super_top_secret 0.2.0 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 02c43bd4c3d8138ac3924000e9f4f9cf8a3d24c9
-  data.tar.gz: b561a558a03f7497cb9ce751fe6770a93562cf50
+  metadata.gz: 4684d25489b61bed95644337f1ae63bce74fcf8f
+  data.tar.gz: e526fd185ea0f6f8cec825c3706fd0738683cc69
 SHA512:
-  metadata.gz: 62b15cb51a0c53981c7bd47fde9cd15b1ef5a9b285c392285f6fb315715cefb656e0b2fb316d24d9bcb35212a3655ab07322e40de27b2edede2de6b335c3baa6
-  data.tar.gz: 7b180f316f722c08e86e835bf9900d82a7c03891062014c6d140119264fb5c9e0a93e44225296f0c6ea228c6ea9b7ce468c0a95cd68f4487b53b64d20c457b2f
+  metadata.gz: c5e7a9a14c4e6d1d1931fb8cb12e04a567986dc350724759548d150247bdd312ad9b30f3a42607a8d4b972c65874519469da01ac4df4977666cfa0a6c0246fbf
+  data.tar.gz: 3ad3accded9d27956c8a67c22c0750800ca36322505d9545f1e8e7a69483c34e4d12a73cd36ebbb989f87894abe071681ddc1df86a8270bde5814fc629c514bc

data/lib/super_top_secret/Injector.rb

@@ -2,26 +2,41 @@ module SuperTopSecret
 
   class Injector
     def self.generate_config(app_file, secret_file)
-      app_hash = YAML.load(File.read(app_file))
-      secret_hash = YAML.load(File.read(secret_file))
+      app_hash      = YAML.load(File.read(app_file))
+      secret_hash   = YAML.load(File.read(secret_file))
+      injected_hash = create_new_hash(app_hash, secret_hash)
 
-      injected_hash = {}
+      write_new_hash_to_file(injected_hash)
+    end
+
+    private
+
+    def self.create_new_hash(app_hash, secret_hash)
+      injected_hash = app_hash.dup
 
       app_hash.each do |key, val|
-        if val.class == Hash # inside inner hash
+        if val.is_a?(Hash) # Nested
           val.each do |nested_key, nested_val|
-            nested_val = secret_hash[key][nested_val] if nested_val.include?("53CR3T_")
-            injected_hash[key] = val
+            nested_val = secret_hash[key][nested_val] if secret_field?(nested_val)
             injected_hash[key][nested_key] = nested_val
           end
-        else # top level hash
-          val = secret_hash[val] if val.include?("53CR3T_")
+        else
+          val = secret_hash[val] if secret_field?(val)
           injected_hash[key] = val
         end
       end
 
+      return injected_hash
+    end
+
+    def self.secret_field?(val)
+      val.include?("53CR3T_")
+    end
+
+    def self.write_new_hash_to_file(injected_hash)
       File.open("config/application.yml", "w+"){|f| f.write(injected_hash.to_yaml)}
     end
+
   end
 
 end

data/lib/super_top_secret/version.rb

@@ -1,3 +1,3 @@
 module SuperTopSecret
-  VERSION = '0.2.0'
+  VERSION = '1.0.0'
 end

data/lib/tasks/super_top_secret_tasks.rake

@@ -1,29 +1,28 @@
 namespace :secrets do
-  desc "Decrypt your secrets rake secrets:decrypt"
-  task :decrypt do
-    puts "Decrypting your file, sir and/or madam. Whatever you are, your file is being worked on."
-    if File.file?("config/application_secrets.yml.enc")
-      sh("aws kms decrypt --ciphertext-blob fileb://config/application_secrets.yml.enc --output text --query Plaintext | base64 --decode > config/application_secrets.yml")
-    end
-  end
-
-  desc "Encrypt your secrets rake secrets:encrypt"
+  desc "Encrypt your secrets - rake secrets:encrypt"
   task :encrypt do
-    puts "Encrypting your file, sir and/or madam. Whatever you are, your file is being worked on."
+    puts "Attempting to decrypt..."
     if File.file?("config/application_secrets.yml")
       sh("aws kms encrypt --key-id arn:aws:kms:us-west-2:155751353262:alias/properties --plaintext fileb://config/application_secrets.yml --output text --query CiphertextBlob | base64 --decode > config/application_secrets.yml.enc")
+    else
+      puts "Error: File missing. config/application_secrets.yml is required."
     end
   end
 
-  desc "Inject your secrets into your application.yml"
-  task :inject do
+  desc "Decrypt your secrets - rake secrets:decrypt"
+  task :decrypt do
+    puts "Attempting to decrypt..."
+    if File.file?("config/application_secrets.yml.enc")
+      sh("aws kms decrypt --ciphertext-blob fileb://config/application_secrets.yml.enc --output text --query Plaintext | base64 --decode > config/application_secrets.yml")
+    else
+      puts "Error: File missing. config/application_secrets.yml.enc is required."
+    end
+
     if File.file?("config/application_keys.yml") && File.file?("config/application_secrets.yml")
-      puts "Injecting your files, sir and/or madam. Whatever you are, your files are being worked on."
       SuperTopSecret::Injector.generate_config("config/application_keys.yml", "config/application_secrets.yml")
     else
-      puts "File(s) missing. config/application_keys.yml && config/application_secrets.yml are both required."
-      return
+      puts "Error: File(s) missing. config/application_keys.yml && config/application_secrets.yml are both required."
     end
-
   end
+
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: super_top_secret
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 1.0.0
 platform: ruby
 authors:
 - Cody Stringham
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-06-12 00:00:00.000000000 Z
+date: 2017-06-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails