rails_kms_credentials 0.0.2 → 0.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c1722bd0996c3a1be492c2bfa72531791a1ac30ed88cb159102a6661e60e3270
-  data.tar.gz: 0d9f6bcd5bcddc442e1712b2dfb247c5c71c85fb6636b7777be345e05bb1e2df
+  metadata.gz: 75b923804031caddd3be015d207c02cdb9758d2dc98ebe527ee5ecd163823478
+  data.tar.gz: 98fef79cee6c7910b8e665de1c99ce886159b4c903095321e751f0e1339e801d
 SHA512:
-  metadata.gz: c443e4a5aa075dcf08c675bcfccbc1d49e781b17451370f0bb26f7803dc636df09c4644b4e85a4c6e20675787e97bfa959a19eef045d831f8c2a81f9112663ed
-  data.tar.gz: 8db14c441562ee1438df718fd7700f57f86d0967ff364471cfb60e8b770e0a6c47b8d258b24a3aafeeb9a0ab722ab8bca79eb8de0990c2098401f03c7389fbb5
+  metadata.gz: 14f001897a77ad3664c9125a493992ec2586ee467e2b15c39beaa4ece0685ea29e2ed7281dc8258a17768884431f2dac8e38c0c630ea3ef7b92d1be28cebcbcf
+  data.tar.gz: 257fddec2f37904ef64e578a1bb93e57c8573cf3dee5749fcac565801a79edd2d417669a6b979de3b76ed72618c6aa5da049212d37d3b08829b32126384766ac

data/lib/rails_kms_credentials/store/azure_key_vault.rb

@@ -5,13 +5,13 @@ module RailsKmsCredentials
     module AzureKeyVault
 
       class Store < Base::Store
-        attr_reader :vault, :vault_url, :client
+        attr_reader :vault, :vault_url, :client, :secret_prefix, :loaded
 
         SECRETS_API_VERSION = '7.3'
 
         EMPTY_VALUE = '--EMPTY--'
 
-        def initialize(*) # rubocop:disable Metrics/AbcSize
+        def initialize(*) # rubocop:disable Metrics/AbcSize, Metrics/MethodLength
           super
           @vault = config['vault']
           raise 'Missing KmsCredentials AzureKeyVault vault' if vault.blank?
@@ -21,6 +21,13 @@ module RailsKmsCredentials
           raise 'Missing KmsCredentials AzureKeyVault client.type' if config['client']['type'].blank?
           @_client_klass = Client.get config['client']['type']
           @client = @_client_klass.new self
+          @secret_prefix =  case config['client']['secret_prefix']
+                            when true
+                              Rails.application.class.parent.to_s.underscore.dasherize
+                            when String
+                              config['client']['secret_prefix']
+                            end
+          @_secret_prefix = @secret_prefix ? Regexp.new("^#{@secret_prefix}----") : ''
           @loaded = false
         end
 
@@ -28,7 +35,7 @@ module RailsKmsCredentials
           return @credentials if instance_variable_defined?(:@credentials)
           load_secrets
           @credentials = @_secrets.values.each_with_object(ActiveSupport::OrderedOptions.new) do |secret, memo|
-            name = secret['name'].split('--')
+            name = secret['name'].remove(@_secret_prefix).split('--')
             name.each { |x| x.gsub!('-', '_') }
             parent = name[0..-2].inject(memo) do |h, key|
               if h.key?(key) && !h[key].is_a?(ActiveSupport::OrderedOptions)
@@ -47,7 +54,7 @@ module RailsKmsCredentials
             load_secrets_list
           end
 
-          def load_secrets_list(url = nil) # rubocop:disable Metrics/AbcSize, Metrics/MethodLength
+          def load_secrets_list(url = nil) # rubocop:disable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/PerceivedComplexity, Metrics/MethodLength
             @_get_secrets_list_responses ||= []
             @_secrets ||= {}
             url ||= "#{vault_url}/secrets?api-version=#{SECRETS_API_VERSION}"
@@ -56,6 +63,7 @@ module RailsKmsCredentials
             raise "KmsCredentials AzureKeyVault unable to get list of secrets: #{url}" unless response.ok?
             response['value'].each do |secret|
               secret_name = secret['id'].split('/').last
+              next unless secret_name =~ @_secret_prefix
               secret['name'] = secret_name
               @_secrets[secret_name] = secret
               load_secret secret_name

data/lib/rails_kms_credentials/version.rb

@@ -5,7 +5,7 @@ module RailsKmsCredentials
   module Version
     MAJOR = 0
     MINOR = 0
-    PATCH = 2
+    PATCH = 3
 
   end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rails_kms_credentials
 version: !ruby/object:Gem::Version
-  version: 0.0.2
+  version: 0.0.3
 platform: ruby
 authors:
 - Taylor Yelverton
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-11-01 00:00:00.000000000 Z
+date: 2022-11-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport