Function writePrivateFile

packages/server/src/services/auth/privateFiles.ts:27–53

(
  filePath: string,
  data: string | Buffer,
)

}

export async function writePrivateFile(
  filePath: string,
  data: string | Buffer,
): Promise<void> {
  const dir = dirname(filePath);
  await mkdir(dir, { recursive: true, mode: 0o700 });
  await chmod(dir, 0o700);

  const tmp = `${filePath}.tmp.${randomBytes(8).toString('hex')}`;

  let handle: Awaited<ReturnType<typeof open>> | undefined;
  try {
    handle = await open(tmp, 'w', 0o600);
    await handle.chmod(0o600);
    await handle.writeFile(data);
    await handle.sync();
    await handle.close();
    handle = undefined;
    await rename(tmp, filePath);
  } catch (err) {
    if (handle) {
      await handle.close().catch(() => {});
    }
    await rm(tmp, { force: true }).catch(() => {});
    throw err;
  }
}

export async function readPrivateFile(filePath: string): Promise<Buffer> {
  const info = await stat(filePath);