unleash.unleash/src/lib/util/anonymise.ts

import { createCipheriv, createHash } from 'crypto';

export function encrypt(s?: string): string {
    const key = process.env.UNLEASH_ENCRYPTION_KEY;
    const iv = process.env.UNLEASH_ENCRYPTION_IV;
    if (!s || !key || !iv) {
        return s ?? '';
    }

    const algorithm = 'aes-256-cbc';

    const cipher = createCipheriv(
        algorithm,
        Buffer.from(key, 'hex'),
        Buffer.from(iv, 'hex'),
    );
    const encrypted = cipher.update(s, 'utf8', 'hex') + cipher.final('hex');
    return `${encrypted}@unleash.run`;
}

export function anonymise(s?: string): string {
    if (!s) {
        return '';
    }
    const hash = createHash('sha256')
        .update(s, 'utf-8')
        .digest('hex')
        .slice(0, 9);
    return `${hash}@unleash.run`;
}

export function anonymiseKeys<T>(object: T, keys: string[]): T {
    if (typeof object !== 'object' || object === null) {
        return object;
    }

    if (Array.isArray(object)) {
        return object.map((item) => anonymiseKeys(item, keys)) as T;
    } else {
        return Object.keys(object).reduce((result, key) => {
            if (
                keys.includes(key) &&
                result[key] !== undefined &&
                result[key] !== null
            ) {
                result[key] = anonymise(result[key]);
            } else if (typeof result[key] === 'object') {
                result[key] = anonymiseKeys(result[key], keys);
            }
            return result;
        }, object);
    }
}