@things-factory/shell 6.1.186 → 6.1.191

package/dist-server/typeorm/encrypt-transform.d.ts

@@ -0,0 +1,2 @@
+import { ValueTransformer } from 'typeorm';
+export declare const encryptTransformer: ValueTransformer;

package/dist-server/typeorm/encrypt-transform.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encryptTransformer = void 0;
+const crypto_1 = require("crypto");
+const get_data_encryption_key_1 = require("./get-data-encryption-key");
+const ALGORITHM = 'aes-256-cbc';
+const KEY_LENGTH = 32;
+const SALT_LENGTH = 16;
+const IV_LENGTH = 16;
+exports.encryptTransformer = {
+    to: (entityValue) => encrypt(entityValue),
+    from: (databaseValue) => decrypt(databaseValue) // DB에서 값을 가져올 때 복호화
+};
+function encrypt(text) {
+    if (!text) {
+        return null;
+    }
+    const iv = (0, crypto_1.randomBytes)(IV_LENGTH);
+    const cipher = (0, crypto_1.createCipheriv)(ALGORITHM, get_data_encryption_key_1.dataEncryptionKey, iv);
+    const encrypted = Buffer.concat([cipher.update(text, 'utf8'), cipher.final()]);
+    return `${iv.toString('hex')}:${encrypted.toString('hex')}`;
+}
+function decrypt(text) {
+    if (!text) {
+        return null;
+    }
+    try {
+        const parts = text.split(':');
+        const iv = Buffer.from(parts.shift(), 'hex');
+        const encryptedText = Buffer.from(parts.join(':'), 'hex');
+        const decipher = (0, crypto_1.createDecipheriv)(ALGORITHM, get_data_encryption_key_1.dataEncryptionKey, iv);
+        return Buffer.concat([decipher.update(encryptedText), decipher.final()]).toString('utf8');
+    }
+    catch (err) {
+        console.error(`decryption for encrypted field failed in encryptTransformer`);
+        return null;
+    }
+}
+//# sourceMappingURL=encrypt-transform.js.map

package/dist-server/typeorm/encrypt-transform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt-transform.js","sourceRoot":"","sources":["../../server/typeorm/encrypt-transform.ts"],"names":[],"mappings":";;;AACA,mCAAkF;AAElF,uEAA6D;AAE7D,MAAM,SAAS,GAAG,aAAa,CAAA;AAC/B,MAAM,UAAU,GAAG,EAAE,CAAA;AACrB,MAAM,WAAW,GAAG,EAAE,CAAA;AACtB,MAAM,SAAS,GAAG,EAAE,CAAA;AAEP,QAAA,kBAAkB,GAAqB;IAClD,EAAE,EAAE,CAAC,WAAmB,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACjD,IAAI,EAAE,CAAC,aAAqB,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,oBAAoB;CAC7E,CAAA;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,CAAC,IAAI,EAAE;QACT,OAAO,IAAI,CAAA;KACZ;IAED,MAAM,EAAE,GAAG,IAAA,oBAAW,EAAC,SAAS,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,SAAS,EAAE,2CAAiB,EAAE,EAAE,CAAC,CAAA;IAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IAE9E,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;AAC7D,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,CAAC,IAAI,EAAE;QACT,OAAO,IAAI,CAAA;KACZ;IAED,IAAI;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC7B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAA;QAC5C,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAA;QACzD,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAAC,SAAS,EAAE,2CAAiB,EAAE,EAAE,CAAC,CAAA;QAEnE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;KAC1F;IAAC,OAAO,GAAG,EAAE;QACZ,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAA;QAC5E,OAAO,IAAI,CAAA;KACZ;AACH,CAAC","sourcesContent":["import { ValueTransformer } from 'typeorm'\nimport { createCipheriv, createDecipheriv, randomBytes, scryptSync } from 'crypto'\n\nimport { dataEncryptionKey } from './get-data-encryption-key'\n\nconst ALGORITHM = 'aes-256-cbc'\nconst KEY_LENGTH = 32\nconst SALT_LENGTH = 16\nconst IV_LENGTH = 16\n\nexport const encryptTransformer: ValueTransformer = {\n  to: (entityValue: string) => encrypt(entityValue), // DB에 저장하기 전에 암호화\n  from: (databaseValue: string) => decrypt(databaseValue) // DB에서 값을 가져올 때 복호화\n}\n\nfunction encrypt(text: string): string {\n  if (!text) {\n    return null\n  }\n\n  const iv = randomBytes(IV_LENGTH)\n  const cipher = createCipheriv(ALGORITHM, dataEncryptionKey, iv)\n  const encrypted = Buffer.concat([cipher.update(text, 'utf8'), cipher.final()])\n\n  return `${iv.toString('hex')}:${encrypted.toString('hex')}`\n}\n\nfunction decrypt(text: string): string {\n  if (!text) {\n    return null\n  }\n\n  try {\n    const parts = text.split(':')\n    const iv = Buffer.from(parts.shift(), 'hex')\n    const encryptedText = Buffer.from(parts.join(':'), 'hex')\n    const decipher = createDecipheriv(ALGORITHM, dataEncryptionKey, iv)\n\n    return Buffer.concat([decipher.update(encryptedText), decipher.final()]).toString('utf8')\n  } catch (err) {\n    console.error(`decryption for encrypted field failed in encryptTransformer`)\n    return null\n  }\n}\n"]}

package/dist-server/typeorm/get-data-encryption-key.d.ts

@@ -0,0 +1 @@
+export declare const dataEncryptionKey: any;

package/dist-server/typeorm/get-data-encryption-key.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dataEncryptionKey = void 0;
+const env_1 = require("@things-factory/env");
+var _DATA_ENCRYPTION_KEY = env_1.config.get('dataEncryptionKey');
+if (!_DATA_ENCRYPTION_KEY) {
+    if (process.env.NODE_ENV == 'production') {
+        throw new TypeError('dataEncryptionKey not configured.');
+    }
+    else {
+        _DATA_ENCRYPTION_KEY = 'V6g5oHJZb7KcYzIyL6cM95XvIDouon5b';
+    }
+}
+exports.dataEncryptionKey = _DATA_ENCRYPTION_KEY;
+//# sourceMappingURL=get-data-encryption-key.js.map

package/dist-server/typeorm/get-data-encryption-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-data-encryption-key.js","sourceRoot":"","sources":["../../server/typeorm/get-data-encryption-key.ts"],"names":[],"mappings":";;;AAAA,6CAA4C;AAE5C,IAAI,oBAAoB,GAAG,YAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;AAE1D,IAAI,CAAC,oBAAoB,EAAE;IACzB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,YAAY,EAAE;QACxC,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAA;KACzD;SAAM;QACL,oBAAoB,GAAG,kCAAkC,CAAA;KAC1D;CACF;AAEY,QAAA,iBAAiB,GAAG,oBAAoB,CAAA","sourcesContent":["import { config } from '@things-factory/env'\n\nvar _DATA_ENCRYPTION_KEY = config.get('dataEncryptionKey')\n\nif (!_DATA_ENCRYPTION_KEY) {\n  if (process.env.NODE_ENV == 'production') {\n    throw new TypeError('dataEncryptionKey not configured.')\n  } else {\n    _DATA_ENCRYPTION_KEY = 'V6g5oHJZb7KcYzIyL6cM95XvIDouon5b'\n  }\n}\n\nexport const dataEncryptionKey = _DATA_ENCRYPTION_KEY\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/shell",
-  "version": "6.1.186",
+  "version": "6.1.191",
   "description": "Core module for framework",
   "bin": {
     "things-factory": "bin/things-factory",
@@ -132,5 +132,5 @@
     "pg": "^8.7.3",
     "sqlite3": "^5.0.8"
   },
-  "gitHead": "ddf508496cdd7d4b9d0e020703a2f7a586a42ec5"
+  "gitHead": "b6dfc909644710c546e38bfc0c49c3d72d528de1"
 }

package/server/index.ts

@@ -7,3 +7,4 @@ export * from './pubsub-log-transport'
 export * from './middlewares'
 export * from './graphql-local-client'
 export * from './service'
+export * from './typeorm/encrypt-transform'

package/server/typeorm/encrypt-transform.ts

@@ -0,0 +1,44 @@
+import { ValueTransformer } from 'typeorm'
+import { createCipheriv, createDecipheriv, randomBytes, scryptSync } from 'crypto'
+
+import { dataEncryptionKey } from './get-data-encryption-key'
+
+const ALGORITHM = 'aes-256-cbc'
+const KEY_LENGTH = 32
+const SALT_LENGTH = 16
+const IV_LENGTH = 16
+
+export const encryptTransformer: ValueTransformer = {
+  to: (entityValue: string) => encrypt(entityValue), // DB에 저장하기 전에 암호화
+  from: (databaseValue: string) => decrypt(databaseValue) // DB에서 값을 가져올 때 복호화
+}
+
+function encrypt(text: string): string {
+  if (!text) {
+    return null
+  }
+
+  const iv = randomBytes(IV_LENGTH)
+  const cipher = createCipheriv(ALGORITHM, dataEncryptionKey, iv)
+  const encrypted = Buffer.concat([cipher.update(text, 'utf8'), cipher.final()])
+
+  return `${iv.toString('hex')}:${encrypted.toString('hex')}`
+}
+
+function decrypt(text: string): string {
+  if (!text) {
+    return null
+  }
+
+  try {
+    const parts = text.split(':')
+    const iv = Buffer.from(parts.shift(), 'hex')
+    const encryptedText = Buffer.from(parts.join(':'), 'hex')
+    const decipher = createDecipheriv(ALGORITHM, dataEncryptionKey, iv)
+
+    return Buffer.concat([decipher.update(encryptedText), decipher.final()]).toString('utf8')
+  } catch (err) {
+    console.error(`decryption for encrypted field failed in encryptTransformer`)
+    return null
+  }
+}

package/server/typeorm/get-data-encryption-key.ts

@@ -0,0 +1,13 @@
+import { config } from '@things-factory/env'
+
+var _DATA_ENCRYPTION_KEY = config.get('dataEncryptionKey')
+
+if (!_DATA_ENCRYPTION_KEY) {
+  if (process.env.NODE_ENV == 'production') {
+    throw new TypeError('dataEncryptionKey not configured.')
+  } else {
+    _DATA_ENCRYPTION_KEY = 'V6g5oHJZb7KcYzIyL6cM95XvIDouon5b'
+  }
+}
+
+export const dataEncryptionKey = _DATA_ENCRYPTION_KEY