From f5248d8ac2fd26d57b3c614bd6684b0e61277e35 Mon Sep 17 00:00:00 2001
From: David Bomba <turbo124@gmail.com>
Date: Sat, 23 Dec 2023 16:09:03 +1100
Subject: [PATCH] Add RSA encryption/decryption helper

---
 app/Helpers/Encrypt/Secure.php | 41 ++++++++++++++++++++++++++++++++++
 config/ninja.php               |  6 ++++-
 2 files changed, 46 insertions(+), 1 deletion(-)
 create mode 100644 app/Helpers/Encrypt/Secure.php

diff --git a/app/Helpers/Encrypt/Secure.php b/app/Helpers/Encrypt/Secure.php
new file mode 100644
index 000000000000..041fcc700230
--- /dev/null
+++ b/app/Helpers/Encrypt/Secure.php
@@ -0,0 +1,41 @@
+<?php
+/**
+ * Invoice Ninja (https://invoiceninja.com).
+ *
+ * @link https://github.com/invoiceninja/invoiceninja source repository
+ *
+ * @copyright Copyright (c) 2023. Invoice Ninja LLC (https://invoiceninja.com)
+ *
+ * @license https://www.elastic.co/licensing/elastic-license
+ */
+
+namespace App\Helpers\Encrypt;
+
+class Secure
+{
+    public static function encrypt(string $hash): ?string
+    {
+        $data = null;
+
+        $public_key = openssl_pkey_get_public(config('ninja.encryption.public_key'));
+
+        if (openssl_public_encrypt($hash, $encrypted, $public_key)) {
+            $data = base64_encode($encrypted);
+        }
+
+        return $data;
+    }
+
+    public static function decrypt(string $hash): ?string
+    {
+        $data = null;
+
+        $private_key = openssl_pkey_get_private(config('ninja.encryption.private_key'));
+
+        if (openssl_private_decrypt(base64_decode($hash), $decrypted, $private_key)) {
+            $data = $decrypted;
+        }
+
+        return $data;
+    }
+}
\ No newline at end of file
diff --git a/config/ninja.php b/config/ninja.php
index b1fb25d661a0..3ca537c67059 100644
--- a/config/ninja.php
+++ b/config/ninja.php
@@ -233,5 +233,9 @@ return [
         'turnstile' => [
             'secret' => env('CLOUDFLARE_SECRET', null),
         ]
-    ]
+    ],
+    'encryption' => [
+        'public_key' => env('NINJA_PUBLIC_KEY', false),
+        'private_key' => env('NINJA_PRIVATE_KEY', false),
+    ],
 ];