[SM-460] Isolate SecretsManager files (#2616)

Move SecretsManager files to directories called SecretsManager and add CodeOwners

src/Core/SecretsManager/Commands/AccessPolicies/Interfaces/ICreateAccessPoliciesCommand.cs

@@ -0,0 +1,8 @@
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Commands.AccessPolicies.Interfaces;
+
+public interface ICreateAccessPoliciesCommand
+{
+    Task<List<BaseAccessPolicy>> CreateAsync(List<BaseAccessPolicy> accessPolicies);
+}

src/Core/SecretsManager/Commands/AccessPolicies/Interfaces/IDeleteAccessPolicyCommand.cs

@@ -0,0 +1,6 @@
+namespace Bit.Core.SecretsManager.Commands.AccessPolicies.Interfaces;
+
+public interface IDeleteAccessPolicyCommand
+{
+    Task DeleteAsync(Guid id);
+}

src/Core/SecretsManager/Commands/AccessPolicies/Interfaces/IUpdateAccessPolicyCommand.cs

@@ -0,0 +1,8 @@
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Commands.AccessPolicies.Interfaces;
+
+public interface IUpdateAccessPolicyCommand
+{
+    public Task<BaseAccessPolicy> UpdateAsync(Guid id, bool read, bool write);
+}

src/Core/SecretsManager/Commands/AccessTokens/Interfaces/ICreateAccessTokenCommand.cs

@@ -0,0 +1,8 @@
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Commands.AccessTokens.Interfaces;
+
+public interface ICreateAccessTokenCommand
+{
+    Task<ApiKey> CreateAsync(ApiKey apiKey, Guid userId);
+}

src/Core/SecretsManager/Commands/Projects/Interfaces/ICreateProjectCommand.cs

@@ -0,0 +1,8 @@
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Commands.Projects.Interfaces;
+
+public interface ICreateProjectCommand
+{
+    Task<Project> CreateAsync(Project project);
+}

src/Core/SecretsManager/Commands/Projects/Interfaces/IDeleteProjectCommand.cs

@@ -0,0 +1,9 @@
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Commands.Projects.Interfaces;
+
+public interface IDeleteProjectCommand
+{
+    Task<List<Tuple<Project, string>>> DeleteProjects(List<Guid> ids, Guid userId);
+}
+

src/Core/SecretsManager/Commands/Projects/Interfaces/IUpdateProjectCommand.cs

@@ -0,0 +1,8 @@
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Commands.Projects.Interfaces;
+
+public interface IUpdateProjectCommand
+{
+    Task<Project> UpdateAsync(Project updatedProject, Guid userId);
+}

src/Core/SecretsManager/Commands/Secrets/Interfaces/ICreateSecretCommand.cs

@@ -0,0 +1,8 @@
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Commands.Secrets.Interfaces;
+
+public interface ICreateSecretCommand
+{
+    Task<Secret> CreateAsync(Secret secret);
+}

src/Core/SecretsManager/Commands/Secrets/Interfaces/IDeleteSecretCommand.cs

@@ -0,0 +1,9 @@
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Commands.Secrets.Interfaces;
+
+public interface IDeleteSecretCommand
+{
+    Task<List<Tuple<Secret, string>>> DeleteSecrets(List<Guid> ids);
+}
+

src/Core/SecretsManager/Commands/Secrets/Interfaces/IUpdateSecretCommand.cs

@@ -0,0 +1,8 @@
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Commands.Secrets.Interfaces;
+
+public interface IUpdateSecretCommand
+{
+    Task<Secret> UpdateAsync(Secret secret);
+}

src/Core/SecretsManager/Commands/ServiceAccounts/Interfaces/ICreateServiceAccountCommand.cs

@@ -0,0 +1,8 @@
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Commands.ServiceAccounts.Interfaces;
+
+public interface ICreateServiceAccountCommand
+{
+    Task<ServiceAccount> CreateAsync(ServiceAccount serviceAccount);
+}

src/Core/SecretsManager/Commands/ServiceAccounts/Interfaces/IUpdateServiceAccountCommand.cs

@@ -0,0 +1,8 @@
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Commands.ServiceAccounts.Interfaces;
+
+public interface IUpdateServiceAccountCommand
+{
+    Task<ServiceAccount> UpdateAsync(ServiceAccount serviceAccount, Guid userId);
+}

src/Core/SecretsManager/Entities/AccessPolicy.cs

@@ -0,0 +1,57 @@
+#nullable enable
+using Bit.Core.Entities;
+using Bit.Core.Utilities;
+
+namespace Bit.Core.SecretsManager.Entities;
+
+public abstract class BaseAccessPolicy
+{
+    public Guid Id { get; set; }
+
+    // Access
+    public bool Read { get; set; }
+    public bool Write { get; set; }
+
+    public DateTime CreationDate { get; set; } = DateTime.UtcNow;
+    public DateTime RevisionDate { get; set; } = DateTime.UtcNow;
+
+    public void SetNewId()
+    {
+        Id = CoreHelpers.GenerateComb();
+    }
+}
+
+public class UserProjectAccessPolicy : BaseAccessPolicy
+{
+    public Guid? OrganizationUserId { get; set; }
+    public Guid? GrantedProjectId { get; set; }
+    public User? User { get; set; }
+}
+
+public class UserServiceAccountAccessPolicy : BaseAccessPolicy
+{
+    public Guid? OrganizationUserId { get; set; }
+    public Guid? GrantedServiceAccountId { get; set; }
+    public User? User { get; set; }
+}
+
+public class GroupProjectAccessPolicy : BaseAccessPolicy
+{
+    public Guid? GroupId { get; set; }
+    public Guid? GrantedProjectId { get; set; }
+    public Group? Group { get; set; }
+}
+
+public class GroupServiceAccountAccessPolicy : BaseAccessPolicy
+{
+    public Guid? GroupId { get; set; }
+    public Guid? GrantedServiceAccountId { get; set; }
+    public Group? Group { get; set; }
+}
+
+public class ServiceAccountProjectAccessPolicy : BaseAccessPolicy
+{
+    public Guid? ServiceAccountId { get; set; }
+    public Guid? GrantedProjectId { get; set; }
+    public ServiceAccount? ServiceAccount { get; set; }
+}

src/Core/SecretsManager/Entities/ApiKey.cs

@@ -0,0 +1,34 @@
+using System.ComponentModel.DataAnnotations;
+using Bit.Core.Entities;
+using Bit.Core.Utilities;
+
+namespace Bit.Core.SecretsManager.Entities;
+
+public class ApiKey : ITableObject<Guid>
+{
+    public Guid Id { get; set; }
+    public Guid? ServiceAccountId { get; set; }
+    [MaxLength(200)]
+    public string Name { get; set; }
+    [MaxLength(30)]
+    public string ClientSecret { get; set; }
+    [MaxLength(4000)]
+    public string Scope { get; set; }
+    [MaxLength(4000)]
+    public string EncryptedPayload { get; set; }
+    // Key for decrypting `EncryptedPayload`. Encrypted using the organization key.
+    public string Key { get; set; }
+    public DateTime? ExpireAt { get; set; }
+    public DateTime CreationDate { get; internal set; } = DateTime.UtcNow;
+    public DateTime RevisionDate { get; internal set; } = DateTime.UtcNow;
+
+    public void SetNewId()
+    {
+        Id = CoreHelpers.GenerateComb();
+    }
+
+    public ICollection<string> GetScopes()
+    {
+        return CoreHelpers.LoadClassFromJsonData<List<string>>(Scope);
+    }
+}

src/Core/SecretsManager/Entities/Project.cs

@@ -0,0 +1,30 @@
+#nullable enable
+using Bit.Core.Entities;
+using Bit.Core.Utilities;
+
+namespace Bit.Core.SecretsManager.Entities;
+
+public class Project : ITableObject<Guid>
+{
+    public Guid Id { get; set; }
+
+    public Guid OrganizationId { get; set; }
+
+    public string? Name { get; set; }
+
+    public DateTime CreationDate { get; set; } = DateTime.UtcNow;
+
+    public DateTime RevisionDate { get; set; } = DateTime.UtcNow;
+
+    public DateTime? DeletedDate { get; set; }
+
+    public virtual ICollection<Secret>? Secrets { get; set; }
+
+    public void SetNewId()
+    {
+        if (Id == default(Guid))
+        {
+            Id = CoreHelpers.GenerateComb();
+        }
+    }
+}

src/Core/SecretsManager/Entities/Secret.cs

@@ -0,0 +1,34 @@
+#nullable enable
+using Bit.Core.Entities;
+using Bit.Core.Utilities;
+
+namespace Bit.Core.SecretsManager.Entities;
+
+public class Secret : ITableObject<Guid>
+{
+    public Guid Id { get; set; }
+
+    public Guid OrganizationId { get; set; }
+
+    public string? Key { get; set; }
+
+    public string? Value { get; set; }
+
+    public string? Note { get; set; }
+
+    public DateTime CreationDate { get; set; } = DateTime.UtcNow;
+
+    public DateTime RevisionDate { get; set; } = DateTime.UtcNow;
+
+    public DateTime? DeletedDate { get; set; }
+
+    public ICollection<Project>? Projects { get; set; }
+
+    public void SetNewId()
+    {
+        if (Id == default(Guid))
+        {
+            Id = CoreHelpers.GenerateComb();
+        }
+    }
+}

src/Core/SecretsManager/Entities/ServiceAccount.cs

@@ -0,0 +1,27 @@
+#nullable enable
+using Bit.Core.Entities;
+using Bit.Core.Utilities;
+
+namespace Bit.Core.SecretsManager.Entities;
+
+public class ServiceAccount : ITableObject<Guid>
+{
+    public Guid Id { get; set; }
+
+    public Guid OrganizationId { get; set; }
+
+    public string? Name { get; set; }
+
+    public DateTime CreationDate { get; set; } = DateTime.UtcNow;
+
+    public DateTime RevisionDate { get; set; } = DateTime.UtcNow;
+
+    public void SetNewId()
+    {
+        if (Id == default(Guid))
+        {
+            Id = CoreHelpers.GenerateComb();
+        }
+    }
+
+}

src/Core/SecretsManager/Models/Data/ApiKeyDetails.cs

@@ -0,0 +1,37 @@
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Models.Data;
+
+public class ApiKeyDetails : ApiKey
+{
+    protected ApiKeyDetails() { }
+
+    protected ApiKeyDetails(ApiKey apiKey)
+    {
+        Id = apiKey.Id;
+        ServiceAccountId = apiKey.ServiceAccountId;
+        Name = apiKey.Name;
+        ClientSecret = apiKey.ClientSecret;
+        Scope = apiKey.Scope;
+        EncryptedPayload = apiKey.EncryptedPayload;
+        Key = apiKey.Key;
+        ExpireAt = apiKey.ExpireAt;
+        CreationDate = apiKey.CreationDate;
+        RevisionDate = apiKey.RevisionDate;
+    }
+}
+
+public class ServiceAccountApiKeyDetails : ApiKeyDetails
+{
+    public ServiceAccountApiKeyDetails()
+    {
+
+    }
+
+    public ServiceAccountApiKeyDetails(ApiKey apiKey, Guid organizationId) : base(apiKey)
+    {
+        ServiceAccountOrganizationId = organizationId;
+    }
+
+    public Guid ServiceAccountOrganizationId { get; set; }
+}

src/Core/SecretsManager/Repositories/IAccessPolicyRepository.cs

@@ -0,0 +1,14 @@
+#nullable enable
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Repositories;
+
+public interface IAccessPolicyRepository
+{
+    Task<List<BaseAccessPolicy>> CreateManyAsync(List<BaseAccessPolicy> baseAccessPolicies);
+    Task<bool> AccessPolicyExists(BaseAccessPolicy baseAccessPolicy);
+    Task<BaseAccessPolicy?> GetByIdAsync(Guid id);
+    Task<IEnumerable<BaseAccessPolicy>?> GetManyByProjectId(Guid id);
+    Task ReplaceAsync(BaseAccessPolicy baseAccessPolicy);
+    Task DeleteAsync(Guid id);
+}

src/Core/SecretsManager/Repositories/IApiKeyRepository.cs

@@ -0,0 +1,11 @@
+using Bit.Core.Repositories;
+using Bit.Core.SecretsManager.Entities;
+using Bit.Core.SecretsManager.Models.Data;
+
+namespace Bit.Core.SecretsManager.Repositories;
+
+public interface IApiKeyRepository : IRepository<ApiKey, Guid>
+{
+    Task<ApiKeyDetails> GetDetailsByIdAsync(Guid id);
+    Task<ICollection<ApiKey>> GetManyByServiceAccountIdAsync(Guid id);
+}

src/Core/SecretsManager/Repositories/IProjectRepository.cs

@@ -0,0 +1,16 @@
+using Bit.Core.Enums;
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Repositories;
+
+public interface IProjectRepository
+{
+    Task<IEnumerable<Project>> GetManyByOrganizationIdAsync(Guid organizationId, Guid userId, AccessClientType accessType);
+    Task<IEnumerable<Project>> GetManyByIds(IEnumerable<Guid> ids);
+    Task<Project> GetByIdAsync(Guid id);
+    Task<Project> CreateAsync(Project project);
+    Task ReplaceAsync(Project project);
+    Task DeleteManyByIdAsync(IEnumerable<Guid> ids);
+    Task<bool> UserHasReadAccessToProject(Guid id, Guid userId);
+    Task<bool> UserHasWriteAccessToProject(Guid id, Guid userId);
+}

src/Core/SecretsManager/Repositories/ISecretRepository.cs

@@ -0,0 +1,14 @@
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Repositories;
+
+public interface ISecretRepository
+{
+    Task<IEnumerable<Secret>> GetManyByOrganizationIdAsync(Guid organizationId);
+    Task<IEnumerable<Secret>> GetManyByIds(IEnumerable<Guid> ids);
+    Task<IEnumerable<Secret>> GetManyByProjectIdAsync(Guid projectId);
+    Task<Secret> GetByIdAsync(Guid id);
+    Task<Secret> CreateAsync(Secret secret);
+    Task<Secret> UpdateAsync(Secret secret);
+    Task SoftDeleteManyByIdAsync(IEnumerable<Guid> ids);
+}

src/Core/SecretsManager/Repositories/IServiceAccountRepository.cs

@@ -0,0 +1,14 @@
+using Bit.Core.Enums;
+using Bit.Core.SecretsManager.Entities;
+
+namespace Bit.Core.SecretsManager.Repositories;
+
+public interface IServiceAccountRepository
+{
+    Task<IEnumerable<ServiceAccount>> GetManyByOrganizationIdAsync(Guid organizationId, Guid userId, AccessClientType accessType);
+    Task<ServiceAccount> GetByIdAsync(Guid id);
+    Task<ServiceAccount> CreateAsync(ServiceAccount serviceAccount);
+    Task ReplaceAsync(ServiceAccount serviceAccount);
+    Task<bool> UserHasReadAccessToServiceAccount(Guid id, Guid userId);
+    Task<bool> UserHasWriteAccessToServiceAccount(Guid id, Guid userId);
+}