mirror of
https://github.com/AutoMaker-Org/automaker.git
synced 2026-01-31 06:42:03 +00:00
2b89b0606c
- Introduced a restricted file system wrapper to ensure all file operations are confined to the script's directory, enhancing security. - Updated various modules to utilize the new secure file system methods, replacing direct fs calls with validated operations. - Enhanced path validation in the server routes and context loaders to prevent unauthorized access to the file system. - Adjusted environment variable handling to use centralized methods for reading and writing API keys, ensuring consistent security practices. This change improves the overall security posture of the application by enforcing strict file access controls and validating paths before any operations are performed.
55 lines
1.4 KiB
TypeScript
55 lines
1.4 KiB
TypeScript
/**
|
|
* Common utilities and state for setup routes
|
|
*/
|
|
|
|
import { createLogger } from '@automaker/utils';
|
|
import path from 'path';
|
|
import { secureFs } from '@automaker/platform';
|
|
import { getErrorMessage as getErrorMessageShared, createLogError } from '../common.js';
|
|
|
|
const logger = createLogger('Setup');
|
|
|
|
// Storage for API keys (in-memory cache) - private
|
|
const apiKeys: Record<string, string> = {};
|
|
|
|
/**
|
|
* Get an API key for a provider
|
|
*/
|
|
export function getApiKey(provider: string): string | undefined {
|
|
return apiKeys[provider];
|
|
}
|
|
|
|
/**
|
|
* Set an API key for a provider
|
|
*/
|
|
export function setApiKey(provider: string, key: string): void {
|
|
apiKeys[provider] = key;
|
|
}
|
|
|
|
/**
|
|
* Get all API keys (for read-only access)
|
|
*/
|
|
export function getAllApiKeys(): Record<string, string> {
|
|
return { ...apiKeys };
|
|
}
|
|
|
|
/**
|
|
* Helper to persist API keys to .env file
|
|
* Uses centralized secureFs.writeEnvKey for path validation
|
|
*/
|
|
export async function persistApiKeyToEnv(key: string, value: string): Promise<void> {
|
|
const envPath = path.join(process.cwd(), '.env');
|
|
|
|
try {
|
|
await secureFs.writeEnvKey(envPath, key, value);
|
|
logger.info(`[Setup] Persisted ${key} to .env file`);
|
|
} catch (error) {
|
|
logger.error(`[Setup] Failed to persist ${key} to .env:`, error);
|
|
throw error;
|
|
}
|
|
}
|
|
|
|
// Re-export shared utilities
|
|
export { getErrorMessageShared as getErrorMessage };
|
|
export const logError = createLogError(logger);
|