Function getOrCreateStoredSecret

packages/server/src/utils/index.ts:1695–1738

(options: GetOrCreateStoredSecretOptions)

 * Used by initAuthSecrets() for each of the six auth secrets.
 */
export const getOrCreateStoredSecret = async (options: GetOrCreateStoredSecretOptions): Promise<string> => {
    const { envKey, fileName, awsSecretIdSuffix, defaultValueForNew, weakDefault } = options
    const envVal = process.env[envKey]
    const useEnv = envVal && envVal.trim() !== '' && (weakDefault === undefined || envVal !== weakDefault)
    if (useEnv) {
        return envVal!.trim()
    }

    if (USE_AWS_SECRETS_MANAGER && secretsManagerClient) {
        const prefix = process.env.SECRETKEY_AWS_AUTH_PREFIX || 'Flowise'
        const secretId = prefix + awsSecretIdSuffix
        try {
            const command = new GetSecretValueCommand({ SecretId: secretId })
            const response = await secretsManagerClient.send(command)
            if (response.SecretString) {
                return response.SecretString
            }
        } catch (error: any) {
            if (error.name === 'ResourceNotFoundException') {
                const newValue = defaultValueForNew !== undefined ? defaultValueForNew : generateAuthSecret()
                const createCommand = new CreateSecretCommand({
                    Name: secretId,
                    SecretString: newValue
                })
                await secretsManagerClient.send(createCommand)
                return newValue
            }
            throw error
        }
    }

    const dir = getAuthSecretsDirectory()
    const filePath = path.join(dir, fileName)
    try {
        return await fs.promises.readFile(filePath, 'utf8')
    } catch {
        const value = defaultValueForNew !== undefined ? defaultValueForNew : generateAuthSecret()
        if (!fs.existsSync(dir)) {
            fs.mkdirSync(dir, { recursive: true })
        }
        await fs.promises.writeFile(filePath, value)
        return value
    }
}

/**
 * Transform ICredentialBody from req to Credential entity