connection profiles and ssh key encryption

2026-03-01 12:04:38 +01:00
parent 7e3a1ceef4
commit 93bf9ab70d
17 changed files with 621 additions and 28 deletions
--- a/backend/src/routes/profiles.ts
+++ b/backend/src/routes/profiles.ts
@@ -0,0 +1,151 @@
+import { FastifyInstance, FastifyRequest, FastifyReply } from 'fastify';
+import { encrypt, decrypt } from '../utils/encryption';
+
+interface JwtPayload {
+  id: string;
+  username: string;
+}
+
+interface ProfileBody {
+  name: string;
+  protocol: 'ssh' | 'rdp';
+  username?: string;
+  password?: string;
+  privateKey?: string;
+  domain?: string;
+  clipboardEnabled?: boolean;
+}
+
+export async function profileRoutes(fastify: FastifyInstance) {
+  fastify.addHook('preHandler', fastify.authenticate);
+
+  // GET /api/profiles
+  fastify.get('/', async (request: FastifyRequest, reply: FastifyReply) => {
+    const user = request.user as JwtPayload;
+    const profiles = await fastify.prisma.profile.findMany({
+      where: { userId: user.id },
+      orderBy: { name: 'asc' },
+      select: {
+        id: true,
+        name: true,
+        protocol: true,
+        username: true,
+        domain: true,
+        clipboardEnabled: true,
+        privateKey: true,
+        encryptedPassword: true,
+        createdAt: true,
+      },
+    });
+    // Return hasPassword/hasPrivateKey flags instead of raw values
+    const result = profiles.map(({ encryptedPassword, privateKey, ...rest }) => ({
+      ...rest,
+      hasPassword: !!encryptedPassword,
+      hasPrivateKey: !!privateKey,
+    }));
+    return reply.send(result);
+  });
+
+  // GET /api/profiles/:id
+  fastify.get<{ Params: { id: string } }>('/:id', async (request, reply) => {
+    const user = request.user as JwtPayload;
+    const profile = await fastify.prisma.profile.findFirst({
+      where: { id: request.params.id, userId: user.id },
+      select: {
+        id: true,
+        name: true,
+        protocol: true,
+        username: true,
+        domain: true,
+        clipboardEnabled: true,
+        privateKey: true,
+        encryptedPassword: true,
+        createdAt: true,
+      },
+    });
+    if (!profile) return reply.status(404).send({ error: 'Profile not found' });
+    const { encryptedPassword, privateKey, ...rest } = profile;
+    return reply.send({
+      ...rest,
+      privateKey: privateKey ? decrypt(privateKey) : null,
+      hasPassword: !!encryptedPassword,
+      hasPrivateKey: !!privateKey,
+    });
+  });
+
+  // POST /api/profiles
+  fastify.post<{ Body: ProfileBody }>('/', async (request, reply) => {
+    const user = request.user as JwtPayload;
+    const { password, privateKey, ...rest } = request.body;
+
+    const profile = await fastify.prisma.profile.create({
+      data: {
+        ...rest,
+        encryptedPassword: password ? encrypt(password) : null,
+        privateKey: privateKey ? encrypt(privateKey) : null,
+        userId: user.id,
+      },
+      select: {
+        id: true,
+        name: true,
+        protocol: true,
+        username: true,
+        domain: true,
+        clipboardEnabled: true,
+        createdAt: true,
+      },
+    });
+    return reply.status(201).send(profile);
+  });
+
+  // PATCH /api/profiles/:id
+  fastify.patch<{ Params: { id: string }; Body: Partial<ProfileBody> }>(
+    '/:id',
+    async (request, reply) => {
+      const user = request.user as JwtPayload;
+      const { id } = request.params;
+      const { password, privateKey, ...rest } = request.body;
+
+      const existing = await fastify.prisma.profile.findFirst({
+        where: { id, userId: user.id },
+      });
+      if (!existing) return reply.status(404).send({ error: 'Profile not found' });
+
+      const updated = await fastify.prisma.profile.update({
+        where: { id },
+        data: {
+          ...rest,
+          ...(password !== undefined && {
+            encryptedPassword: password ? encrypt(password) : null,
+          }),
+          ...(privateKey !== undefined && {
+            privateKey: privateKey ? encrypt(privateKey) : null,
+          }),
+        },
+        select: {
+          id: true,
+          name: true,
+          username: true,
+          domain: true,
+          clipboardEnabled: true,
+          createdAt: true,
+        },
+      });
+      return reply.send(updated);
+    }
+  );
+
+  // DELETE /api/profiles/:id
+  fastify.delete<{ Params: { id: string } }>('/:id', async (request, reply) => {
+    const user = request.user as JwtPayload;
+    const { id } = request.params;
+
+    const existing = await fastify.prisma.profile.findFirst({
+      where: { id, userId: user.id },
+    });
+    if (!existing) return reply.status(404).send({ error: 'Profile not found' });
+
+    await fastify.prisma.profile.delete({ where: { id } });
+    return reply.status(204).send();
+  });
+}