feat: secure organization provider credentials

2026-07-10 22:04:43 +08:00
parent e049cb6880
commit 848f913597
51 changed files with 3280 additions and 230 deletions
@@ -6,6 +6,8 @@ import type { PrismaClient } from "@prisma/client";
 import type { FastifyInstance } from "fastify";
 import { registerAuthRoutes } from "./routes/authRoutes.js";
 import { registerOrgRoutes } from "./routes/orgRoutes.js";
+import type { LocalSecretEnvelope } from "../security/secretEnvelope.js";
+import type { ProviderReadinessProbe } from "../connections/providerReadiness.js";

 export interface AdminPluginConfig {
  readonly prisma: PrismaClient;
@@ -14,6 +16,8 @@ export interface AdminPluginConfig {
  readonly feishuAppId: string;
  readonly feishuAppSecret: string;
  readonly projectWorkspaceRoot: string;
+  readonly secretEnvelope: LocalSecretEnvelope;
+  readonly providerReadinessProbe?: ProviderReadinessProbe;
  readonly cookieSecure?: boolean;
  readonly oauthScope?: string;
  readonly fetchImpl?: typeof fetch;
@@ -43,5 +47,9 @@ export async function registerAdminPlugin(
    prisma: config.prisma,
    sessionSecret: config.sessionSecret,
    projectWorkspaceRoot: config.projectWorkspaceRoot,
+    secretEnvelope: config.secretEnvelope,
+    ...(config.providerReadinessProbe !== undefined
+      ? { providerReadinessProbe: config.providerReadinessProbe }
+      : {}),
  });
 }