heroku_vault 0.1.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6da1bd0e961b29d71404d3bd4dfe90b2d7c82ff2d31fc04afe39319ad81f5806
-  data.tar.gz: acf4abe8c794f0249035993884e618977111b97a73f4848c92ff164d6cb98b37
+  metadata.gz: 5a2d5d52c6423626ed86032a70946a82f363db1d7c96bfa33893636788b8fad1
+  data.tar.gz: c81703c1f78453c8a7e83e385d157b0c75ba08278fb2d386c111d8ebac90a3f4
 SHA512:
-  metadata.gz: 7e2be878df478d9eb77badf7c8c480886d4c08181944bf9603a111d9a2930a34ff6566d101a3db7835953d3f000b000f0fddac87bcf7845d56b98bc95b3aa1bf
-  data.tar.gz: 97f584b6db030d9110ff140130c54ccfeb7a437195fb17f2731a593dfb1c869334ac76c435bdd104ddd31487edf76c0d4cbab90aef6e6b3cb5b1b1406038bdaf
+  metadata.gz: 1bb48b815177da51cc85802d709abbca18d3fb5c4e7b908831fcf17c987a7e5c520d62025df930dce699d8ea4f29ee0b4012ba1c6b5b4be5cbc7b1ca54d34f38
+  data.tar.gz: 1cfb0d52b8a329b8d7979b4a0a2b5f6c33d199be8252cd7489b6bea1c167f3d4b7e82eae86b226be33acdfe36494ab0abc2a491aa3ee13acb17719523f88f1f7

data/lib/heroku_vault/cli.rb

@@ -5,9 +5,11 @@ module HerokuVault
   class Cli < Thor
     desc "encrypt config_file", "encrypt usage"
     method_option :output, aliases: :o, required: true
+    method_option :salt, aliases: :s
     def encrypt(file_name)
       password = enter_password
-      encryptor = HerokuVault::EncrypterFactory.create(password)
+      salt = enter_salt
+      encryptor = HerokuVault::EncrypterFactory.create(password, salt)
 
       config_data = open(file_name) do |io|
         JSON.load(io)
@@ -27,7 +29,8 @@ module HerokuVault
       end
 
       password = enter_password
-      encryptor = HerokuVault::EncrypterFactory.create(password)
+      salt = enter_salt
+      encryptor = HerokuVault::EncrypterFactory.create(password, salt)
 
       decrypted = config_data.map do |key, val|
         [key, encryptor.decrypt_and_verify(val)]
@@ -49,9 +52,10 @@ module HerokuVault
     method_option :output, aliases: :o, required: true
     def create_encrypted_config(app_name)
       password = enter_password
+      salt = enter_salt
       heroku = HerokuVault::HerokuCommander.new
       config_data = heroku.config_all(app_name)
-      encryptor = HerokuVault::EncrypterFactory.create(password)
+      encryptor = HerokuVault::EncrypterFactory.create(password, salt)
 
       encrypted = JSON.parse(config_data).map do |key, val|
         [key, encryptor.encrypt_and_sign(val)]
@@ -65,7 +69,8 @@ module HerokuVault
     method_option :file, aliases: :f, required: true
     def apply(app_name)
       password = enter_password
-      encryptor = HerokuVault::EncrypterFactory.create(password)
+      salt = enter_salt
+      encryptor = HerokuVault::EncrypterFactory.create(password, salt)
       heroku = HerokuVault::HerokuCommander.new
 
       File.open(options[:file]) do |file|
@@ -91,6 +96,13 @@ module HerokuVault
       return password
     end
 
+    def enter_salt
+      print 'enter salt: '
+      salt = STDIN.noecho(&:gets)
+      puts
+      salt
+    end
+
     def output_file(file_name, json_hash)
       File.open(file_name, 'w') do |file|
         JSON.pretty_generate(json_hash).each_line do |line|

data/lib/heroku_vault/encrypter_factory.rb

@@ -2,8 +2,8 @@ require 'active_support'
 
 module HerokuVault
   module EncrypterFactory
-    def self.create(password)
-      key = ActiveSupport::KeyGenerator.new(password).generate_key('salt', 32)
+    def self.create(password, salt = 'salt')
+      key = ActiveSupport::KeyGenerator.new(password).generate_key(salt, 32)
       return ActiveSupport::MessageEncryptor.new(key, cipher: "aes-256-cbc")
     end
   end

data/lib/heroku_vault/version.rb

@@ -1,3 +1,3 @@
 module HerokuVault
-  VERSION = "0.1.1"
+  VERSION = '0.1.2'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: heroku_vault
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - nasum