mirror of
https://github.com/BaaRai/ARTEX.git
synced 2026-11-14 20:20:54 +08:00
BaaRai
dc169b074f
Phase 2 of secrets at rest (#213), same AES-256-GCM scheme and key. - llm_profiles.proxy joins the secret columns (AAD llm_profiles.proxy); scanProfile decrypts it for both column lists, SaveProfile encrypts it, an empty proxy stays NULL - brave_search_api_key, tavily_search_api_key, web_search_proxy and global_proxy are stored encrypted (AAD settings.<key>) through GetSetting, SetSetting and InsertSettingIfAbsent; other settings stay in clear - the startup backfill, the no-key refusal and the wrong-key check cover the new values; legacy plaintext is read as-is until backfill API: the proxies are returned masked as a whole (placeholder plus a *_set flag) by GET /api/settings, GET /api/llm/profiles and GET /api/llm. On write the placeholder keeps the stored value, an explicit value replaces it and "" clears it; the placeholder is never stored. The test and model-list endpoints resolve the placeholder to the stored proxy.
85 lines
2.5 KiB
Go
85 lines
2.5 KiB
Go
package db
|
|
|
|
import "database/sql"
|
|
|
|
// Settings is a tiny key-value store for global app config the UI toggles at
|
|
// runtime (e.g. traffic_capture). Missing keys fall back to caller defaults.
|
|
|
|
// GetSetting returns the stored value and ok=false when the key is unset. A
|
|
// secret setting (secretSettingKeys) is decrypted.
|
|
func (d *DB) GetSetting(key string) (value string, ok bool, err error) {
|
|
err = d.QueryRow(`SELECT value FROM settings WHERE key=$1`, key).Scan(&value)
|
|
if err == sql.ErrNoRows {
|
|
return "", false, nil
|
|
}
|
|
if err != nil {
|
|
return "", false, err
|
|
}
|
|
if c, secret := secretSetting(key); secret {
|
|
if value, err = openSecret(c, value); err != nil {
|
|
return "", false, err
|
|
}
|
|
}
|
|
return value, true, nil
|
|
}
|
|
|
|
// sealSetting encrypts the value of a secret setting; other values pass as is.
|
|
func sealSetting(key, value string) (string, error) {
|
|
if c, secret := secretSetting(key); secret {
|
|
return sealSecret(c, value)
|
|
}
|
|
return value, nil
|
|
}
|
|
|
|
// SetSetting upserts a setting value.
|
|
func (d *DB) SetSetting(key, value string) error {
|
|
value, err := sealSetting(key, value)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
_, err = d.Exec(`
|
|
INSERT INTO settings(key, value) VALUES ($1, $2)
|
|
ON CONFLICT (key) DO UPDATE SET value = EXCLUDED.value, updated_at = now()`, key, value)
|
|
return err
|
|
}
|
|
|
|
// InsertSettingIfAbsent writes only when the key does not exist yet; an existing key is
|
|
// kept as-is and inserted=false is returned.
|
|
// For keys like auth.password_hash that "may only be set on first run": the judgment rests
|
|
// on the database primary-key constraint. A caller doing GetSetting-then-write is just a
|
|
// fast-fail path — on a read error or a concurrent race, the existing value will not be
|
|
// silently overwritten by ON CONFLICT DO UPDATE.
|
|
func (d *DB) InsertSettingIfAbsent(key, value string) (inserted bool, err error) {
|
|
if value, err = sealSetting(key, value); err != nil {
|
|
return false, err
|
|
}
|
|
res, err := d.Exec(`
|
|
INSERT INTO settings(key, value) VALUES ($1, $2)
|
|
ON CONFLICT (key) DO NOTHING`, key, value)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
n, err := res.RowsAffected()
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
return n > 0, nil
|
|
}
|
|
|
|
// GetBool returns the boolean setting, or def when unset/unparseable.
|
|
func (d *DB) GetBool(key string, def bool) bool {
|
|
v, ok, err := d.GetSetting(key)
|
|
if err != nil || !ok {
|
|
return def
|
|
}
|
|
return v == "true" || v == "1"
|
|
}
|
|
|
|
// SetBool stores a boolean setting as "true"/"false".
|
|
func (d *DB) SetBool(key string, val bool) error {
|
|
if val {
|
|
return d.SetSetting(key, "true")
|
|
}
|
|
return d.SetSetting(key, "false")
|
|
}
|