sanctum 0.9.1 → 0.9.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 391cfef346a6d793ccf4dbd4f9f8b573538b59f4f9d9034f3d69fa023e338343
-  data.tar.gz: a4c84b2d811d619a3ed346568cc3950fe6d9641ac6f1df4211efea768d4086cb
+  metadata.gz: 9d1b5442aef18dd24c64c9f428d1654ac0e8c8da40f42682fd24bd3b712f4ac9
+  data.tar.gz: 7bc8c57678eb21a334dc7918121f4d54f5fdba4a435daa84538c5f6ab5909842
 SHA512:
-  metadata.gz: 29a00857295f0443c16deafaccf6873e66b14ea1830578659aea10391e1647bcc995ea763b57d39feb714c2fbc999e1d8d02637dfd4ae2518c9a54030f92533e
-  data.tar.gz: 7d563caa757ed8bf54d60fd6b0ff475f10e342a0ec48d8275a047f359d773b2ed59c0252177a98e71b266e7a8d693d526a2c62b4ec4e4aa1195ca523348cdd03
+  metadata.gz: '06792233d64691d21232ac32657bde81dbf403e902b505b45f96a301248cbb08b96433a9377ad2e9e0ec6e82598016984d4a26f8be84d130f802e42c20483bea'
+  data.tar.gz: 12272a6b0efcf2e724b92bcc182be8d3647e15c844b73027712d5673729e1b562b7c162dda6b8e12ae762260d81c0004c471214bee4f185f984d527640a0748b

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    sanctum (0.9.1)
+    sanctum (0.9.2)
       gli (~> 2.18)
       hashdiff (~> 1.0)
       tty-editor (~> 0.5)

data/lib/sanctum/vault_transit.rb

@@ -8,12 +8,6 @@ module Sanctum
     def self.encrypt(vault_client, secrets, transit_key)
       transit_key = Pathname.new(transit_key)
 
-      #TODO probably nice to do this check earlier on,
-      #Such as in command/base
-      unless transit_key_exist?(vault_client, transit_key)
-        raise red("#{transit_key} does not exist")
-      end
-
       secrets.each do |k, v|
         v = encode(v.to_json)
         #TODO: Fix this....
@@ -21,16 +15,27 @@ module Sanctum
         secrets[k] = v
       end
       secrets
+    rescue Vault::HTTPClientError => e
+      if e.code == 403
+        raise red("#{transit_key} either doesn't exist, or you don't have the proper permissions")
+      end
+      raise
     end
 
     def self.decrypt(vault_client, secrets, transit_key)
       transit_key = Pathname.new(transit_key)
+
       secrets.each do |k, v|
         v = vault_client.logical.write("#{transit_key.dirname.to_s.split("/")[0]}/decrypt/#{transit_key.basename}", ciphertext: v)
         v = JSON(decode(v.data[:plaintext]))
         secrets[k] = v
       end
       secrets
+    rescue Vault::HTTPClientError => e
+      if e.code == 403
+        raise red("#{transit_key} either doesn't exist, or you don't have the proper permissions")
+      end
+      raise
     end
 
     # Writes secrets encrypted with transit to local files
@@ -71,14 +76,9 @@ module Sanctum
       Base64.decode64(string)
     end
 
-    def self.transit_key_exist?(vault_client, transit_key)
-      !vault_client.logical.read(transit_key.to_path).nil?
-    end
-
     def self.create_path(path)
       path = Pathname.new(path).parent.to_path
       FileUtils.mkdir_p(path) unless File.directory?(path)
     end
-
   end
 end

data/lib/sanctum/version.rb

@@ -1,3 +1,3 @@
 module Sanctum
-  VERSION = "0.9.1"
+  VERSION = "0.9.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: sanctum
 version: !ruby/object:Gem::Version
-  version: 0.9.1
+  version: 0.9.2
 platform: ruby
 authors:
 - Corban Raun