Merge pull request #6 from enxoco/features/akeyless-encryption

Added akeyless api integration

.dockerignore

@@ -0,0 +1 @@
+node_modules/*

.env.example

@@ -0,0 +1,3 @@
+VITE_AKEYLESS_ACCESS_ID=""
+VITE_AKEYLESS_ACCESS_KEY=""
+VITE_AKEYLESS_KEY_PATH=""

.gitignore

@@ -22,4 +22,4 @@ dist-ssr
 *.njsproj
 *.sln
 *.sw?
-tokens.ts
+.env

Dockerfile

@@ -0,0 +1,9 @@
+FROM node:18 AS Build
+WORKDIR /app/node/
+COPY . .
+RUN yarn
+RUN yarn build
+
+FROM nginx AS Production
+WORKDIR /usr/share/nginx/html
+COPY --from=Build /app/node/dist /usr/share/nginx/html/

src/env.d.ts

@@ -0,0 +1,12 @@
+/// <reference types="vite/client" />
+
+interface ImportMetaEnv {
+    readonly VITE_AKEYLESS_KEY_PATH: string
+    readonly VITE_AKEYLESS_ACCESS_ID: string
+    readonly VITE_AKEYLESS_ACCESS_KEY: string
+    // more env variables...
+  }
+  
+  interface ImportMeta {
+    readonly env: ImportMetaEnv
+  }

src/main.ts

@@ -2,7 +2,4 @@ import "./style.css";
 
 import { tokenList } from "./tokenList";
 import rootDiv from "./utils/root";
-
-rootDiv!.innerHTML = `
-  ${tokenList()}
-`;
+rootDiv!.innerHTML = await tokenList();

src/toast.ts

@@ -2,6 +2,11 @@ export function toast(element: HTMLDivElement, message: string) {
     // Target our predefined DIV that will hold toast messages.
     const toastDiv = element.getElementsByClassName('toast')
  
+    const interval = setInterval(() => {
+        toastDiv[0].remove()
+        clearInterval(interval)
+    }, 5000)
+
     // If we currently have a toast displayed, let's remove it from the DOM.
     if (toastDiv && toastDiv.length != 0) {
         for (const el of toastDiv){

src/token.ts

@@ -1,8 +1,7 @@
 import totp from 'totp-generator'
 const period = 30
 const digits = 6
-
-export function displayToken(secret) {
+export function displayToken(secret: string) {
   const token = totp(secret.replace(/ /g, '').trim(), {
     digits,
     period,

src/tokenList.ts

@@ -1,8 +1,9 @@
-import { displayTokenListItem } from "./TokenListItem";
-import { tokens } from "./tokens";
+import { displayTokenListItem } from "./tokenListItem";
+import { Token, decryptTokensWithAkeyless } from "./utils/api";
 
-export function tokenList() {
-  return `<form id="tokens">${tokens.map((token) =>
+export async function tokenList() {
+  const decryptedTokens = (await decryptTokensWithAkeyless(import.meta.env.VITE_AKEYLESS_KEY_PATH))
+  return `<form id="tokens">${decryptedTokens.map((token: Token) =>
     displayTokenListItem(token.account, token.secret)
   )}</form>`;
 }

src/tokens.ts

@@ -0,0 +1 @@
+export const tokens = "AQAAAAEIAd3tVg6Vbzp/2fXBP6JdFoK7A5fu5n8daqwUzGKK3CgAYW+SujAoXcK5R3QgGkUp34Vi/DEtjOU9WNd3vGIMZAUQhngRqDS0rfK3i8kN4/C5oBjhkYhWKY6ABbJtmnI9p4EzfnC5RkZlSpHFNK6yAxk2jJVAFU6ynXkqVZKLamtf+aViyYyX8wI="

src/utils/api.ts

@@ -0,0 +1,68 @@
+import { tokens } from "../tokens";
+
+export interface TokenResponse {
+    token: string;
+    creds: null;
+}
+
+export interface Token {
+    account: string;
+    secret: string;
+  }
+
+export interface GenericAPIResponse {
+    result: string;
+}
+
+const baseUrl = 'https://api.akeyless.io'
+async function fetchAkeylessAuthToken(): Promise<TokenResponse> {
+
+    const options = {
+        method: 'POST',
+        headers: {accept: 'application/json', 'content-type': 'application/json'},
+        body: JSON.stringify({
+          'access-type': 'access_key',
+          'gcp-audience': 'akeyless.io',
+          json: false,
+          'access-id': import.meta.env.VITE_AKEYLESS_ACCESS_ID,
+          'access-key': import.meta.env.VITE_AKEYLESS_ACCESS_KEY
+        })
+      };
+      const token = await fetch(`${baseUrl}/auth`, options)
+      return await token.json()
+
+}
+
+async function encryptTokensWithAkeyless(encryptionKeyName: string): Promise<GenericAPIResponse>{
+    const options = {
+        method: 'POST',
+        headers: {accept: 'application/json', 'content-type': 'application/json'},
+        body: JSON.stringify({
+          json: false,
+          'key-name': encryptionKeyName,
+          plaintext: JSON.stringify(tokens),
+          token: (await fetchAkeylessAuthToken()).token
+        })
+      };
+      
+      const response = await fetch(`${baseUrl}/encrypt`, options)
+      return await response.json()
+}
+
+async function decryptTokensWithAkeyless(encryptionKeyName: string): Promise<Token[]>{
+    const options = {
+        method: 'POST',
+        headers: {accept: 'application/json', 'content-type': 'application/json'},
+        body: JSON.stringify({
+          json: false,
+          'key-name': encryptionKeyName,
+          ciphertext: tokens,
+          token: (await fetchAkeylessAuthToken()).token
+        })
+      };
+      
+      const response = await fetch(`${baseUrl}/decrypt`, options)
+      const decodedTokens = await response.json()
+      return JSON.parse(decodedTokens.result)
+}
+export {fetchAkeylessAuthToken, encryptTokensWithAkeyless, decryptTokensWithAkeyless}

tsconfig.json

@@ -0,0 +1,20 @@
+{
+    "compilerOptions": {
+      "target": "ESNext",
+      "lib": ["DOM", "DOM.Iterable", "ESNext"],
+      "types": [],
+      "allowJs": false,
+      "skipLibCheck": false,
+      "esModuleInterop": false,
+      "allowSyntheticDefaultImports": true,
+      "strict": true,
+      "forceConsistentCasingInFileNames": true,
+      "module": "ESNext",
+      "moduleResolution": "Node",
+      "resolveJsonModule": true,
+      "isolatedModules": true,
+      "noEmit": true,
+      "jsx": "react"
+    },
+    "include": ["src"]
+  }