activerecord_aad 0.0.1 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a48d0ca00ef9c661c33af8afd9f5e960ed7d64b16966c544c4f3d2216b7b53d5
-  data.tar.gz: 9d807d04d19a013900ec0d3f88a5c8f455dbe0fc576c009e22b893508a9e4eb4
+  metadata.gz: 132d1e6ee2a22807d770626e05855f921d08c9939b34ef13ba7d9bbb5cbfaf9d
+  data.tar.gz: a8dade4efc62264cd488b24c67b8d346d019743028b1b2df9103a8764aadfb76
 SHA512:
-  metadata.gz: 3708212cbe063704278a117defd086077464a2cbd326dfcdd1a6f91c8d2901ac6952f881c3d1766410e8cb16b1d1c1e073b970e7587ab12193163fd072415aae
-  data.tar.gz: 1576b4ab5cda795ccb239c7ef80fc1eae01e40525d52a62adb4583cf35d580aecbd4c26f62a4f3da626967223265c00f83f811d8ce944c781d5feb6a373f9af5
+  metadata.gz: 997b7ff430e1944a6813b0c416dd641b09b37c5f39a8909b8e2d0188db457a9d14e682238037572fc03dcbb0fb31249625c1b678f5f6b1c25138904715cb55b7
+  data.tar.gz: fdbf4bd7056745fa874476260d141b89a8641954b495d167940e840152604ddca0f82c2cb69a99859929502e493059fb891c46bc6dcb4336232b452b649dbe1e

data/README.md

@@ -6,3 +6,29 @@ This gem enables using an Azure ActiveDirectory Managed Identity to connect to a
 
 - Add `gem :activerecord_aad` to your Gemfile.
 - Run `bin/bundle install`
+
+## Setup
+
+Follow one of the following guides:
+- MySQL: https://learn.microsoft.com/en-us/azure/mysql/single-server/how-to-connect-with-managed-identity
+- PostgreSQL: https://learn.microsoft.com/en-us/azure/postgresql/single-server/how-to-connect-with-managed-identity
+
+Add the `client_id` from the Azure AD Managed Identity and add it to your `config/database.yml` file with the key `azure_managed_identity`
+
+Example:
+```yaml
+production:
+  adapter: mysql2
+  reconnect: true
+  host: my-app.mysql.database.azure.com
+  azure_managed_identity: 91cb2200-004b-4577-a8ca-a5fa9c082485
+  database: app
+  username: MyAppsManagedIdentity@my-app
+  sslca: /opt/ssl/BaltimoreCyberTrustRoot.crt.pem
+  sslverify: true
+  sslcipher: 'AES256-SHA'
+```
+
+## How it works
+
+Whenever a new database connection is needed, a call is made to "http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https%3A%2F%2Fossrdbms-aad.database.windows.net&client_id=#{database_yml_azure_managed_identity}" to get a new access key. That access key is added as the password to the database configuration that is passed to the adapter to establish the connection.

data/activerecord_aad.gemspec

@@ -4,7 +4,7 @@ $LOAD_PATH << File.join(File.dirname(__FILE__), 'lib')
 
 Gem::Specification.new do |s|
   s.name        = 'activerecord_aad'
-  s.version     = '0.0.1'
+  s.version     = '0.2.0'
   s.authors     = ['Taylor Yelverton']
   s.email       = 'rubygems@yelvert.io'
   s.homepage    = 'https://github.com/ComplyMD/activerecord_aad'

data/lib/activerecord_aad.rb

@@ -8,12 +8,11 @@ module Azure
 
         def configuration_hash
           hash = super.dup
-          if hash.key?(:azure_managed_identity)
-            @managed_identity_manager ||= ManagedIdentityManager.new(hash[:azure_managed_identity])
-            @managed_identity_manager.apply(hash)
+          if hash[:azure_managed_identity].present?
+            @managed_identity_manager ||= ManagedIdentityManager.new(hash)
+            @managed_identity_manager.apply
           end
           hash.symbolize_keys!.freeze
-          puts hash
           hash
         end
 
@@ -27,14 +26,14 @@ module Azure
         def initialize(conf)
           raise "ActiveRecordAAD: invalid config: `#{conf}`" unless conf.is_a?(Hash)
           @config = conf.with_indifferent_access
-          raise 'ActiveRecordAAD: missing client_id' unless config[:client_id].present?
-          @client_id = config[:client_id]
+          @client_id = config[:azure_managed_identity]
           @url = URL
           @url += "&client_id=#{@client_id}" if @client_id.present?
         end
 
         def apply(hash)
-          hash.merge!(password: access_token, enable_cleartext_plugin: true)
+          hash[:password] = access_token
+          hash[:enable_cleartext_plugin] = true if hash[:adapter] == 'mysql2'
         end
 
         def access_token

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: activerecord_aad
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.2.0
 platform: ruby
 authors:
 - Taylor Yelverton
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-07-10 00:00:00.000000000 Z
+date: 2023-07-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activerecord