mirror of
https://github.com/documenso/documenso.git
synced 2025-11-10 04:22:32 +10:00
d766b58f42
## Description Currently we are required to ensure PII data is not passed around in search parameters and in the open for GDPR reasons. Allowing us to encrypt and decrypt values with expiry dates will allow us to ensure this doesn't happen. ## Changes Made - Added TPRC router for encryption method ## Testing Performed - Tested encrypting and decrypting data with and without `expiredAt` - Tested via directly accessing API and also via trpc in react components - Tested parsing en email search param in a page and decrypting it successfully ## Checklist - [X] I have tested these changes locally and they work as expected. - [X] I have followed the project's coding style guidelines.
24 lines
942 B
TypeScript
24 lines
942 B
TypeScript
export const DOCUMENSO_ENCRYPTION_KEY = process.env.NEXT_PRIVATE_ENCRYPTION_KEY;
|
|
|
|
export const DOCUMENSO_ENCRYPTION_SECONDARY_KEY = process.env.NEXT_PRIVATE_ENCRYPTION_SECONDARY_KEY;
|
|
|
|
if (!DOCUMENSO_ENCRYPTION_KEY || !DOCUMENSO_ENCRYPTION_SECONDARY_KEY) {
|
|
throw new Error('Missing DOCUMENSO_ENCRYPTION_KEY or DOCUMENSO_ENCRYPTION_SECONDARY_KEY keys');
|
|
}
|
|
|
|
if (DOCUMENSO_ENCRYPTION_KEY === DOCUMENSO_ENCRYPTION_SECONDARY_KEY) {
|
|
throw new Error(
|
|
'DOCUMENSO_ENCRYPTION_KEY and DOCUMENSO_ENCRYPTION_SECONDARY_KEY cannot be equal',
|
|
);
|
|
}
|
|
|
|
if (DOCUMENSO_ENCRYPTION_KEY === 'CAFEBABE') {
|
|
console.warn('*********************************************************************');
|
|
console.warn('*');
|
|
console.warn('*');
|
|
console.warn('Please change the encryption key from the default value of "CAFEBABE"');
|
|
console.warn('*');
|
|
console.warn('*');
|
|
console.warn('*********************************************************************');
|
|
}
|