DEK 버전을 프론트엔드에서 명시적으로 관리하도록 변경

src/routes/(main)/directory/[[id]]/service.ts

@@ -23,6 +23,7 @@ export interface SelectedDirectoryEntry {
   type: "directory" | "file";
   id: number;
   dataKey: CryptoKey;
+  dataKeyVersion: Date;
   name: string;
 }
 
@@ -33,6 +34,7 @@ export const decryptDirectoryMetadata = async (
   const { dataKey } = await unwrapDataKey(metadata.dek, masterKey);
   return {
     dataKey,
+    dataKeyVersion: metadata.dekVersion,
     name: await decryptString(metadata.name, metadata.nameIv, dataKey),
   };
 };
@@ -42,12 +44,13 @@ export const requestDirectoryCreation = async (
   parentId: "root" | number,
   masterKey: MasterKey,
 ) => {
-  const { dataKey } = await generateDataKey();
+  const { dataKey, dataKeyVersion } = await generateDataKey();
   const nameEncrypted = await encryptData(new TextEncoder().encode(name), dataKey);
   return await callPostApi<DirectoryCreateRequest>("/api/directory/create", {
     parentId,
     mekVersion: masterKey.version,
     dek: await wrapDataKey(dataKey, masterKey.key),
+    dekVersion: dataKeyVersion,
     name: encodeToBase64(nameEncrypted.ciphertext),
     nameIv: nameEncrypted.iv,
   });
@@ -58,7 +61,7 @@ export const requestFileUpload = async (
   parentId: "root" | number,
   masterKey: MasterKey,
 ) => {
-  const { dataKey } = await generateDataKey();
+  const { dataKey, dataKeyVersion } = await generateDataKey();
   const fileEncrypted = await encryptData(await file.arrayBuffer(), dataKey);
   const nameEncrypted = await encryptString(file.name, dataKey);
 
@@ -69,6 +72,7 @@ export const requestFileUpload = async (
       parentId,
       mekVersion: masterKey.version,
       dek: await wrapDataKey(dataKey, masterKey.key),
+      dekVersion: dataKeyVersion,
       contentIv: fileEncrypted.iv,
       name: nameEncrypted.ciphertext,
       nameIv: nameEncrypted.iv,
@@ -90,11 +94,13 @@ export const requestDirectoryEntryRename = async (
 
   if (entry.type === "directory") {
     await callPostApi<DirectoryRenameRequest>(`/api/directory/${entry.id}/rename`, {
+      dekVersion: entry.dataKeyVersion,
       name: newNameEncrypted.ciphertext,
       nameIv: newNameEncrypted.iv,
     });
   } else {
     await callPostApi<FileRenameRequest>(`/api/file/${entry.id}/rename`, {
+      dekVersion: entry.dataKeyVersion,
       name: newNameEncrypted.ciphertext,
       nameIv: newNameEncrypted.iv,
     });