Function encryptNoteContent

app/_server/actions/pgp/index.ts:255–347

(
  formData: FormData
)

};

export const encryptNoteContent = async (
  formData: FormData
): Promise<Result<{ encryptedContent: string }>> => {
  try {
    const user = await getCurrentUser();
    if (!user?.username) {
      return { success: false, error: "Not authenticated" };
    }

    const content = formData.get("content") as string;
    const useStoredKey = formData.get("useStoredKey") as string;
    let publicKey = formData.get("publicKey") as string;
    const signNote = formData.get("signNote") === "true";
    const useStoredSigningKey = formData.get("useStoredSigningKey") === "true";
    let signingKey = formData.get("signingKey") as string;
    const signingPassphrase = formData.get("signingPassphrase") as string;
    const skipAuditLog = formData.get("skipAuditLog") === "true";

    if (!content) {
      return { success: false, error: "Content is required" };
    }

    if (useStoredKey === "true") {
      const keysDir = await _getEncryptionDir(user.username);
      publicKey = await serverReadFile(path.join(keysDir, "public.asc"));

      if (!publicKey) {
        return { success: false, error: "No stored public key found" };
      }
    } else if (!publicKey) {
      return { success: false, error: "Public key is required" };
    }

    const publicKeyObj = await openpgp.readKey({ armoredKey: publicKey });
    let signingKeyObj;

    if (signNote) {
      if (!signingPassphrase) {
        return { success: false, error: "Signing passphrase is required" };
      }

      if (useStoredSigningKey) {
        const keysDir = await _getEncryptionDir(user.username);
        signingKey = await serverReadFile(path.join(keysDir, "private.asc"));

        if (!signingKey) {
          return { success: false, error: "No stored private key found for signing" };
        }
      } else if (!signingKey) {
        return { success: false, error: "Private key is required for signing" };
      }

      try {
        const privateKey = await openpgp.readPrivateKey({ armoredKey: signingKey });
        signingKeyObj = await openpgp.decryptKey({
          privateKey,
          passphrase: signingPassphrase,
        });