import { db } from "@server/db"; import { apiKeyOrg, apiKeys } from "@server/db/schemas"; import logger from "@server/logger"; import HttpCode from "@server/types/HttpCode"; import response from "@server/lib/response"; import { NextFunction, Request, Response } from "express"; import createHttpError from "http-errors"; import { z } from "zod"; import { fromError } from "zod-validation-error"; import { eq, and } from "drizzle-orm"; import { OpenAPITags, registry } from "@server/openApi"; const querySchema = z.object({ limit: z .string() .optional() .default("1000") .transform(Number) .pipe(z.number().int().positive()), offset: z .string() .optional() .default("0") .transform(Number) .pipe(z.number().int().nonnegative()) }); const paramsSchema = z.object({ orgId: z.string() }); function queryApiKeys(orgId: string) { return db .select({ apiKeyId: apiKeys.apiKeyId, orgId: apiKeyOrg.orgId, lastChars: apiKeys.lastChars, createdAt: apiKeys.createdAt, name: apiKeys.name }) .from(apiKeyOrg) .where(and(eq(apiKeyOrg.orgId, orgId), eq(apiKeys.isRoot, false))) .innerJoin(apiKeys, eq(apiKeys.apiKeyId, apiKeyOrg.apiKeyId)); } export type ListOrgApiKeysResponse = { apiKeys: Awaited>; pagination: { total: number; limit: number; offset: number }; }; registry.registerPath({ method: "get", path: "/org/{orgId}/api-keys", description: "List all API keys for an organization", tags: [OpenAPITags.Org, OpenAPITags.ApiKey], request: { params: paramsSchema, query: querySchema }, responses: {} }); export async function listOrgApiKeys( req: Request, res: Response, next: NextFunction ): Promise { try { const parsedQuery = querySchema.safeParse(req.query); if (!parsedQuery.success) { return next( createHttpError( HttpCode.BAD_REQUEST, fromError(parsedQuery.error) ) ); } const parsedParams = paramsSchema.safeParse(req.params); if (!parsedParams.success) { return next( createHttpError( HttpCode.BAD_REQUEST, fromError(parsedParams.error) ) ); } const { limit, offset } = parsedQuery.data; const { orgId } = parsedParams.data; const baseQuery = queryApiKeys(orgId); const apiKeysList = await baseQuery.limit(limit).offset(offset); return response(res, { data: { apiKeys: apiKeysList, pagination: { total: apiKeysList.length, limit, offset } }, success: true, error: false, message: "API keys retrieved successfully", status: HttpCode.OK }); } catch (error) { logger.error(error); return next( createHttpError(HttpCode.INTERNAL_SERVER_ERROR, "An error occurred") ); } }