@cumulus/common/kms.js

"use strict";
var __importDefault = (this && this.__importDefault) || function (mod) {
    return (mod && mod.__esModule) ? mod : { "default": mod };
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.KMS = void 0;
const aws_sdk_1 = __importDefault(require("aws-sdk"));
const errors_1 = require("@cumulus/errors");
const util_1 = require("./util");
const KMSDecryptionFailed = errors_1.createErrorType('KMSDecryptionFailed');
class KMS {
    static async encrypt(text, kmsId) {
        util_1.deprecate('@cumulus/common/key-pair-provider', '1.17.0', '@cumulus/aws-client/KMS.encrypt');
        const params = {
            KeyId: kmsId,
            Plaintext: text,
        };
        const kms = new aws_sdk_1.default.KMS();
        const { CiphertextBlob } = await kms.encrypt(params).promise();
        if (!CiphertextBlob) {
            throw new Error('Encryption failed, undefined CiphertextBlob returned');
        }
        return CiphertextBlob.toString('base64');
    }
    static async decrypt(text) {
        util_1.deprecate('@cumulus/common/key-pair-provider', '1.17.0', '@cumulus/aws-client/KMS.decryptBase64String');
        const params = {
            CiphertextBlob: Buffer.from(text, 'base64'),
        };
        const kms = new aws_sdk_1.default.KMS();
        try {
            const { Plaintext } = await kms.decrypt(params).promise();
            if (!Plaintext) {
                throw new Error('Decryption failed, undefined Plaintext returned');
            }
            return Plaintext.toString();
        }
        catch (error) {
            if (error.toString().includes('InvalidCiphertextException')) {
                throw new KMSDecryptionFailed('Decrypting the secure text failed. The provided text is invalid');
            }
            throw error;
        }
    }
}
exports.KMS = KMS;
//# sourceMappingURL=kms.js.map