activerecord_aad 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6e518372b2ec5ea175036f90aea3db8a6ee83a04e892e9e1c9d369b84d8a5419
-  data.tar.gz: 2790cdbe0184da177aaa6d114904554dca90be20c85bdfe244f042b28b964fe5
+  metadata.gz: 132d1e6ee2a22807d770626e05855f921d08c9939b34ef13ba7d9bbb5cbfaf9d
+  data.tar.gz: a8dade4efc62264cd488b24c67b8d346d019743028b1b2df9103a8764aadfb76
 SHA512:
-  metadata.gz: aed2b5969e0bbd14be1bf51834734455348e15ce02e0b415085bd4d8d67c6d2b50d109b43e23913f860a301e221fe1683813391bbe7c7d1233ccc6a3d5a77ee8
-  data.tar.gz: 43d43ea9c87011cd34882964002165ee13f8166703eda4c279f74a0f11396d53404658cde65db7dd6c4a2c658b980a9601d96c41d5470ac1a7092b9aae34e83c
+  metadata.gz: 997b7ff430e1944a6813b0c416dd641b09b37c5f39a8909b8e2d0188db457a9d14e682238037572fc03dcbb0fb31249625c1b678f5f6b1c25138904715cb55b7
+  data.tar.gz: fdbf4bd7056745fa874476260d141b89a8641954b495d167940e840152604ddca0f82c2cb69a99859929502e493059fb891c46bc6dcb4336232b452b649dbe1e

data/README.md

@@ -6,3 +6,29 @@ This gem enables using an Azure ActiveDirectory Managed Identity to connect to a
 
 - Add `gem :activerecord_aad` to your Gemfile.
 - Run `bin/bundle install`
+
+## Setup
+
+Follow one of the following guides:
+- MySQL: https://learn.microsoft.com/en-us/azure/mysql/single-server/how-to-connect-with-managed-identity
+- PostgreSQL: https://learn.microsoft.com/en-us/azure/postgresql/single-server/how-to-connect-with-managed-identity
+
+Add the `client_id` from the Azure AD Managed Identity and add it to your `config/database.yml` file with the key `azure_managed_identity`
+
+Example:
+```yaml
+production:
+  adapter: mysql2
+  reconnect: true
+  host: my-app.mysql.database.azure.com
+  azure_managed_identity: 91cb2200-004b-4577-a8ca-a5fa9c082485
+  database: app
+  username: MyAppsManagedIdentity@my-app
+  sslca: /opt/ssl/BaltimoreCyberTrustRoot.crt.pem
+  sslverify: true
+  sslcipher: 'AES256-SHA'
+```
+
+## How it works
+
+Whenever a new database connection is needed, a call is made to "http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https%3A%2F%2Fossrdbms-aad.database.windows.net&client_id=#{database_yml_azure_managed_identity}" to get a new access key. That access key is added as the password to the database configuration that is passed to the adapter to establish the connection.

data/activerecord_aad.gemspec

@@ -4,7 +4,7 @@ $LOAD_PATH << File.join(File.dirname(__FILE__), 'lib')
 
 Gem::Specification.new do |s|
   s.name        = 'activerecord_aad'
-  s.version     = '0.1.0'
+  s.version     = '0.2.0'
   s.authors     = ['Taylor Yelverton']
   s.email       = 'rubygems@yelvert.io'
   s.homepage    = 'https://github.com/ComplyMD/activerecord_aad'

data/lib/activerecord_aad.rb

@@ -8,9 +8,9 @@ module Azure
 
         def configuration_hash
           hash = super.dup
-          if hash[:azure_managed_identity_client_id].present?
-            @managed_identity_manager ||= ManagedIdentityManager.new(hash[:azure_managed_identity_client_id])
-            @managed_identity_manager.apply(hash)
+          if hash[:azure_managed_identity].present?
+            @managed_identity_manager ||= ManagedIdentityManager.new(hash)
+            @managed_identity_manager.apply
           end
           hash.symbolize_keys!.freeze
           hash
@@ -23,14 +23,17 @@ module Azure
 
         attr_reader :config, :url
 
-        def initialize(cid)
-          raise 'ActiveRecordAAD: missing client_id' unless cid.present?
-          @client_id = cid
-          @url = "#{URL}&client_id=#{client_id}"
+        def initialize(conf)
+          raise "ActiveRecordAAD: invalid config: `#{conf}`" unless conf.is_a?(Hash)
+          @config = conf.with_indifferent_access
+          @client_id = config[:azure_managed_identity]
+          @url = URL
+          @url += "&client_id=#{@client_id}" if @client_id.present?
         end
 
         def apply(hash)
-          hash.merge!(password: access_token, enable_cleartext_plugin: true)
+          hash[:password] = access_token
+          hash[:enable_cleartext_plugin] = true if hash[:adapter] == 'mysql2'
         end
 
         def access_token

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: activerecord_aad
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Taylor Yelverton