@wavo-cloud/aws-secrets-manager-helper 0.1.8 → 0.1.9

package/app/utils/awsSecretsManager.js

@@ -7,6 +7,13 @@ const client = new AWS.SecretsManager({
   region: secretsManagerRegion,
 })
 
+/**
+ * Right now, we have client lists that tell our systems where a clients secrets are
+ * We should be using tags (ie all production client lists have a tag saying its a production client
+ * or test client etc)
+ * These tags will also hold the organization name so that client secrets can still be found by name
+ */
+
 /**
  * Attempts to parse secret
  * @param {String} secretString - The stringified secret
@@ -70,6 +77,28 @@ async function getSecretValue(secretId) {
   }
 }
 
+/**
+ * Gets secret tags from aws secrets manager
+ * Returns Array of tags
+ * @param {String} secretId - The ID of an existing secret
+ */
+async function getSecretTags(secretId) {
+  let promiseError
+  const data = await client
+    .describeSecret({ SecretId: secretId })
+    .promise()
+    .catch(error => {
+      promiseError = error
+    })
+
+  if (promiseError) {
+    handleAWSPromiseError(promiseError)
+  } else if ('Tags' in data) {
+    return data.Tags
+  }
+  return []
+}
+
 /**
  * Gets the secret keying where client secrets are stored
  * Returns JSON where JSON is the secret
@@ -92,8 +121,13 @@ async function getClientSecret(clientId, clientIdsSecretIdOverride = null) {
  * Gets all client secrets holding their API keys
  * Returns [{ clientId: String, secretId: String, ...secret }]
  * Skips all that are missing a region or organization
+ * If activeOnly flag, it only returns active client secrets
+ * This is true by default
  */
-async function getAllClientSecrets(clientIdsSecretIdOverride = null) {
+async function getAllClientSecrets(
+  clientIdsSecretIdOverride = null,
+  activeOnly = true
+) {
   const clientSecretIds = await getClientSecretIds(clientIdsSecretIdOverride)
   if (!clientSecretIds) return []
   const parsedClientSecrets = await Promise.all(
@@ -101,11 +135,21 @@ async function getAllClientSecrets(clientIdsSecretIdOverride = null) {
       const result = await getSecretValue(clientSecretIds[clientId])
       result.id = clientId
       result.secretId = clientSecretIds[clientId]
+      const tags = await getSecretTags(clientSecretIds[clientId])
+      const isActiveOrganizationTag = tags.find(
+        tag => tag.Key === 'is_active_organization'
+      ) || { Value: 'false' }
+      result.isActiveOrganization = isActiveOrganizationTag.Value
       return result
     })
   )
   return parsedClientSecrets.filter(clientSecret => {
-    if (clientSecret.organization && clientSecret.region && !clientSecret.error)
+    if (
+      clientSecret.organization &&
+      clientSecret.region &&
+      !clientSecret.error &&
+      (!activeOnly || clientSecret.isActiveOrganization)
+    )
       return true
     return false
   })
@@ -318,6 +362,7 @@ module.exports = {
   getClientSecret,
   getAllClientSecrets,
   getSecretValue,
+  getSecretTags,
   createClient,
   setClient,
   editClient,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wavo-cloud/aws-secrets-manager-helper",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "Wavo Cloud Infallible AWS Secrets Manager Helper",
   "license": "UNLICENSED",
   "repository": {