server/src/Core/OrganizationFeatures/OrganizationApiKeys/GetOrganizationApiKeyCommand.cs

using Bit.Core.Entities;
using Bit.Core.Enums;
using Bit.Core.OrganizationFeatures.OrganizationApiKeys.Interfaces;
using Bit.Core.Repositories;
using Bit.Core.Utilities;

namespace Bit.Core.OrganizationFeatures.OrganizationApiKeys;

public class GetOrganizationApiKeyCommand : IGetOrganizationApiKeyCommand
{
    private readonly IOrganizationApiKeyRepository _organizationApiKeyRepository;

    public GetOrganizationApiKeyCommand(IOrganizationApiKeyRepository organizationApiKeyRepository)
    {
        _organizationApiKeyRepository = organizationApiKeyRepository;
    }

    public async Task<OrganizationApiKey> GetOrganizationApiKeyAsync(Guid organizationId, OrganizationApiKeyType organizationApiKeyType)
    {
        if (!Enum.IsDefined(organizationApiKeyType))
        {
            throw new ArgumentOutOfRangeException(nameof(organizationApiKeyType), $"Invalid value for enum {nameof(OrganizationApiKeyType)}");
        }

        var apiKeys = await _organizationApiKeyRepository
            .GetManyByOrganizationIdTypeAsync(organizationId, organizationApiKeyType);

        if (apiKeys == null || !apiKeys.Any())
        {
            var apiKey = new OrganizationApiKey
            {
                OrganizationId = organizationId,
                Type = organizationApiKeyType,
                ApiKey = CoreHelpers.SecureRandomString(30),
                RevisionDate = DateTime.UtcNow,
            };

            await _organizationApiKeyRepository.CreateAsync(apiKey);
            return apiKey;
        }

        // NOTE: Currently we only allow one type of api key per organization
        return apiKeys.Single();
    }
}