FilesExpand file tree

main

/

byok-error-policy.ts

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

28 lines (27 loc) · 1.11 KB

main

/

byok-error-policy.ts

Copy path

Top

File metadata and controls

• Code
• Blame

28 lines (27 loc) · 1.11 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

import { internalErrorResponse, internalOrchestrationErrorPolicy } from '@/lib/api/server/routes'

import { WorkspaceByokWorkspaceNotFoundError } from '@/lib/api-key/application/workspace-byok-keys'

import {

InsufficientWorkspacePermissionsError,

NoWorkspaceAccessError,

} from '@/lib/core/application/workspace-authorization'

/** Preserves the workspace BYOK settings access refusals. */

export function workspaceByokErrorPolicy(mode: 'read' | 'write') {

return {

project(error: unknown) {

if (

error instanceof NoWorkspaceAccessError ||

error instanceof InsufficientWorkspacePermissionsError ||

(mode === 'write' && error instanceof WorkspaceByokWorkspaceNotFoundError)

) {

return internalErrorResponse(mode === 'read' ? 401 : 403, {

error: mode === 'read' ? 'Unauthorized' : 'Only workspace admins can manage BYOK keys',

})

}

return internalOrchestrationErrorPolicy.project(error)

},

unhandled: () =>

internalErrorResponse(500, {

error: mode === 'read' ? 'Failed to load BYOK keys' : 'Failed to delete BYOK keys',

}),

}

}