encrypt_env 1.1.3 → 1.1.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 78588c28ffceb8161e691eb0f47516c5508ce0a9320127f8caa066b501351f41
-  data.tar.gz: bcd77740b29e543efe7e6c6f96985567c2fd28012d7fb2178f09b3eeb94463d0
+  metadata.gz: c832448cf2b0a36f7c9670495393c18b1fa3210bee11ff4218327bae0ff0caf6
+  data.tar.gz: a692c2b86a27381592355ceb78521f46d2a3b73389b51ea4b3dc1b19dd8b5de8
 SHA512:
-  metadata.gz: a7bc5d048f662a23a7a98537d962cbfe8879989f5ca68a8a57bd067241f3b32eb73a16f7bbf9559279609b505cb0711e25a824779e7641793bc935377b57d118
-  data.tar.gz: 4b3b41e02eac68e9b9ab5f54a3c377039cb4076b0931df07127e4dcac6258d7bc961512b2e04f87d95cfa029550460a53dfc6116967ebedc258657a49c1b0220
+  metadata.gz: 5a20fa7185459b94ce647ca1222da11d667b4ad8fdb8436c6c755d34c568fc3a52cff4b82a75770faf5d00e76ffbade05f6bfb061bd924d83c0a6c345c319458
+  data.tar.gz: 52375f8d2461d89ded146e7b678e60d2dfc38389f6da2401a731e812290a784df2a2b1cf6163589d10eb50158f1a3b6e87974e81d2efb40b7e17cc0fb187c7c9

data/lib/encrypt_env.rb

@@ -10,8 +10,19 @@ require 'json'
 # gem 'encrypt_env'
 class EncryptEnv
   private_class_method def self.master_key
-    key = File.read("#{@path_root}/config/master.key")
-    [key].pack('H*')
+    if File.file?("#{@path_root}/config/master.key")
+      key = File.read("#{@path_root}/config/master.key").strip
+      @master_key = [key].pack('H*')
+      puts 'Get master key success!'
+      true
+    elsif ENV.key?('MASTER_KEY')
+      @master_key = [ENV['MASTER_KEY']].pack('H*')
+      puts 'Get master key success!'
+      true
+    else
+      puts 'Get master key fail!'
+      false
+    end
   end
 
   private_class_method def self.data_decrypt(raw_data)
@@ -22,9 +33,10 @@ class EncryptEnv
   end
 
   private_class_method def self.encrypt(content)
+    master_key unless @master_key
     cipher = OpenSSL::Cipher.new('aes-128-gcm')
     cipher.encrypt
-    cipher.key = master_key
+    cipher.key = @master_key
     iv = cipher.random_iv
     cipher.auth_data = ''
     encrypted = cipher.update(content) + cipher.final
@@ -34,17 +46,25 @@ class EncryptEnv
   end
 
   private_class_method def self.decrypt
+    path_root unless @path_root
+    if @master_key.nil? && !master_key
+      puts "master key not found in 'config/master.key' file and 'MASTER_KEY' environment variable!"
+      @raw_decrypted = ''
+      return false
+    end
     decipher = OpenSSL::Cipher.new('aes-128-gcm')
     decipher.decrypt
     hex_string = File.read("#{@path_root}/config/secrets.yml.enc")
     data = data_decrypt([hex_string].pack('H*'))
     encrypted = data[:encrypted]
-    decipher.key = master_key
+    decipher.key = @master_key
     decipher.iv = data[:iv]
     decipher.auth_tag = data[:tag]
     decipher.auth_data = ''
 
-    decipher.update(encrypted) + decipher.final
+    @raw_decrypted = decipher.update(encrypted) + decipher.final
+    @decrypted = HashWithIndifferentAccess.new(YAML.load(@raw_decrypted, aliases: true))
+    true
   end
 
   private_class_method def self.path_root
@@ -64,16 +84,17 @@ class EncryptEnv
     # save key in master.key file
     File.open("#{@path_root}/config/master.key", 'w') { |file| file.write(key.unpack('H*')[0]) }
     encrypt(File.read(@secret_file))
+    File.rename(@secret_file, "#{@path_root}/config/secrets.yml.old")
     system("echo '/config/master.key' >> #{@path_root}/.gitignore")
-    system("echo '/config/secrets.yml' >> #{@path_root}/.gitignore")
-    system("echo 'Set up complete'")
+    system("echo '/config/secrets.yml.old' >> #{@path_root}/.gitignore")
+    system("echo 'Set up complete!'")
   end
 
   def self.edit
-    path_root unless @path_root
-    secrets unless @decrypted
+    return unless decrypt
+
     Tempfile.create('secrets.yml') do |f|
-      f.write(decrypt)
+      f.write(@raw_decrypted)
       f.flush
       f.rewind
       system("vim #{f.path}")
@@ -83,50 +104,28 @@ class EncryptEnv
   end
 
   def self.secrets_all
-    path_root unless @path_root
-    secrets unless @decrypted
-    @decrypted
+    return @decrypted if @decrypted
+
+    return @decrypted if decrypt
+
+    {}
   end
 
   def self.secrets
-    @decrypted
+    return {} if !@decrypted && !decrypt
 
-    path_root unless @path_root
-    @decrypted = HashWithIndifferentAccess.new(YAML.load(decrypt, aliases: true))
     unless defined?(Rails)
       env = `rails r "print Rails.env"`.to_sym
-      return @decrypted[env] || @decrypted[:default] || @decrypted
+      return @decrypted[env]
     end
-    @decrypted[Rails.env.to_sym] || @decrypted[:default] || @decrypted
-  end
-
-  def self.secrets_production
-    secrets unless @decrypted
-    @decrypted[:production]
-  end
-
-  def self.secrets_development
-    secrets unless @decrypted
-    @decrypted[:development]
-  end
-
-  def self.secrets_test
-    secrets unless @decrypted
-    @decrypted[:test]
-  end
-
-  def self.secrets_staging
-    secrets unless @decrypted
-    @decrypted[:staging]
+    @decrypted[Rails.env.to_sym]
   end
 
   def self.show
-    # Pry::ColorPrinter.pp(secrets)
     jj secrets
   end
 
   def self.show_all
-    # Pry::ColorPrinter.pp(secrets_all)
     jj secrets_all
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: encrypt_env
 version: !ruby/object:Gem::Version
-  version: 1.1.3
+  version: 1.1.6
 platform: ruby
 authors:
 - Nhu Tan
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-08-04 00:00:00.000000000 Z
+date: 2022-08-08 00:00:00.000000000 Z
 dependencies: []
 description: Encrypts and decrypts environment variables
 email: nhutan2001@gmail.com