Module: AwsAssumeRole::Store::Keyring

Includes:
AwsAssumeRole, Logging, AwsAssumeRole::Store
Defined in:
lib/aws_assume_role/store/keyring.rb

Constant Summary collapse

KEYRING_KEY = 
"AwsAssumeRole".freeze

Constants included from AwsAssumeRole

Config, DefaultProvider, VERSION

Class Method Summary collapse

Methods included from Logging

included

Methods included from AwsAssumeRole

shared_config

Class Method Details

.delete_credentials(id, backend: nil) ⇒ Object 



47
48
49
50
51
 
# File 'lib/aws_assume_role/store/keyring.rb', line 47

def delete_credentials(id, backend: nil)
    semaphore.synchronize do
        keyring(backend).delete_password(KEYRING_KEY, id)
    end
end

.fetch(id, backend: nil) ⇒ Object

Raises:

  • (Aws::Errors::NoSuchProfileError) 


40
41
42
43
44
45
 
# File 'lib/aws_assume_role/store/keyring.rb', line 40

def fetch(id, backend: nil)
    logger.debug "Fetching #{id} from keyring"
    fetched = keyring(backend).get_password(KEYRING_KEY, id)
    raise Aws::Errors::NoSuchProfileError if fetched == "null" || fetched.nil? || !fetched
    JSON.parse(fetched, symbolize_names: true)
end

.keyring(backend = AwsAssumeRole::Config.backend) ⇒ Object 



31
32
33
34
35
36
37
38
 
# File 'lib/aws_assume_role/store/keyring.rb', line 31

def keyring(backend = AwsAssumeRole::Config.backend)
    keyrings[backend] ||= begin
        try_backend_plugin
        klass = backend ? "Keyring::Backend::#{backend}".constantize : nil
        logger.debug "Initializing #{klass} backend"
        ::Keyring.new(klass)
    end
end

.keyrings ⇒ Object 



21
22
23
 
# File 'lib/aws_assume_role/store/keyring.rb', line 21

def keyrings
    @keyrings ||= {}
end

.save_credentials(id, credentials, expiration: nil, backend: nil) ⇒ Object 



53
54
55
56
57
58
59
60
 
# File 'lib/aws_assume_role/store/keyring.rb', line 53

def save_credentials(id, credentials, expiration: nil, backend: nil)
    credentials_to_persist = Serialization.credentials_to_hash(credentials)
    credentials_to_persist[:expiration] = expiration if expiration
    semaphore.synchronize do
        keyring(backend).delete_password(KEYRING_KEY, id)
        keyring(backend).set_password(KEYRING_KEY, id, credentials_to_persist.to_json)
    end
end

.semaphore ⇒ Object 



17
18
19
 
# File 'lib/aws_assume_role/store/keyring.rb', line 17

def semaphore
    @semaphore ||= Mutex.new
end

.try_backend_plugin ⇒ Object 



25
26
27
28
29
 
# File 'lib/aws_assume_role/store/keyring.rb', line 25

def try_backend_plugin
    return if AwsAssumeRole::Config.backend_plugin.blank?
    logger.info "Attempting to load #{AwsAssumeRole::Config.backend_plugin} plugin"
    require AwsAssumeRole::Config.backend_plugin
end