Revert "Add AES GCM encryption provider"

This reverts commit 4af45f7bc9.

services/secrets/secrets.go

@@ -1,17 +1,13 @@
 // Copyright 2021 The Gitea Authors. All rights reserved.
-// SPDX-License-Identifier: MIT
+// Use of this source code is governed by a MIT-style
+// license that can be found in the LICENSE file.
 
 package secrets
 
 import (
-	"context"
 	"fmt"
 
-	auth_model "code.gitea.io/gitea/models/auth"
-	"code.gitea.io/gitea/models/db"
 	"code.gitea.io/gitea/modules/setting"
-
-	"xorm.io/builder"
 )
 
 // MasterKeyProviderType is the type of master key provider
@@ -24,8 +20,7 @@ const (
 )
 
 var (
-	masterKey   MasterKeyProvider
-	encProvider EncryptionProvider
+	masterKey MasterKeyProvider
 )
 
 // Init initializes master key provider based on settings
@@ -38,13 +33,6 @@ func Init() error {
 	default:
 		return fmt.Errorf("invalid master key provider %v", setting.MasterKeyProvider)
 	}
-
-	if err := masterKey.Init(); err != nil {
-		return err
-	}
-
-	encProvider = NewAesEncryptionProvider()
-
 	return nil
 }
 
@@ -52,96 +40,3 @@ func Init() error {
 func GenerateMasterKey() ([][]byte, error) {
 	return masterKey.GenerateMasterKey()
 }
-
-func Encrypt(secret []byte) ([]byte, error) {
-	key, err := masterKey.GetMasterKey()
-	if err != nil {
-		return nil, err
-	}
-
-	if len(key) == 0 {
-		return secret, nil
-	}
-
-	return encProvider.Encrypt(secret, key)
-}
-
-func EncryptString(secret string) (string, error) {
-	key, err := masterKey.GetMasterKey()
-	if err != nil {
-		return "", err
-	}
-
-	if len(key) == 0 {
-		return secret, nil
-	}
-
-	return encProvider.EncryptString(secret, key)
-}
-
-func Decrypt(enc []byte) ([]byte, error) {
-	key, err := masterKey.GetMasterKey()
-	if err != nil {
-		return nil, err
-	}
-
-	if len(key) == 0 {
-		return enc, nil
-	}
-
-	return encProvider.Decrypt(enc, key)
-}
-
-func DecryptString(enc string) (string, error) {
-	key, err := masterKey.GetMasterKey()
-	if err != nil {
-		return "", err
-	}
-
-	if len(key) == 0 {
-		return enc, nil
-	}
-
-	return encProvider.DecryptString(enc, key)
-}
-
-func InsertRepoSecret(ctx context.Context, repoID int64, key, data string, pullRequest bool) error {
-	v, err := EncryptString(data)
-	if err != nil {
-		return err
-	}
-	return db.Insert(ctx, &auth_model.Secret{
-		RepoID:      repoID,
-		Name:        key,
-		Data:        v,
-		PullRequest: pullRequest,
-	})
-}
-
-func InsertOrgSecret(ctx context.Context, userID int64, key, data string, pullRequest bool) error {
-	v, err := EncryptString(data)
-	if err != nil {
-		return err
-	}
-	return db.Insert(ctx, &auth_model.Secret{
-		UserID:      userID,
-		Name:        key,
-		Data:        v,
-		PullRequest: pullRequest,
-	})
-}
-
-func DeleteSecretByID(ctx context.Context, id int64) error {
-	_, err := db.DeleteByBean(ctx, &auth_model.Secret{ID: id})
-	return err
-}
-
-func FindRepoSecrets(ctx context.Context, repoID int64) ([]*auth_model.Secret, error) {
-	var res []*auth_model.Secret
-	return res, db.FindObjects(ctx, builder.Eq{"repo_id": repoID}, nil, &res)
-}
-
-func FindUserSecrets(ctx context.Context, userID int64) ([]*auth_model.Secret, error) {
-	var res []*auth_model.Secret
-	return res, db.FindObjects(ctx, builder.Eq{"user_id": userID}, nil, &res)
-}