server side encryption aes256

README.md

@@ -22,6 +22,8 @@ parse-server file system storage adapter
     "module": "parse-server-fs-adapter",
     "options": {
       "filesSubDirectory": "my/files/folder" // optional
+      "encrypt": true //optional,
+      "secretKey: 'someKey' //mandatory if encrypt is true
     } 
   }
 }

index.js

@@ -7,9 +7,21 @@
 var fs = require('fs');
 var path = require('path');
 var pathSep = require('path').sep;
+var nodecipher = require('node-cipher');
 
 function FileSystemAdapter(options) {
   options = options || {};
+
+    this._encrypt = false;
+    this._secretKey = "";
+
+  if (options.encrypt && options.encrypt == true){
+      if (!options.secretKey){
+          throw "Encrypt key not defined";
+      }
+      this._encrypt =true;
+      this._secretKey = options.secretKey;
+  }
   let filesSubDirectory = options.filesSubDirectory || '';
   this._filesDir = filesSubDirectory;
   this._mkdir(this._getApplicationDir());
@@ -20,14 +32,28 @@ function FileSystemAdapter(options) {
 
 FileSystemAdapter.prototype.createFile = function(filename, data) {
   return new Promise((resolve, reject) => {
-    let filepath = this._getLocalFilePath(filename);
-    fs.writeFile(filepath, data, (err) => {
-      if(err !== null) {
-        return reject(err);
-      }
-      resolve(data);
-    });
-  });
+      let filepath = this._getLocalFilePath(filename);
+
+      fs.writeFile(filepath, data, (err) => {
+          if (err !== null) {
+              return reject(err);
+          }
+          if(this._encrypt === true){
+              nodecipher.encryptSync({
+                  algorithm: 'aes-256-cbc',
+                  input: filepath,
+                  output: filepath,
+                  password: this._secretKey
+              }, function (err, opts) {
+                  if(err){
+                      return reject(err);
+                  }
+                  return resolve()
+              })
+          }
+          return resolve(data);
+      });
+  })
 }
 
 FileSystemAdapter.prototype.deleteFile = function(filename) {
@@ -51,11 +77,25 @@ FileSystemAdapter.prototype.deleteFile = function(filename) {
 FileSystemAdapter.prototype.getFileData = function(filename) {
   return new Promise((resolve, reject) => {
     let filepath = this._getLocalFilePath(filename);
-    fs.readFile( filepath , function (err, data) {
-      if(err !== null) {
-        return reject(err);
-      }
-      resolve(data);
+    if(this._encrypt && this._encrypt == true){
+        console.log(filename);
+        console.log(filepath)
+        nodecipher.decryptSync({
+            input: filepath,
+            output: filepath,
+            algorithm: 'aes-256-cbc',
+            password: this._secretKey
+        }, function (err) {
+            if (err){
+                return reject(err)
+            }
+        })
+    }
+    fs.readFile(filepath , function (err, data) {
+        if(err) {
+            return reject(err);
+        }
+        return resolve(data);
     });
   });
 }

package.json

@@ -19,5 +19,8 @@
     "istanbul": "^0.4.2",
     "jasmine": "^2.4.1",
     "parse-server-conformance-tests": "^1.0.0"
+  },
+  "dependencies": {
+    "node-cipher": "^6.3.2"
   }
 }

spec/encrypt.spec.js

@@ -0,0 +1,25 @@
+'use strict';
+let FileSystemAdapter = require('../index.js');
+
+describe('File encryption tests', () => {
+    var adapter = new FileSystemAdapter({
+        filesSubDirectory: 'sub1/sub2',
+        encrypt: true,
+        secretKey: 'test'
+    })
+    it("should properly create, read, delete files", (done) => {
+        var filename = 'file.txt';
+        adapter.createFile(filename, "hello world", 'text/utf8').then((result) => {
+            return adapter.getFileData(filename);
+        }, (err) => {
+            fail("The adapter should create the file");
+            done();
+        }).then((result) => {
+            expect(result instanceof Buffer).toBe(true);
+            expect(result.toString('utf-8')).toEqual("hello world");
+            adapter.deleteFile(filename);
+            done()
+        })
+    }, 5000);
+})
+

spec/support/jasmine.json

@@ -1,6 +1,7 @@
 {
   "spec_dir": "spec",
   "spec_files": [
-    "test.spec.js"
+    "test.spec.js",
+    "encrypt.spec.js"
   ]
 }

spec/test.spec.js

@@ -8,5 +8,7 @@ describe('FileSystemAdapter tests', () => {
     filesSubDirectory: 'sub1/sub2'
   });
 
-  filesAdapterTests.testAdapter("FileSystemAdapter", fsAdapter);  
+    filesAdapterTests.testAdapter("FileSystemAdapter", fsAdapter);
 })
+
+