rails_kms_credentials 0.4.0 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '0213877dcffaf1fdd9c7fd105e3672896af45bac98016950253e51cc4506981e'
-  data.tar.gz: 33db35c6bba9e87d1225d2bc9c69e6238079ff7e5c14aee0bbe78c08f382b4e7
+  metadata.gz: 1541f2dec831dfac6b5ffeefb2655fb54ebb25fe13b3dadbc180a0d665d6e135
+  data.tar.gz: 00e4ab56b77cbf3a92aaf0a1d833aab2984bc37fd834d97d8dcefe87fb1c853d
 SHA512:
-  metadata.gz: 9d485d0f78de0d8c1f168ea1f3009a429e3bb0e7bac71ead622bf227f05509861c7525208532dd26c7a2330e48e062f06b751b1cfeba7e04d1e01c14e09c4a83
-  data.tar.gz: ec94f342392a7d003b94cdd5e29c0409a4c6d6c9158a0fdc5b3cd459b779823f8fec577c29c7f51c6a54d13a0366ca54e4e7596a0093c5fb2ae99513272526ad
+  metadata.gz: 901b2ddeae2dd1a8e1c6394abde690aa73000620cad2e1485f9ce65d0835c355602de47357742f84233a2fcf9d884835cdbe534783edb79d62f3cdc0c3ce47be
+  data.tar.gz: f391e7dbd037edcd8f6608e92bc994a7508ae91605d329c9bb29aca1380a973a6b10960e59a5b8f9431f3ba312210595fcb1a47a51893a0460368d6e71d61e92

data/README.md

@@ -44,6 +44,7 @@ Client | `client.type`
 ---|---
 [Managed Identity](#managed-identity) | `managed_identity`
 [Client Credentials](#client-credentials) | `client_credentials`
+[Environment Access Token](#environment-access-token) | `env_access_token`
 
 
 ##### Managed Identity
@@ -58,9 +59,26 @@ Key | Description
 ##### Client Credentials
 This is the client to use when connecting from outside of Azure. [See here](https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow).
 
+You'll need to register an "App Registration" in Azure and grant it permission to access the Key vault secrets. [See the wiki page for morehelp](https://nuancewiki.atlassian.net/wiki/spaces/EN/pages/797409849/Azure+KMS+Credentials)
+
 **Config**
 Key | Description
 ---|---
 `client.tenant_id` | The directory tenant the application plans to operate against, in GUID or domain-name format.
 `client.client_id` | The application ID that's assigned to your app. You can find this information in the portal where you registered your app.
 `client.client_secret` | The client secret that you generated for your app in the app registration portal.
+
+##### Environment Access Token
+This is the client to use when you have an access token that can be loaded by setting an Environment variable.
+
+The `access_token` may be fetched via Azure CLI. For example, you could
+authenticate via `az login`, then export the `access_token` into your session:
+
+```
+az account get-access-token --resource "https://vault.azure.net" --query "accessToken" -o tsv
+```
+
+**Config:**
+Key | Description
+---|---
+`client.type` | `env_access_token`

data/lib/rails_kms_credentials/store/azure_key_vault/client/env_access_token.rb

@@ -0,0 +1,47 @@
+# frozen_string_literal: true
+
+module RailsKmsCredentials
+  module Store
+    module AzureKeyVault
+      module Client
+        class EnvAccessToken < Base
+          def initialize(*)
+            super
+          end
+
+          def get_secrets_list(url)
+            HTTParty.get(
+              url,
+              headers: {
+                Authorization: "Bearer #{access_token}",
+              },
+            )
+          end
+
+          def get_secret(url)
+            HTTParty.get(
+              url,
+              headers: {
+                Authorization: "Bearer #{access_token}",
+              },
+            )
+          end
+
+          private
+
+            def access_token
+              return @access_token if instance_variable_defined?(:@access_token)
+              @access_token = ENV['AZURE_KEY_VAULT_ACCESS_TOKEN']
+
+              raise 'KmsCredentials AzureKeyVault EnvAccessToken unable to get access token' unless @access_token
+              @access_token
+            end
+
+        end
+
+        add(:env_access_token, EnvAccessToken)
+
+      end
+    end
+  end
+end

data/lib/rails_kms_credentials/store/azure_key_vault/client.rb

@@ -28,3 +28,4 @@ require 'rails_kms_credentials/store/azure_key_vault/client/base'
 require 'rails_kms_credentials/store/azure_key_vault/client/aks_workload_identity'
 require 'rails_kms_credentials/store/azure_key_vault/client/client_credentials'
 require 'rails_kms_credentials/store/azure_key_vault/client/managed_identity'
+require 'rails_kms_credentials/store/azure_key_vault/client/env_access_token'

data/lib/rails_kms_credentials/version.rb

@@ -4,7 +4,7 @@ module RailsKmsCredentials
 
   module Version
     MAJOR = 0
-    MINOR = 4
+    MINOR = 5
     PATCH = 0
 
   end

data/lib/rails_kms_credentials.rb

@@ -14,4 +14,4 @@ require 'rails_kms_credentials/railtie'
 require 'rails_kms_credentials/version'
 
 Rails::Application::Configuration.send(:include, RailsKmsCredentials::Configuration)
-Rails::Application.send(:include, RailsKmsCredentials::Application)
+Rails::Application.send(:include, RailsKmsCredentials::Application)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rails_kms_credentials
 version: !ruby/object:Gem::Version
-  version: 0.4.0
+  version: 0.5.0
 platform: ruby
 authors:
 - Taylor Yelverton
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-04-05 00:00:00.000000000 Z
+date: 2024-07-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -82,6 +82,7 @@ files:
 - lib/rails_kms_credentials/store/azure_key_vault/client/aks_workload_identity.rb
 - lib/rails_kms_credentials/store/azure_key_vault/client/base.rb
 - lib/rails_kms_credentials/store/azure_key_vault/client/client_credentials.rb
+- lib/rails_kms_credentials/store/azure_key_vault/client/env_access_token.rb
 - lib/rails_kms_credentials/store/azure_key_vault/client/managed_identity.rb
 - lib/rails_kms_credentials/store/base.rb
 - lib/rails_kms_credentials/version.rb