rcredstash 0.5.0 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: af1edb53839064594e20faac9a3763659e715973
-  data.tar.gz: eea86d0447ff13342b6945b773ddd526f55d430b
+  metadata.gz: b93824e08980e91459009d284538674f30024423
+  data.tar.gz: 34e5e97871003ec2da31e92a96629d5fbd0b3d1c
 SHA512:
-  metadata.gz: d75896d2100518f478f4befc553b54a224371e6df97c2f0c79b3ea0aaeb930f9c11c44a70c8a7f510e7a114e8187bd1607e09a1b9510a57ade3607d1a3933dc0
-  data.tar.gz: 2b7fc0bcc9d905e3b3fac36dc392715099fd1b473ce240b62cf98653ffe6cb3bd22019aa2c1ba26edaf7b249031cfb9fd13f5b5403479672810d478b5eb76173
+  metadata.gz: b500d8725b3404cc2deed45a3d0a68e5fc4d4b9383f4310cd4f7856bcdf158b55cfbc8f74428a554c800d0ee9521fbf853cdf041ab1bb7c354e4c8de3ebb7f52
+  data.tar.gz: e132dd8ff5873cccaa77f72e295c2875ad4b7d36da0eaa62a9db986fa593b3f78a203150d57f1660a4ccc53c47c0c9fea950aa2a5650d2cee8e44d02dddb40b1

data/README.md

@@ -23,7 +23,11 @@ Or install it yourself as:
 
 ```ruby
 CredStash.get(key)
+CredStash.get(key, context: { 'foo' => 'bar' })
+
 CredStash.put(key, value)
+CredStash.put(key, value, context: { 'foo' => 'bar' })
+
 CredStash.list
 CredStash.delete(key)
 ```

data/lib/cred_stash/cipher_key.rb

@@ -1,8 +1,12 @@
 class CredStash::CipherKey
   attr_reader :data_key, :hmac_key, :wrapped_key
 
-  def self.generate(client: Aws::KMS::Client.new)
-    res = client.generate_data_key(key_id: 'alias/credstash', number_of_bytes: 64)
+  def self.generate(client: Aws::KMS::Client.new, context: {})
+    res = client.generate_data_key(
+      key_id: 'alias/credstash',
+      number_of_bytes: 64,
+      encryption_context: context
+    )
     new(
       data_key: res.plaintext[0...32],
       hmac_key: res.plaintext[32..-1],
@@ -10,8 +14,8 @@ class CredStash::CipherKey
     )
   end
 
-  def self.decrypt(wrapped_key, client: Aws::KMS::Client.new)
-    res = client.decrypt(ciphertext_blob: wrapped_key)
+  def self.decrypt(wrapped_key, client: Aws::KMS::Client.new, context: {})
+    res = client.decrypt(ciphertext_blob: wrapped_key, encryption_context: context)
     new(
       data_key: res.plaintext[0...32],
       hmac_key: res.plaintext[32..-1],

data/lib/cred_stash/secret.rb

@@ -1,16 +1,17 @@
 class CredStash::Secret
   attr_reader :name, :value, :key, :encrypted_value, :hmac
 
-  def initialize(name:, value: nil, key: nil, encrypted_value: nil, hmac: nil)
+  def initialize(name:, value: nil, key: nil, encrypted_value: nil, hmac: nil, context: {})
     @name = name
     @value = value
     @key = key
     @encrypted_value = encrypted_value
     @hmac = hmac
+    @context = context
   end
 
   def encrypt!
-    @key = CredStash::CipherKey.generate
+    @key = CredStash::CipherKey.generate(context: @context)
     @encrypted_value = @key.encrypt(@value)
     @hmac = @key.hmac(@encrypted_value)
   end
@@ -28,11 +29,11 @@ class CredStash::Secret
   end
 
   class << self
-    def find(name)
+    def find(name, context: {})
       item = repository.get(name)
       new(
         name: name,
-        key: CredStash::CipherKey.decrypt(Base64.decode64(item.key)),
+        key: CredStash::CipherKey.decrypt(Base64.decode64(item.key), context: context),
         encrypted_value: Base64.decode64(item.contents),
         hmac: item.hmac
       )

data/lib/cred_stash/version.rb

@@ -1,3 +1,3 @@
 module CredStash
-  VERSION = "0.5.0"
+  VERSION = "0.6.0"
 end

data/lib/cred_stash.rb

@@ -2,8 +2,8 @@ require 'aws-sdk'
 
 module CredStash
   class << self
-    def get(name)
-      secret = Secret.find(name)
+    def get(name, context: {})
+      secret = Secret.find(name, context: context)
 
       if secret.falsified?
         raise "Invalid secret. #{name} has falsified"
@@ -15,8 +15,8 @@ module CredStash
       nil
     end
 
-    def put(name, value)
-      secret = Secret.new(name: name, value: value)
+    def put(name, value, context: {})
+      secret = Secret.new(name: name, value: value, context: context)
       secret.encrypt!
       secret.save
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rcredstash
 version: !ruby/object:Gem::Version
-  version: 0.5.0
+  version: 0.6.0
 platform: ruby
 authors:
 - adorechic
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2016-11-14 00:00:00.000000000 Z
+date: 2017-01-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk