Class: SecureCredentials::Store

Inherits:
Object
  • Object
show all
Defined in:
lib/secure_credentials/store.rb

Overview

Store provides read-write interface for YAML configuration files. It supports:

- both encrypted and plain files,
- both file-per-environment and multi-environment files.

It takes base path of configuration file (for example, ‘config/secrets`) and environment value. Then it tries to find the most appropriate file for this configuration in following order:

"#{base}.#{env}.yml.enc"
"#{base}.#{env}.yml"
"#{base}.yml.enc"
"#{base}.yml"

Key for decoding encoded files can be passed:

- in `key` argument;
- envvar identified by `env_key`, default is to upcased basename appended with `_KEY`
  (ex., `SECRETS_KEY`);
- in file found at `key_path`,
  by default it uses filename and replaces `.yml.enc` with `.key`
  (`secrets.production.key` for `secrets.production.yml.enc`);
- SecureCredentials.master_key.

If environment specific file is present, it’s whole content is returned. Otherwise ‘env` is used to fetch appropriate section.

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(path, key = nil, env: nil, key_path: nil, env_key: nil) ⇒ Store

Returns a new instance of Store.



63
64
65
66
67
68
69
70
 
# File 'lib/secure_credentials/store.rb', line 63

def initialize(path, key = nil, env: nil, key_path: nil, env_key: nil)
  @path = path = Pathname.new(path)
  @env = env
  @environmental, @encrypted, @filename = self.class.detect_filename(path, env)
  @key = key
  @key_path = key_path || filename && filename.sub_ext('').sub_ext('.key')
  @env_key = env_key || self.class.env_key_for(path)
end

Instance Attribute Details

#encrypted ⇒ Object (readonly) Also known as: encrypted?

Returns the value of attribute encrypted.



59
60
61
 
# File 'lib/secure_credentials/store.rb', line 59

def encrypted
  @encrypted
end

#env ⇒ Object (readonly)

Returns the value of attribute env.



59
60
61
 
# File 'lib/secure_credentials/store.rb', line 59

def env
  @env
end

#environmental ⇒ Object (readonly) Also known as: environmental?

Returns the value of attribute environmental.



59
60
61
 
# File 'lib/secure_credentials/store.rb', line 59

def environmental
  @environmental
end

#filename ⇒ Object (readonly)

Returns the value of attribute filename.



59
60
61
 
# File 'lib/secure_credentials/store.rb', line 59

def filename
  @filename
end

#path ⇒ Object (readonly)

Returns the value of attribute path.



59
60
61
 
# File 'lib/secure_credentials/store.rb', line 59

def path
  @path
end

Class Method Details

.detect_filename(path, env) ⇒ Object

Finds the most appropriate existing file for given path and env. Returns ‘[environmental?, encrypted?, filename]`.



35
36
37
38
39
40
41
42
43
44
45
46
47
 
# File 'lib/secure_credentials/store.rb', line 35

def detect_filename(path, env)
  stub_ext_path = Pathname.new("#{path}.stub")
  if path.basename.to_s.include?('.yml')
    [false, path.basename.to_s.end_with?('.enc'), path]
  else
    [
      [true,  true,   stub_ext_path.sub_ext(".#{env}.yml.enc")],
      [true,  false,  stub_ext_path.sub_ext(".#{env}.yml")],
      [false, true,   stub_ext_path.sub_ext('.yml.enc')],
      [false, false,  stub_ext_path.sub_ext('.yml')],
    ].find { |x| x[2].exist? }
  end
end

.env_key_for(path) ⇒ Object 



49
50
51
 
# File 'lib/secure_credentials/store.rb', line 49

def env_key_for(path)
  "#{path.basename.to_s.upcase}_KEY"
end

.load_yaml(string) ⇒ Object

ERB -> YAML.safe_load with aliases support.



54
55
56
 
# File 'lib/secure_credentials/store.rb', line 54

def load_yaml(string)
  YAML.safe_load(ERB.new(string).result, [], [], true)
end

Instance Method Details

#change(&block) ⇒ Object

Prepares file for edition, yields filename and then saves updated file.

Raises:



90
91
92
93
94
95
96
97
 
# File 'lib/secure_credentials/store.rb', line 90

def change(&block)
  raise FileNotFound, "File not found for '#{path}'" unless filename && filename.exist?
  if encrypted?
    encrypted_file.change(&block)
  else
    yield filename
  end
end

#content ⇒ Object

Fetches appropriate environmental content or returns whole content in the case of single-environment file.



74
75
76
77
 
# File 'lib/secure_credentials/store.rb', line 74

def content
  result = environmental? ? full_content : full_content[env.to_s]
  result || {}
end

#read ⇒ Object

Read file content.



80
81
82
83
84
85
86
87
 
# File 'lib/secure_credentials/store.rb', line 80

def read
  return '' unless filename && filename.exist?
  if encrypted?
    encrypted_file.read
  else
    filename.read
  end
end