cipherpipe 0.2.2 → 0.2.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cede0f50205c1e4a24b08d331758e402e2da5cb71aafb1d1853098cf6e08b884
-  data.tar.gz: 9a8ef8aa4b1b6b536b79235476d46fb08375e5d7874f7b5e0c57142aca4d7221
+  metadata.gz: 5b05909d357bbba3e06922c9aeb4f383b12b50aafe8fad70b925d32bfd84a011
+  data.tar.gz: 30c5fe0a31b6c4e30f9b52fe9b5602c3ef9e39b1fe28c11312cab94f2b6123ec
 SHA512:
-  metadata.gz: 765bee7059a4cbb9e5be01c24202f5a9bdb5b98b30ab4a0676d736fe031bc775999842ca619cff4e005acd18e5c00fd85277616baebc6c34af8a93c105b57ca8
-  data.tar.gz: eb417a756177d68525ca08805c06c5e2af061c5dce5d63532cca4e727ff86b7c1d9291a6ed34a157a6f783e79fe79db427d63d112fc3173766fa8394a6cc6c58
+  metadata.gz: 488f65a290e37ce2608ffb5690de2e6223467356edb455f36d587c42e18d84000d746bc0d80033d8934c5088317d0ddd1bdc965c5f22f56bfe8e487ae4994027
+  data.tar.gz: d3123e9d6ddb7547d0bae90ac2f68ba267292f651433b8557c538f5f5a5b2a32d0544df4d7507802b51b803666dcca549b4c286050251bbe2f71f61b1056abf2

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    cipherpipe (0.2.2)
+    cipherpipe (0.2.3)
 
 GEM
   remote: https://rubygems.org/

data/cipherpipe.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |spec|
   spec.name          = "cipherpipe"
-  spec.version       = "0.2.2"
+  spec.version       = "0.2.3"
   spec.authors       = ["Pat Allan"]
   spec.email         = ["pat@freelancing-gods.com"]
 

data/lib/cipherpipe/vault/ec2_token.rb

@@ -8,6 +8,8 @@ class Cipherpipe::Vault::EC2Token
     "http://169.254.169.254/latest/dynamic/instance-identity/pkcs7"
   )
 
+  NONCE_FILE = File.expand_path "~/.cipherpipe-nonce"
+
   def self.call(external_source)
     new(external_source).call
   end
@@ -17,15 +19,23 @@ class Cipherpipe::Vault::EC2Token
   end
 
   def call
-    ::Vault.auth.aws_ec2(
-      external_source.ec2_role, signature
-    ).auth.client_token
+    response = ::Vault.auth.aws_ec2 external_source.ec2_role, signature, nonce
+
+    File.write NONCE_FILE, response.auth.metadata[:nonce]
+
+    response.auth.client_token
   end
 
   private
 
   attr_reader :external_source
 
+  def nonce
+    return nil unless File.exist?(NONCE_FILE)
+
+    File.read NONCE_FILE
+  end
+
   def signature
     http = Net::HTTP.new URL.host, URL.port
     http.open_timeout = 1 # second

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cipherpipe
 version: !ruby/object:Gem::Version
-  version: 0.2.2
+  version: 0.2.3
 platform: ruby
 authors:
 - Pat Allan