rails-vault-jwt 0.1.3 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a2cc4bd6c97d1029d671f49ee94a1f3b628ff385dc71386d621d4f24db299512
-  data.tar.gz: ef9184fbef5ee181d7d62105c67a937c66af6680fc498b8c1e8a9b92ff6117ae
+  metadata.gz: 848db8369ff224dd2b96fd875b1bba6069b82bf07dd0a901d6807c72c7f51302
+  data.tar.gz: c46c394c5953ecb4570234add0d27dc2a02707c116d80690544345b7da178c77
 SHA512:
-  metadata.gz: 0674d5bc92bbd3a963ba506a55084095e9279ac67be5ff9104abb59cf24474aa332cd80c1f9c0469b2dec3dfe96a73e3b4aaf9dba09116795a26e66b74b9b342
-  data.tar.gz: ffea10ab232b7dea73a123453c8dbe5350c112f60e09a7490ba2ebda0d60d2c8aaa488fd10e0474e37fae5f75c11193c171f48ddcc244fe98566e2934e068960
+  metadata.gz: c598d842e181e015f894fd8ca6fdaaaac928fe86b15eea74b79adc6e5a06707925ab2fd5a55fa81eaf97a0b7ed84518a3ac5f9628ff1cdf0fd1dfe46abfd4b58
+  data.tar.gz: eee69ffe7f2c9381cf123396d6115a057979b85422a0d48e7e28c8e236378aee9554ced5d379a9ee5411ed3ed114b8333f57d3f6849cc06a1f64366a660c05da

data/CHANGELOG.md

@@ -6,6 +6,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.2.0] - 2021-02-06
+### Added
+- Add #bearer_token method to use token to acquire a JWT
+
+### Changed
+- Prefix env vars with `VAULT_`
+
 ## [0.1.3] - 2021-01-18
 ### Added
 - Added `valid_issuers` config item to allow restricting key lookups to specific issuers

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    rails-vault-jwt (0.1.3)
+    rails-vault-jwt (0.2.0)
       activesupport (~> 6.1)
       jwt (~> 2.2)
       vault (~> 0.15)
@@ -9,36 +9,36 @@ PATH
 GEM
   remote: https://rubygems.org/
   specs:
-    actionpack (6.1.0)
-      actionview (= 6.1.0)
-      activesupport (= 6.1.0)
+    actionpack (6.1.1)
+      actionview (= 6.1.1)
+      activesupport (= 6.1.1)
       rack (~> 2.0, >= 2.0.9)
       rack-test (>= 0.6.3)
       rails-dom-testing (~> 2.0)
       rails-html-sanitizer (~> 1.0, >= 1.2.0)
-    actionview (6.1.0)
-      activesupport (= 6.1.0)
+    actionview (6.1.1)
+      activesupport (= 6.1.1)
       builder (~> 3.1)
       erubi (~> 1.4)
       rails-dom-testing (~> 2.0)
       rails-html-sanitizer (~> 1.1, >= 1.2.0)
-    activesupport (6.1.0)
+    activesupport (6.1.1)
       concurrent-ruby (~> 1.0, >= 1.0.2)
       i18n (>= 1.6, < 2)
       minitest (>= 5.1)
       tzinfo (~> 2.0)
       zeitwerk (~> 2.3)
-    ast (2.4.1)
+    ast (2.4.2)
     aws-eventstream (1.1.0)
     aws-sigv4 (1.2.2)
       aws-eventstream (~> 1, >= 1.0.2)
     builder (3.2.4)
-    concurrent-ruby (1.1.7)
+    concurrent-ruby (1.1.8)
     crass (1.0.6)
     diff-lcs (1.4.4)
-    docile (1.3.4)
+    docile (1.3.5)
     erubi (1.10.0)
-    i18n (1.8.7)
+    i18n (1.8.8)
       concurrent-ruby (~> 1.0)
     jwt (2.2.2)
     loofah (2.9.0)
@@ -74,28 +74,28 @@ GEM
     rspec-expectations (3.10.1)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.10.0)
-    rspec-mocks (3.10.1)
+    rspec-mocks (3.10.2)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.10.0)
-    rspec-support (3.10.1)
-    rubocop (1.7.0)
+    rspec-support (3.10.2)
+    rubocop (1.9.1)
       parallel (~> 1.10)
-      parser (>= 2.7.1.5)
+      parser (>= 3.0.0.0)
       rainbow (>= 2.2.2, < 4.0)
       regexp_parser (>= 1.8, < 3.0)
       rexml
       rubocop-ast (>= 1.2.0, < 2.0)
       ruby-progressbar (~> 1.7)
-      unicode-display_width (>= 1.4.0, < 2.0)
-    rubocop-ast (1.4.0)
+      unicode-display_width (>= 1.4.0, < 3.0)
+    rubocop-ast (1.4.1)
       parser (>= 2.7.1.5)
     rubocop-rake (0.5.1)
       rubocop
-    rubocop-rspec (2.1.0)
+    rubocop-rspec (2.2.0)
       rubocop (~> 1.0)
       rubocop-ast (>= 1.1.0)
     ruby-progressbar (1.11.0)
-    simplecov (0.21.0)
+    simplecov (0.21.2)
       docile (~> 1.1)
       simplecov-html (~> 0.11)
       simplecov_json_formatter (~> 0.1)
@@ -103,7 +103,7 @@ GEM
     simplecov_json_formatter (0.1.2)
     tzinfo (2.0.4)
       concurrent-ruby (~> 1.0)
-    unicode-display_width (1.7.0)
+    unicode-display_width (2.0.0)
     vault (0.15.0)
       aws-sigv4
     zeitwerk (2.4.2)

data/lib/rails/vault/jwt.rb

@@ -16,6 +16,8 @@ module Rails
       class InvalidIssuer < StandardError; end
 
       class << self
+        extend Forwardable
+
         def configure
           @config = Config.new
           yield(@config) if block_given?
@@ -25,6 +27,8 @@ module Rails
         def config
           @config || configure
         end
+
+        def_delegators :config, :token, :bearer_token
       end
     end
   end

data/lib/rails/vault/jwt/config.rb

@@ -23,7 +23,7 @@ module Rails
                             end
         end
 
-        def_delegators :@token_provider, :token
+        def_delegators :@token_provider, :token, :bearer_token
       end
     end
   end

data/lib/rails/vault/jwt/token_provider/base_provider.rb

@@ -9,12 +9,17 @@ module Rails
         class BaseProvider
           attr_reader :expire_time
 
-          def initialize(*_args)
+          def initialize(*_args, bearer_role_name: nil, **_kwargs)
             @expire_time = DateTime.now
+            @bearer_role_name = bearer_role_name || ENV.fetch('VAULT_BEARER_ROLE', '')
           end
 
           def auth; end
 
+          def bearer_token
+            client.logical.read("identity/oidc/token/#{@bearer_role_name}")&.data[:token]
+          end
+
           def token
             unless token_valid?
               auth_data = auth

data/lib/rails/vault/jwt/token_provider/role_id.rb

@@ -8,8 +8,8 @@ module Rails
           def initialize(*args, mount_name: 'approle', role_id: nil, secret_id: nil, token_ttl: '5m')
             super
             @mount_name = mount_name
-            @role_id = role_id || ENV.fetch('ROLE_ID')
-            @secret_id = secret_id || ENV.fetch('SECRET_ID')
+            @role_id = role_id || ENV.fetch('VAULT_ROLE_ID')
+            @secret_id = secret_id || ENV.fetch('VAULT_SECRET_ID')
             @token_ttl = token_ttl
           end
 

data/lib/rails/vault/jwt/version.rb

@@ -3,7 +3,7 @@
 module Rails
   module Vault
     module JWT
-      VERSION = '0.1.3'
+      VERSION = '0.2.0'
     end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rails-vault-jwt
 version: !ruby/object:Gem::Version
-  version: 0.1.3
+  version: 0.2.0
 platform: ruby
 authors:
 - Nick King
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2021-01-18 00:00:00.000000000 Z
+date: 2021-02-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport