fix(backend): enforce encryption

Author: pYassine

packages/backend/src/_migrations/1747256357378-auto-migration.ts

@@ -0,0 +1,21 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+import { domifaConfig } from "../config";
+import { structureDocRepository } from "../database";
+
+export class AutoMigration1747256357378 implements MigrationInterface {
+  name = "AutoMigration1747256357378";
+
+  // eslint-disable-next-line @typescript-eslint/no-unused-vars
+  public async up(_queryRunner: QueryRunner): Promise<void> {
+    if (
+      domifaConfig().envId === "prod" ||
+      domifaConfig().envId === "preprod" ||
+      domifaConfig().envId === "local"
+    ) {
+      await structureDocRepository.update({}, { encryptionContext: null });
+    }
+  }
+
+  // eslint-disable-next-line @typescript-eslint/no-unused-vars
+  public async down(_queryRunner: QueryRunner): Promise<void> {}
+}

packages/backend/src/_migrations/1748264445999-encrypt-structure-docs-migration.ts renamed to packages/backend/src/_migrations/1748264443999-encrypt-structure-docs-migration.ts

@@ -10,7 +10,7 @@ import { Readable } from "node:stream";
 type Docs = StructureDoc & {
   structureUuid: string;
 };
-export class EncryptStructureDocsMigration1748264445999
+export class EncryptStructureDocsMigration1748264443999
   implements MigrationInterface
 {
   public fileManagerService: FileManagerService;
@@ -26,7 +26,7 @@ export class EncryptStructureDocsMigration1748264445999
   // eslint-disable-next-line @typescript-eslint/no-unused-vars
   public async up(_queryRunner: QueryRunner): Promise<void> {
     appLogger.warn("[MIGRATION] Encrypt structure docs");
-    await structureDocRepository.update({}, { encryptionContext: null });
+
     const unencryptedDocs: Docs[] = await structureDocRepository
       .createQueryBuilder("structure_doc")
       .leftJoin(
@@ -50,7 +50,7 @@ export class EncryptStructureDocsMigration1748264445999
     );
     const pLimit = (await import("p-limit")).default;
 
-    const limit = pLimit(3);
+    const limit = pLimit(2);
 
     const promises = unencryptedDocs.map((doc) =>
       limit(() => this.processWithPause(doc))
@@ -85,18 +85,17 @@ export class EncryptStructureDocsMigration1748264445999
     } else {
       appLogger.warn("⚠️ Migration completed with errors");
     }
-    throw new Error("pokpo");
   }
 
   public processWithPause = async (doc: Docs) => {
     await this.processDoc(doc);
     this.processedSinceLastPause++;
 
-    if (this.processedSinceLastPause >= 6) {
+    if (this.processedSinceLastPause >= 4) {
       this.processedSinceLastPause = 0;
 
       appLogger.info("⏸️ Wait one second ");
-      await new Promise((resolve) => setTimeout(resolve, 1500));
+      await new Promise((resolve) => setTimeout(resolve, 3000));
     }
   };
 

packages/backend/src/util/file-manager/file-manager.service.ts

@@ -155,7 +155,7 @@ export class FileManagerService {
       return finalBuffer;
     } catch (error) {
       chunks.length = 0;
-      appLogger.error(`Erreur décryptage ${filePath}:`, error.message);
+      appLogger.error(`Decrypt fail ${filePath}:`, error.message);
       throw error;
     }
   }