256-cbc'\nconst KEY_LENGTH = 32\nconst SALT_LENGTH = 16\nconst IV_LENGTH = 16\n\nexport function EncryptedColumn(): PropertyDecorator {\n  return function (target: Object, propertyName: string | symbol) {\n    Column('text', { nullable: true })(target, propertyName)\n\n    const beforeHandlerName = `encrypt_${String(propertyName)}`\n    const afterHandlerName = `decrypt_${String(propertyName)}`\n\n    // BeforeInsert and BeforeUpdate logic\n    BeforeInsert()(target, beforeHandlerName)\n    // getMetadataArgsStorage().entityListeners.push({\n    //   target: target.constructor,\n    //   propertyName: beforeHandlerName,\n    //   type: 'before-insert'\n    // })\n\n    BeforeUpdate()(target, beforeHandlerName)\n    // getMetadataArgsStorage().entityListeners.push({\n    //   target: target.constructor,\n    //   propertyName: beforeHandlerName,\n    //   type: 'before-update'\n    // })\n\n    AfterLoad()(target, afterHandlerName)\n    // getMetadataArgsStorage().entityListeners.push({\n    //   target: target.constructor,\n    //   propertyName: afterHandlerName,\n    //   type: 'after-load'\n    // })\n\n    target[beforeHandlerName] = function (this) {\n      // TODO 암호화 로직\n      if (this[propertyName]) {\n        // const salt = randomBytes(16).toString('hex')\n        // const key = scryptSync(process.env.ENCRYPTION_KEY!, salt, 32)\n        // const iv = randomBytes(16)\n        // const cipher = createCipheriv(ALGORITHM, key, iv)\n        // const encrypted = Buffer.concat([cipher.update(this[propertyName]), cipher.final()])\n        // this[propertyName] = `${salt}.${iv.toString('hex')}.${encrypted.toString('hex')}`\n      }\n    }\n\n    target[afterHandlerName] = function (this) {\n      // TODO 복호화 로직\n      if (this[propertyName]) {\n        // const salt = randomBytes(16).toString('hex')\n        // const key = scryptSync(process.env.ENCRYPTION_KEY!, salt, 32)\n        // const iv = randomBytes(16)\n        // const cipher = createCipheriv(ALGORITHM, key, iv)\n        // const encrypted = Buffer.concat([cipher.update(this[propertyName]), cipher.final()])\n        // this[propertyName] = `${salt}.${iv.toString('hex')}.${encrypted.toString('hex')}`\n      }\n    }\n  }\n}\n\n// import { BeforeInsert, BeforeUpdate, Column, getMetadataArgsStorage } from 'typeorm'\n// import { randomBytes, createCipheriv, createDecipheriv, scryptSync } from 'crypto'\n// import { dataEncryptionKey } from './get-data-encryption-key'\n\n// const ALGORITHM = 'aes-256-gcm'\n\n// export function EncryptedColumn(): PropertyDecorator {\n//   return function (target: Object, propertyName: string | symbol) {\n//     Column(\"text\", { nullable: true })(target, propertyName);\n\n//     const className = target.constructor.name;\n\n//     BeforeInsert()(target, \"encryptField\");\n//     BeforeUpdate()(target, \"encryptField\");\n\n//     getMetadataArgsStorage().entityListeners.push({\n//         target: className,\n//         propertyName: \"encryptField\",\n//         type: \"beforeInsert\"\n//     });\n\n//     getMetadataArgsStorage().entityListeners.push({\n//         target: className,\n//         propertyName: \"encryptField\",\n//         type: \"beforeUpdate\"\n//     });\n\n//     target[\"encryptField\"] = function() {\n//         const salt = randomBytes(16).toString('hex');\n//         const key = scryptSync(dataEncryptionKey!, salt, 32);\n\n//         const iv = randomBytes(16);\n//         const cipher = createCipheriv(ALGORITHM, key, iv);\n//         const encrypted = Buffer.concat([cipher.update(this[propertyName as string]), cipher.final()]);\n\n//         this[propertyName as string] = `${salt}.${iv.toString('hex')}.${encrypted.toString('hex')}`;\n//     }\n\n//     // 원래의 프로퍼티 이름을 저장하는 변수를 선언\n//     const originalPropertyName = `_${String(propertyName)}`\n\n//     // 기본 컬럼 데코레이터\n//     Column('text', { nullable: true })(target, originalPropertyName)\n\n//     Object.defineProperty(target, propertyName, {\n//       get: function () {\n//         const [salt, ivHex, encryptedHex] = (this[originalPropertyName] || '').split('.')\n//         const key = scryptSync(dataEncryptionKey!, salt, 32)\n\n//         try {\n//           const decipher = createDecipheriv(ALGORITHM, key, Buffer.from(ivHex, 'hex'))\n//           const decrypted = Buffer.concat([decipher.update(Buffer.from(encryptedHex, 'hex')), decipher.final()])\n\n//           return decrypted.toString()\n//         } catch (err) {\n//           console.error(`decryption for ${String(propertyName)} field failed`)\n//           return null\n//         }\n//       },\n//       set: function (value) {\n//         const salt = randomBytes(16).toString('hex')\n//         const key = scryptSync(dataEncryptionKey!, salt, 32)\n\n//         const iv = randomBytes(16)\n//         const cipher = createCipheriv(ALGORITHM, key, iv)\n//         const encrypted = Buffer.concat([cipher.update(value), cipher.final()])\n\n//         this[originalPropertyName] = `${salt}.${iv.toString('hex')}.${encrypted.toString('hex')}`\n//       }\n//     })\n//   }\n// }\n"]}

package/dist-server/typeorm/get-data-encryption-key.d.ts

@@ -0,0 +1 @@
+export declare const dataEncryptionKey: any;

package/dist-server/typeorm/get-data-encryption-key.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dataEncryptionKey = void 0;
+const env_1 = require("@things-factory/env");
+var _DATA_ENCRYPTION_KEY = env_1.config.get('dataEncryptionKey');
+if (!_DATA_ENCRYPTION_KEY) {
+    if (process.env.NODE_ENV == 'production') {
+        throw new TypeError('dataEncryptionKey not configured.');
+    }
+    else {
+        _DATA_ENCRYPTION_KEY = 'V6g5oHJZb7KcYzIyL6cM95XvIDouon5b';
+    }
+}
+exports.dataEncryptionKey = _DATA_ENCRYPTION_KEY;
+//# sourceMappingURL=get-data-encryption-key.js.map

package/dist-server/typeorm/get-data-encryption-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-data-encryption-key.js","sourceRoot":"","sources":["../../server/typeorm/get-data-encryption-key.ts"],"names":[],"mappings":";;;AAAA,6CAA4C;AAE5C,IAAI,oBAAoB,GAAG,YAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;AAE1D,IAAI,CAAC,oBAAoB,EAAE;IACzB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,YAAY,EAAE;QACxC,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAA;KACzD;SAAM;QACL,oBAAoB,GAAG,kCAAkC,CAAA;KAC1D;CACF;AAEY,QAAA,iBAAiB,GAAG,oBAAoB,CAAA","sourcesContent":["import { config } from '@things-factory/env'\n\nvar _DATA_ENCRYPTION_KEY = config.get('dataEncryptionKey')\n\nif (!_DATA_ENCRYPTION_KEY) {\n  if (process.env.NODE_ENV == 'production') {\n    throw new TypeError('dataEncryptionKey not configured.')\n  } else {\n    _DATA_ENCRYPTION_KEY = 'V6g5oHJZb7KcYzIyL6cM95XvIDouon5b'\n  }\n}\n\nexport const dataEncryptionKey = _DATA_ENCRYPTION_KEY\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/shell",
-  "version": "6.1.182",
+  "version": "6.1.189",
   "description": "Core module for framework",
   "bin": {
     "things-factory": "bin/things-factory",
@@ -62,7 +62,7 @@
     "@things-factory/ejs-remote": "^6.1.175",
     "@things-factory/env": "^6.1.175",
     "@things-factory/styles": "^6.1.175",
-    "@things-factory/utils": "^6.1.181",
+    "@things-factory/utils": "^6.1.186",
     "@webcomponents/webcomponentsjs": "^2.6.0",
     "args": "^5.0.0",
     "broadcastchannel-polyfill": "^1.0.1",
@@ -132,5 +132,5 @@
     "pg": "^8.7.3",
     "sqlite3": "^5.0.8"
   },
-  "gitHead": "b24537d122e9723f03c05e2feb027eeda151b410"
+  "gitHead": "0a7d81fcf229582aa643223c56ece75a0432f7d8"
 }

package/server/index.ts

@@ -7,3 +7,4 @@ export * from './pubsub-log-transport'
 export * from './middlewares'
 export * from './graphql-local-client'
 export * from './service'
+export * from './typeorm/encrypt-transform'

package/server/middlewares/index.ts

@@ -40,8 +40,4 @@ export function initMiddlewares(app) {
   })
 }
 
-// process.on('bootstrap-module-subscription' as any, (app, subscriptionMiddleware) => {
-//   subscriptionMiddleware.push(domainMiddleware)
-// })
-
 export * from './domain-middleware'

package/server/typeorm/encrypt-transform.ts

@@ -0,0 +1,44 @@
+import { ValueTransformer } from 'typeorm'
+import { createCipheriv, createDecipheriv, randomBytes, scryptSync } from 'crypto'
+
+import { dataEncryptionKey } from './get-data-encryption-key'
+
+const ALGORITHM = 'aes-256-cbc'
+const KEY_LENGTH = 32
+const SALT_LENGTH = 16
+const IV_LENGTH = 16
+
+export const encryptTransformer: ValueTransformer = {
+  to: (entityValue: string) => encrypt(entityValue), // DB에 저장하기 전에 암호화
+  from: (databaseValue: string) => decrypt(databaseValue) // DB에서 값을 가져올 때 복호화
+}
+
+function encrypt(text: string): string {
+  if (!text) {
+    return null
+  }
+
+  const iv = randomBytes(IV_LENGTH)
+  const cipher = createCipheriv(ALGORITHM, dataEncryptionKey, iv)
+  const encrypted = Buffer.concat([cipher.update(text, 'utf8'), cipher.final()])
+
+  return `${iv.toString('hex')}:${encrypted.toString('hex')}`
+}
+
+function decrypt(text: string): string {
+  if (!text) {
+    return null
+  }
+
+  try {
+    const parts = text.split(':')
+    const iv = Buffer.from(parts.shift(), 'hex')
+    const encryptedText = Buffer.from(parts.join(':'), 'hex')
+    const decipher = createDecipheriv(ALGORITHM, dataEncryptionKey, iv)
+
+    return Buffer.concat([decipher.update(encryptedText), decipher.final()]).toString('utf8')
+  } catch (err) {
+    console.error(`decryption for encrypted field failed in encryptTransformer`)
+    return null
+  }
+}

package/server/typeorm/get-data-encryption-key.ts

@@ -0,0 +1,13 @@
+import { config } from '@things-factory/env'
+
+var _DATA_ENCRYPTION_KEY = config.get('dataEncryptionKey')
+
+if (!_DATA_ENCRYPTION_KEY) {
+  if (process.env.NODE_ENV == 'production') {
+    throw new TypeError('dataEncryptionKey not configured.')
+  } else {
+    _DATA_ENCRYPTION_KEY = 'V6g5oHJZb7KcYzIyL6cM95XvIDouon5b'
+  }
+}
+
+export const dataEncryptionKey = _DATA_ENCRYPTION_KEY