elsa-core/src/modules/Elsa.Secrets.Scripting/JavaScript/ConfigureEngineWithSecrets.cs

using System.Dynamic;
using System.Text.RegularExpressions;
using Elsa.JavaScript.Notifications;
using Elsa.Mediator.Contracts;
using Elsa.Secrets.Management;
using JetBrains.Annotations;

namespace Elsa.Secrets.Scripting.JavaScript;

/// A handler that configures the Jint engine with secrets.
[UsedImplicitly]
public partial class ConfigureEngineWithSecrets(ISecretManager secretManager, IDecryptor decryptor) : INotificationHandler<EvaluatingJavaScript>
{
    /// <inheritdoc />
    public async Task HandleAsync(EvaluatingJavaScript notification, CancellationToken cancellationToken)
    {
        await CopySecretsIntoEngineAsync(notification, cancellationToken);
    }

    private async Task CopySecretsIntoEngineAsync(EvaluatingJavaScript notification, CancellationToken cancellationToken)
    {
        var engine = notification.Engine;
        var expression = notification.Expression;
        var secretNames = GetSecretNamesFromExpression(expression);

        if (secretNames.Count == 0)
            return;

        var filter = new SecretFilter
        {
            Names = secretNames,
            Status = SecretStatus.Active
        };
        var secrets = await secretManager.FindManyAsync(filter, cancellationToken);
        IDictionary<string, object?> secretsContainer = new ExpandoObject();

        foreach (var secret in secrets)
        {
            var secretValue = await decryptor.DecryptAsync(secret.EncryptedValue, cancellationToken);
            secretsContainer[secret.Name] = secretValue;
        }

        engine.SetValue("secrets", secretsContainer);
    }

    private ICollection<string> GetSecretNamesFromExpression(string expression)
    {
        var secretNames = new List<string>();

#if NET6_0
        const string pattern = @"(?<=secrets\.)\w+";
        var matches = Regex.Matches(expression, pattern);
#elif NET7_0_OR_GREATER
        var matches = SecretsRegex().Matches(expression);
#endif

        foreach (Match match in matches)
            secretNames.Add(match.Value);

        return secretNames;
    }

#if NET7_0_OR_GREATER
    [GeneratedRegex(@"(?<=secrets\.)\w+")]
    private static partial Regex SecretsRegex();
#endif
}