aws-pws 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: a03403acc20edb9fa60ed98d22012063ee4388c4
+  data.tar.gz: 0ff585a5b11ad8e63c265f3a297623fdc3b80ab4
+SHA512:
+  metadata.gz: 2918eb82e8836ee47481be0aeb4f5617b1236c6d853362492c9983bd52c94e55291545f94ec74dc95b588176de1458479ea2bc69766f90578d38b637cef344d1
+  data.tar.gz: fa074e4dd4fa9684147f21756e0cc34ec27b8ed360976f460ec11ee5ca121a0fffccabb16deea3fb8a25bf0fedaf75fff5b41d7a33b9eaf952a9015a173c294e

data/.gitignore

@@ -0,0 +1,17 @@
+*.gem
+*.rbc
+.bundle
+.config
+.yardoc
+Gemfile.lock
+InstalledFiles
+_yardoc
+coverage
+doc/
+lib/bundler/man
+pkg
+rdoc
+spec/reports
+test/tmp
+test/version_tmp
+tmp

data/.rspec

@@ -0,0 +1,2 @@
+--color
+--format documentation

data/.travis.yml

@@ -0,0 +1,3 @@
+rvm:
+  - 2.0.0
+  - jruby

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in aws-pws.gemspec
+gemspec

data/LICENSE.md

@@ -0,0 +1,22 @@
+Copyright (c) 2014 Aptible, Inc.
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,68 @@
+# aws-pws
+
+[![Gem Version](https://badge.fury.io/rb/aws-pws.png)](https://rubygems.org/gems/aws-pws)
+[![Build Status](https://travis-ci.org/fancyremarker/aws-pws.png?branch=master)](https://travis-ci.org/fancyremarker/aws-pws)
+
+A password-protected CredentialProvider for AWS, built on [pws](https://github.com/janlelis/pws) and largely copied from [aws-keychain-util](https://github.com/zwily/aws-keychain-util), with an accompanying command line helper.
+
+## Installation
+
+Add the following line to your application's Gemfile.
+
+    gem 'aws-pws'
+
+And then run `bundle install`.
+
+## Usage
+
+## Installation
+
+To install:
+
+    gem install aws-pws
+
+## Usage
+
+To create your keychain:
+
+    $ aws-pws init
+
+To add an item to your aws keychain:
+
+    $ aws-pws add
+
+This will prompt for a friendly name, the Access Key ID, and the Secret Access Key.
+
+To list items in the keychain:
+
+    $ aws-pws ls
+
+To show some saved credentials:
+
+    $ aws-pws cat <name>
+
+To emit the environment variable `export` commands that you can source into your shell:
+
+    $ aws-pws env <name>
+
+To always load the given environment in your shell, add the following to
+your .bashrc or .zshrc
+
+    source `aws-pws env <name>`
+
+To automatically grab AWS credentials from your keychain when using the aws-sdk gem, add the following code:
+
+    AWS.config(credential_provider: AWS::PWS::CredentialProvider.new(name))
+
+## Contributing
+
+1. Fork the project.
+1. Commit your changes, with specs.
+1. Ensure that your code passes specs (`rake`).
+1. Create a new pull request on GitHub.
+
+## Copyright and License
+
+MIT License, see [LICENSE](LICENSE.md) for details.
+
+Copyright (c) 2014 Frank Macreery and contributors.

data/Rakefile

@@ -0,0 +1,4 @@
+require 'bundler/gem_tasks'
+
+require 'aptible/tasks'
+Aptible::Tasks.load_tasks

data/aws-pws.gemspec

@@ -0,0 +1,29 @@
+# encoding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+
+require 'English'
+require 'aws/pws/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = 'aws-pws'
+  spec.version       = AWS::PWS::VERSION
+  spec.authors       = ['Frank Macreery']
+  spec.email         = ['frank@macreery.com']
+  spec.description   = 'A password-protected CredentialProvider for AWS'
+  spec.summary       = 'A password-protected CredentialProvider for AWS'
+  spec.homepage      = 'https://github.com/fancyremarker/aws-pws'
+  spec.license       = 'MIT'
+
+  spec.files         = `git ls-files`.split($RS)
+  spec.executables   = spec.files.grep(/^bin\//) { |f| File.basename(f) }
+  spec.test_files    = spec.files.grep(/^spec\//)
+  spec.require_paths = ['lib']
+
+  spec.add_dependency 'pws'
+  spec.add_dependency 'aws-sdk'
+
+  spec.add_development_dependency 'bundler'
+  spec.add_development_dependency 'aptible-tasks'
+  spec.add_development_dependency 'rake'
+end

data/bin/aws-pws

@@ -0,0 +1,36 @@
+#!/usr/bin/env ruby
+
+require 'aws/pws'
+
+command = ARGV.shift
+
+case command
+when 'init'
+  pws = AWS::PWS::Client.new
+  pws.cli.add('AWS_ACCESS_KEY_ID')
+  pws.cli.add('AWS_SECRET_ACCESS_KEY')
+
+when 'cat'
+  pws = AWS::PWS::StealthClient.new
+  puts "AWS_ACCESS_KEY_ID=#{pws.read('AWS_ACCESS_KEY_ID')}"
+  puts "AWS_SECRET_ACCESS_KEY=#{pws.read('AWS_SECRET_ACCESS_KEY')}"
+
+when 'reset'
+  pws = AWS::PWS::Client.new
+  pws.cli.remove('AWS_ACCESS_KEY_ID')
+  pws.cli.remove('AWS_SECRET_ACCESS_KEY')
+
+when 'env'
+  pws = AWS::PWS::StealthClient.new
+  access_key_id = pws.read('AWS_ACCESS_KEY_ID')
+  secret_access_key = pws.read('AWS_SECRET_ACCESS_KEY')
+
+  puts "export AWS_ACCESS_KEY_ID=\"#{access_key_id}\""
+  puts "export AWS_ACCESS_KEY=\"#{access_key_id}\""
+  puts "export AWS_SECRET_ACCESS_KEY=\"#{secret_access_key}\""
+  puts "export AWS_SECRET_KEY=\"#{secret_access_key}\""
+
+else
+  puts "Usage: #{$PROGRAM_NAME} <command>"
+  puts '  Commands: init, cat, env, reset'
+end

data/lib/aws/pws/client.rb

@@ -0,0 +1,19 @@
+require 'pws'
+
+module AWS
+  module PWS
+    class Client
+      attr_accessor :raw_data, :cli
+
+      def initialize
+        @cli ||= ::PWS.new({})
+        @raw_data = @cli.instance_variable_get(:@data)
+      end
+
+      def read(key)
+        return unless raw_data[key]
+        raw_data[key][:password]
+      end
+    end
+  end
+end

data/lib/aws/pws/credential_provider.rb

@@ -0,0 +1,25 @@
+require 'aws/pws'
+require 'aws-sdk'
+
+module AWS
+  module PWS
+    class CredentialProvider
+      include AWS::Core::CredentialProviders::Provider
+
+      attr_reader :client
+
+      def initialize
+        @client = AWS::PWS::Client.new
+      end
+
+      # rubocop:disable AccessorMethodName
+      def get_credentials
+        {
+          access_key_id: client.read('AWS_ACCESS_KEY_ID'),
+          secret_access_key: client.read('AWS_SECRET_ACCESS_KEY')
+        }
+      end
+      # rubocop:enable AccessorMethodName
+    end
+  end
+end

data/lib/aws/pws/silencer.rb

@@ -0,0 +1,14 @@
+module AWS
+  module PWS
+    module Silencer
+      # Override Paint method to avoid polluting `env` and `cat` output
+      def pa(*)
+      end
+
+      # Disable printing in PWS#read_safe:
+      # https://github.com/janlelis/pws/blob/master/lib/pws.rb#L230
+      def print(*)
+      end
+    end
+  end
+end

data/lib/aws/pws/stealth_client.rb

@@ -0,0 +1,19 @@
+require_relative 'client'
+
+module AWS
+  module PWS
+    class StealthClient < Client
+      def initialize
+        ::PWS.include(AWS::PWS::Silencer)
+
+        STDERR.print 'Enter PWS password: '
+        system 'stty -echo'
+        @cli = ::PWS.new(password: gets.chomp)
+        system 'stty echo'
+        STDERR.puts
+
+        super
+      end
+    end
+  end
+end

data/lib/aws/pws/version.rb

@@ -0,0 +1,5 @@
+module AWS
+  module PWS
+    VERSION = '0.1.0'
+  end
+end

data/lib/aws/pws.rb

@@ -0,0 +1,9 @@
+require 'aws/pws/version'
+require 'aws/pws/client'
+require 'aws/pws/stealth_client'
+require 'aws/pws/silencer'
+
+module AWS
+  module PWS
+  end
+end

data/spec/spec_helper.rb

@@ -0,0 +1,10 @@
+$LOAD_PATH.unshift(File.join(File.dirname(__FILE__), '..', 'lib'))
+$LOAD_PATH.unshift(File.dirname(__FILE__))
+
+# Load shared spec files
+Dir["#{File.dirname(__FILE__)}/shared/**/*.rb"].each do |file|
+  require file
+end
+
+# Require library up front
+require 'aws/pws'

metadata

@@ -0,0 +1,132 @@
+--- !ruby/object:Gem::Specification
+name: aws-pws
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Frank Macreery
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-12-12 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: pws
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: aws-sdk
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: aptible-tasks
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: A password-protected CredentialProvider for AWS
+email:
+- frank@macreery.com
+executables:
+- aws-pws
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".rspec"
+- ".travis.yml"
+- Gemfile
+- LICENSE.md
+- README.md
+- Rakefile
+- aws-pws.gemspec
+- bin/aws-pws
+- lib/aws/pws.rb
+- lib/aws/pws/client.rb
+- lib/aws/pws/credential_provider.rb
+- lib/aws/pws/silencer.rb
+- lib/aws/pws/stealth_client.rb
+- lib/aws/pws/version.rb
+- spec/spec_helper.rb
+homepage: https://github.com/fancyremarker/aws-pws
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.2
+signing_key: 
+specification_version: 4
+summary: A password-protected CredentialProvider for AWS
+test_files:
+- spec/spec_helper.rb