encrypt_env 1.1.4 → 1.1.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7a7b86cd25877c953565a830b69f69c370ad8130eef2b86ec260b8b05c30cfc6
-  data.tar.gz: 69e8a1187b43f5b9ae2211b4240a1c6041e4727f84c1cdc72b8219e7b94c1982
+  metadata.gz: 2e450fae62c0ff654e9034c4b09d4f7775285c7f446bf6af24d8c99f124841e3
+  data.tar.gz: e83e7f84b9821f7a1790f4320ae12f3296312f3716daa57b90646f904afd787c
 SHA512:
-  metadata.gz: 358473d96fb538fcca421abf95b48f3c78dced20ae04fca667e9c0ad93dfa82f8b94686ae8d3c0a200f7ccc4f9b9e7df3d8ebb38514a51ad15c23b33be85d426
-  data.tar.gz: 586c6f5aff549c0e5dec9948e1a52d174c5aa1756f1b16d1f8d4c83aa7c9b544fbf8dff0130d3103e2a11797c284ebcdd145a3631f2ad07520367eed15cb7fc6
+  metadata.gz: 7fdbcb0834f9f34edcbbd547fa28cafe680a655e69d4320428c3bba80bf2187989cc9a0b2d58ecee61bcbee762828a27bb4754638066cc1eac174ec3fa4aea99
+  data.tar.gz: cca971c37af42ece717519c0b6d795c8f577ccc12e5dcff29a7bb21b1edecc3a3b7ffa95e4b15781dcf35cca67b85ba60c8db072e16c08dc82c4c9f439ec0b50

data/lib/encrypt_env.rb

@@ -9,12 +9,35 @@ require 'json'
 
 # gem 'encrypt_env'
 class EncryptEnv
+  private_class_method def self.path_root
+    @path_root = (defined?(Rails) && Rails.root.to_s) || (defined?(Bundler) && Bundler.root.to_s) || Dir.pwd
+  end
+
   private_class_method def self.master_key
-    key = File.read("#{@path_root}/config/master.key").strip
-    [key].pack('H*')
+    if File.file?("#{@path_root}/config/master.key")
+      key = File.read("#{@path_root}/config/master.key").strip
+    elsif ENV.key?('MASTER_KEY')
+      key = ENV['MASTER_KEY']
+    else
+      false
+    end
+    @master_key = [key].pack('H*')
+    true
   end
 
-  private_class_method def self.data_decrypt(raw_data)
+  private_class_method def self.master_key?
+    if @master_key.nil? && !master_key
+      puts "master key not found in 'config/master.key' file and 'MASTER_KEY' environment variable!"
+      @raw_decrypted = ''
+      return false
+    end
+    true
+  end
+
+  private_class_method def self.data_to_decrypt
+    hex_string = File.read("#{@path_root}/config/secrets.yml.enc")
+    raw_data = [hex_string].pack('H*')
+
     encrypted = raw_data.slice(0, raw_data.length - 28)
     iv = raw_data.slice(raw_data.length - 28, 12)
     tag = raw_data.slice(raw_data.length - 16, 16)
@@ -22,9 +45,10 @@ class EncryptEnv
   end
 
   private_class_method def self.encrypt(content)
+    master_key unless @master_key
     cipher = OpenSSL::Cipher.new('aes-128-gcm')
     cipher.encrypt
-    cipher.key = master_key
+    cipher.key = @master_key
     iv = cipher.random_iv
     cipher.auth_data = ''
     encrypted = cipher.update(content) + cipher.final
@@ -34,47 +58,41 @@ class EncryptEnv
   end
 
   private_class_method def self.decrypt
+    path_root unless @path_root
+    return unless master_key?
+
     decipher = OpenSSL::Cipher.new('aes-128-gcm')
     decipher.decrypt
-    hex_string = File.read("#{@path_root}/config/secrets.yml.enc")
-    data = data_decrypt([hex_string].pack('H*'))
+    data = data_to_decrypt
     encrypted = data[:encrypted]
-    decipher.key = master_key
+    decipher.key = @master_key
     decipher.iv = data[:iv]
     decipher.auth_tag = data[:tag]
     decipher.auth_data = ''
 
-    decipher.update(encrypted) + decipher.final
-  end
-
-  private_class_method def self.path_root
-    @path_root = if defined?(Rails)
-                   Rails.root.to_s
-                 elsif defined?(Bundler)
-                   Bundler.root.to_s
-                 else
-                   Dir.pwd
-                 end
+    @raw_decrypted = decipher.update(encrypted) + decipher.final
+    @decrypted = HashWithIndifferentAccess.new(YAML.load(@raw_decrypted, aliases: true))
+    true
   end
 
   def self.setup
     path_root
-    @secret_file = File.expand_path("#{@path_root}/config/secrets.yml")
+    secret_file = File.expand_path("#{@path_root}/config/secrets.yml")
     key = OpenSSL::Random.random_bytes(16)
     # save key in master.key file
     File.open("#{@path_root}/config/master.key", 'w') { |file| file.write(key.unpack('H*')[0]) }
-    encrypt(File.read(@secret_file))
-    File.rename(@secret_file, 'secrets.yml.old')
+    encrypt(File.read(secret_file))
+    File.rename(secret_file, "#{@path_root}/config/secrets.yml.old")
     system("echo '/config/master.key' >> #{@path_root}/.gitignore")
     system("echo '/config/secrets.yml.old' >> #{@path_root}/.gitignore")
     system("echo 'Set up complete!'")
   end
 
   def self.edit
-    path_root unless @path_root
-    secrets unless @decrypted
+    return unless decrypt
+
     Tempfile.create('secrets.yml') do |f|
-      f.write(decrypt)
+      f.write(@raw_decrypted)
       f.flush
       f.rewind
       system("vim #{f.path}")
@@ -84,50 +102,28 @@ class EncryptEnv
   end
 
   def self.secrets_all
-    path_root unless @path_root
-    secrets unless @decrypted
-    @decrypted
+    return @decrypted if @decrypted
+
+    return @decrypted if decrypt
+
+    {}
   end
 
   def self.secrets
-    @decrypted
+    return {} if !@decrypted && !decrypt
 
-    path_root unless @path_root
-    @decrypted = HashWithIndifferentAccess.new(YAML.load(decrypt, aliases: true))
     unless defined?(Rails)
       env = `rails r "print Rails.env"`.to_sym
-      return @decrypted[env] || @decrypted[:default] || @decrypted
+      return @decrypted[env]
     end
-    @decrypted[Rails.env.to_sym] || @decrypted[:default] || @decrypted
-  end
-
-  def self.secrets_production
-    secrets unless @decrypted
-    @decrypted[:production]
-  end
-
-  def self.secrets_development
-    secrets unless @decrypted
-    @decrypted[:development]
-  end
-
-  def self.secrets_test
-    secrets unless @decrypted
-    @decrypted[:test]
-  end
-
-  def self.secrets_staging
-    secrets unless @decrypted
-    @decrypted[:staging]
+    @decrypted[Rails.env.to_sym]
   end
 
   def self.show
-    # Pry::ColorPrinter.pp(secrets)
     jj secrets
   end
 
   def self.show_all
-    # Pry::ColorPrinter.pp(secrets_all)
     jj secrets_all
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: encrypt_env
 version: !ruby/object:Gem::Version
-  version: 1.1.4
+  version: 1.1.7
 platform: ruby
 authors:
 - Nhu Tan
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-08-05 00:00:00.000000000 Z
+date: 2022-08-09 00:00:00.000000000 Z
 dependencies: []
 description: Encrypts and decrypts environment variables
 email: nhutan2001@gmail.com