dry-credentials 0.5.1 → 0.6.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8940c71155c930786c83a30a5513a6e8312eaa10c161caa8a6a6b69f700626f9
-  data.tar.gz: b44e8fbb54d2bd7dd11d0d43cbe5c4f84f4e0f4b1ef94b5766359b0e7276ddfb
+  metadata.gz: 59e93960ef8033dd289fd382ba92c1defbced92dc86a201946873cfec8db7c7f
+  data.tar.gz: acad0ec132d3509ec9fb43bb50643c610ab97e333e56a1943f2a8fedde65769f
 SHA512:
-  metadata.gz: 02f67b851a1e06dbd9973a4e809881d989e88399bb8498ec46f28dad9862fc1f87973fe17988ce2955a248bcd2620e2acbcadc4a4d12316cb0167e8ec07292d4
-  data.tar.gz: 7de2214a5ea6da20fbf749d901111ca503aac98f5a287743e1761d0adeab3d794d0694bb4ad70810a4d2b6dabde9ba8e5b3345f7272ea3063c803ab56db312a5
+  metadata.gz: aaca0a61c03a5bfd7534d9c80147211acb74091d836d6f4a9062665b00d53984af8f48300034548ca7a85a7e5ee739b80a54e0686c19f5b1e0b5521f70035517
+  data.tar.gz: 4d90b470e1ffaa8c4812baac426763e625c92c1e2bb22021e3a50fe2703cb8d46fa0cbbf3cd09f0f47a8b1dbff97c688c6ecbcf2f161c4cdb4df774226b2b640

data/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 Nothing so far
 
+## 0.6.1
+
+### Improvements
+* Enforce MFA for future gem releases
+
+## 0.6.0
+
+### Additions
+* Allow keys to be read from file e.g. `CREDENTIALS_KEY_FILE`
+
 ## 0.5.1
 
 ### Changes

data/README.md

@@ -94,6 +94,13 @@ Alternatively, you can omit the first part of the variable name. Such a key will
 export CREDENTIALS_KEY=68656973716a4e706e336733377245732b6e77584c6c772b5432446532456f674767664271374a623876383d
 ```
 
+You can also read keys from files which is the recommended way when using [secrets in Docker Compose](https://docs.docker.com/compose/how-tos/use-secrets/). Just append `_FILE` to the corresponding environment variable name and set it to the path from which the secret can be read, for example:
+
+```db
+export SANDBOX_CREDENTIALS_KEY_FILE=/run/secrets/sandbox_credentials_key
+export CREDENTIALS_KEY_FILE=/run/secrets/credentials_key
+```
+
 With this in place, you can use the decrypted credentials anywhere in your app:
 
 ```ruby

data/lib/dry/credentials/helpers.rb

@@ -72,10 +72,15 @@ module Dry
       private
 
       def key
-        if create?
+        case
+        when create?
           ENV[key_ev] = encryptor.generate_key
+        when key = ENV[key_ev] || ENV['CREDENTIALS_KEY']
+          key
+        when file = ENV["#{key_ev}_FILE"] || ENV['CREDENTIALS_KEY_FILE']
+          File.read(file)
         else
-          (ENV[key_ev] || ENV['CREDENTIALS_KEY']) or fail Dry::Credentials::KeyNotSetError
+          fail Dry::Credentials::KeyNotSetError
         end
       end
 

data/lib/dry/credentials/version.rb

@@ -2,6 +2,6 @@
 
 module Dry
   module Credentials
-    VERSION = "0.5.1"
+    VERSION = "0.6.1"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dry-credentials
 version: !ruby/object:Gem::Version
-  version: 0.5.1
+  version: 0.6.1
 platform: ruby
 authors:
 - Sven Schwyn
@@ -93,20 +93,6 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-- !ruby/object:Gem::Dependency
-  name: minitest-focus
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
 - !ruby/object:Gem::Dependency
   name: guard
   requirement: !ruby/object:Gem::Requirement
@@ -187,6 +173,7 @@ metadata:
   source_code_uri: https://github.com/svoop/dry-credentials
   documentation_uri: https://www.rubydoc.info/gems/dry-credentials
   bug_tracker_uri: https://github.com/svoop/dry-credentials/issues
+  rubygems_mfa_required: 'true'
 rdoc_options:
 - "--title"
 - Dry::Credentials
@@ -208,7 +195,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.3
+rubygems_version: 4.0.6
 specification_version: 4
 summary: A mixin to use encrypted credentials in your classes
 test_files: []