Files
Alex van Andel fc9c26e8dd feat: add encryptedKey column to Credential table for calendar integrations (#27154)
Adds encrypted credential storage using a new keyring system:
  - New `encryptedKey` column with AES-256-GCM encryption
  - Decryption in getCalendarsEvents with fallback to legacy `key`
  - buildCredentialCreateData service for credential creation
  - Phase 1: Google Calendar only, other integrations follow
2026-01-30 09:15:13 -03:00

63 lines
1.7 KiB
TypeScript

import type { NextApiRequest, NextApiResponse } from "next";
import { symmetricEncrypt } from "@calcom/lib/crypto";
import logger from "@calcom/lib/logger";
import prisma from "@calcom/prisma";
import getInstalledAppPath from "../../_utils/getInstalledAppPath";
import appConfig from "../config.json";
import { BuildCalendarService } from "../lib";
export default async function handler(req: NextApiRequest, res: NextApiResponse) {
if (req.method === "POST") {
const { urls } = req.body;
// Get user
const user = await prisma.user.findFirstOrThrow({
where: {
id: req.session?.user?.id,
},
select: {
id: true,
email: true,
},
});
const data = {
type: appConfig.type,
key: symmetricEncrypt(JSON.stringify({ urls }), process.env.CALENDSO_ENCRYPTION_KEY || ""),
userId: user.id,
teamId: null,
appId: appConfig.slug,
invalid: false,
delegationCredentialId: null,
};
try {
const dav = BuildCalendarService({
id: 0,
...data,
user: { email: user.email },
encryptedKey: null,
});
const listedCals = await dav.listCalendars();
if (listedCals.length !== urls.length) {
throw new Error(`Listed cals and URLs mismatch: ${listedCals.length} vs. ${urls.length}`);
}
await prisma.credential.create({
data,
});
} catch (e) {
logger.error("Could not add ICS feeds", e);
return res.status(500).json({ message: "Could not add ICS feeds" });
}
return res.status(200).json({ url: getInstalledAppPath({ variant: "calendar", slug: "ics-feed" }) });
}
if (req.method === "GET") {
return res.status(200).json({ url: "/apps/ics-feed/setup" });
}
}