mirror of
https://github.com/Abdulazizzn/n8n-enterprise-unlocked.git
synced 2025-12-18 02:21:13 +00:00
feat(Venafi TLS Protect Cloud): add Venafi TLS Protect Cloud (#4253)
* ✨ Venafi TTL Protect Cloud * ⚡ Improvements * ⚡ Add authenticate generic type * ⚡ Add paired items * ⚡ Add codex * ⚡ Update package.json
This commit is contained in:
@@ -0,0 +1,146 @@
|
||||
import { OptionsWithUri } from 'request';
|
||||
|
||||
import {
|
||||
IExecuteFunctions,
|
||||
IExecuteSingleFunctions,
|
||||
ILoadOptionsFunctions,
|
||||
IPollFunctions,
|
||||
} from 'n8n-core';
|
||||
|
||||
import { IDataObject, JsonObject, NodeApiError } from 'n8n-workflow';
|
||||
|
||||
import { get } from 'lodash';
|
||||
|
||||
import * as nacl_factory from 'js-nacl';
|
||||
|
||||
export async function venafiApiRequest(
|
||||
this: IExecuteFunctions | IExecuteSingleFunctions | ILoadOptionsFunctions | IPollFunctions,
|
||||
method: string,
|
||||
resource: string,
|
||||
body = {},
|
||||
qs: IDataObject = {},
|
||||
uri?: string,
|
||||
option: IDataObject = {},
|
||||
// tslint:disable-next-line:no-any
|
||||
): Promise<any> {
|
||||
const operation = this.getNodeParameter('operation', 0) as string;
|
||||
|
||||
const options: OptionsWithUri = {
|
||||
headers: {
|
||||
Accept: 'application/json',
|
||||
'content-type': 'application/json',
|
||||
},
|
||||
method,
|
||||
body,
|
||||
qs,
|
||||
uri: `https://api.venafi.cloud${resource}`,
|
||||
json: true,
|
||||
};
|
||||
|
||||
if (Object.keys(option).length) {
|
||||
Object.assign(options, option);
|
||||
}
|
||||
|
||||
// For cert download we don't need any headers
|
||||
// If we remove for everything the key fetch fails
|
||||
if (operation === 'download') {
|
||||
// We need content-type for keystore
|
||||
if (!resource.endsWith('keystore')) {
|
||||
delete options!.headers!['Accept'];
|
||||
delete options!.headers!['content-type'];
|
||||
}
|
||||
}
|
||||
|
||||
try {
|
||||
if (Object.keys(body).length === 0) {
|
||||
delete options.body;
|
||||
}
|
||||
return await this.helpers.requestWithAuthentication.call(
|
||||
this,
|
||||
'venafiTlsProtectCloudApi',
|
||||
options,
|
||||
);
|
||||
} catch (error) {
|
||||
throw new NodeApiError(this.getNode(), error as JsonObject);
|
||||
}
|
||||
}
|
||||
|
||||
export async function venafiApiRequestAllItems(
|
||||
this: IExecuteFunctions | ILoadOptionsFunctions,
|
||||
propertyName: string,
|
||||
method: string,
|
||||
endpoint: string,
|
||||
// tslint:disable-next-line:no-any
|
||||
body: any = {},
|
||||
query: IDataObject = {},
|
||||
// tslint:disable-next-line:no-any
|
||||
): Promise<any> {
|
||||
const returnData: IDataObject[] = [];
|
||||
|
||||
let responseData;
|
||||
|
||||
do {
|
||||
responseData = await venafiApiRequest.call(this, method, endpoint, body, query);
|
||||
endpoint = get(responseData, '_links[0].Next');
|
||||
returnData.push.apply(returnData, responseData[propertyName]);
|
||||
} while (responseData._links && responseData._links[0].Next);
|
||||
|
||||
return returnData;
|
||||
}
|
||||
|
||||
export async function encryptPassphrase(
|
||||
this: IExecuteFunctions | ILoadOptionsFunctions,
|
||||
certificateId: string,
|
||||
passphrase: string,
|
||||
storePassphrase: string,
|
||||
) {
|
||||
let dekHash = '';
|
||||
const dekResponse = await venafiApiRequest.call(
|
||||
this,
|
||||
'GET',
|
||||
`/outagedetection/v1/certificates/${certificateId}`,
|
||||
);
|
||||
|
||||
if (dekResponse.dekHash) {
|
||||
dekHash = dekResponse.dekHash;
|
||||
}
|
||||
|
||||
let pubKey = '';
|
||||
const pubKeyResponse = await venafiApiRequest.call(
|
||||
this,
|
||||
'GET',
|
||||
`/v1/edgeencryptionkeys/${dekHash}`,
|
||||
);
|
||||
|
||||
if (pubKeyResponse.key) {
|
||||
pubKey = pubKeyResponse.key;
|
||||
}
|
||||
|
||||
let encryptedKeyPass = '';
|
||||
let encryptedKeyStorePass = '';
|
||||
|
||||
const promise = () => {
|
||||
return new Promise((resolve, reject) => {
|
||||
// tslint:disable-next-line:no-any
|
||||
nacl_factory.instantiate((nacl: any) => {
|
||||
try {
|
||||
const passphraseUTF8 = nacl.encode_utf8(passphrase) as string;
|
||||
const keyPassBuffer = nacl.crypto_box_seal(passphraseUTF8, Buffer.from(pubKey, 'base64'));
|
||||
encryptedKeyPass = Buffer.from(keyPassBuffer).toString('base64');
|
||||
|
||||
const storePassphraseUTF8 = nacl.encode_utf8(storePassphrase) as string;
|
||||
const keyStorePassBuffer = nacl.crypto_box_seal(
|
||||
storePassphraseUTF8,
|
||||
Buffer.from(pubKey, 'base64'),
|
||||
);
|
||||
encryptedKeyStorePass = Buffer.from(keyStorePassBuffer).toString('base64');
|
||||
|
||||
return resolve([encryptedKeyPass, encryptedKeyStorePass]);
|
||||
} catch (error) {
|
||||
return reject(error);
|
||||
}
|
||||
});
|
||||
});
|
||||
};
|
||||
return await promise();
|
||||
}
|
||||
Reference in New Issue
Block a user