team-secrets 0.1.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 0b3c02adaef7878ce03c50e0fe412fd82821039e
-  data.tar.gz: 7953a39f6d2440ecbe3fa9dc3a180061ff1acb2c
+  metadata.gz: 35393248b8a0f6356910edb2eec52fa9e8a3f6dc
+  data.tar.gz: 8936596845429a271aaecad34cc8734d24cd539b
 SHA512:
-  metadata.gz: 342fc3f8b8563cc055b9f28bfe5e3a8fa818a9bae3cb23f3c76c0a5888a762d72cfd1cdaa43bd6690085bfbe38aacf90de1fbf4bf3b54cb54aa1a2b77a590ae4
-  data.tar.gz: 3e521e2c968db59b9f88243cdd5cce3fe72ad36f3f8367e59c2d3e5bab0cfc498ccd5f6a23819cd71330f97fe81e8bf3d6d11c686d7143a46f306dbca76afaf6
+  metadata.gz: fe4a867a2e59dddf3ac2f24a02742aa2a9c24bf2067d7c918b92bf188bec0bfdf73328af8440e5af2d4b2ce6a583115584ec4fa44e1c11367c2c1d1f7943ea44
+  data.tar.gz: 54033c7c19f98d152721ca9dce850579609dcb7df109a3ac52fbebb1dfa06435da002a7f57bb30e87635e2296ef972636c0ff756dbbf6b786a7a1839db6ba35e

data/lib/team-secrets.rb

@@ -19,7 +19,8 @@ program_desc 'Secrets - sharing secrets secretly'
 
 pre do |global_options,command,options,args|
     config = File.read('config.yaml') if File.exists?('config.yaml')
-    config = YAML.load(config) || {}
+    config = YAML.load(config) if config
+    config ||= {}
 
     unless options.key? :user && !options[:user].nil?
         if config.key? :user
@@ -34,6 +35,10 @@ pre do |global_options,command,options,args|
 
     unless options.key? :private && !options[:user].nil?
         if config.key? :private
+            unless File.exists?(config[:private])
+                raise 'The path to your private key\'s in config.yaml is incorrect'
+            end
+
             options[:private] = config[:private]
         else
             puts 'Your private key was not specified. Use the `-p` flag or put it in config.yaml.'
@@ -70,6 +75,8 @@ command :init do |c|
             user_name = default if user_name.empty?
         end
 
+        puts 'It\'s not a bad idea to create a new public/private key pair just for use with team-secrets'
+
         key_file = options[:key_file]
 
         until key_file && File.exists?(key_file)
@@ -97,13 +104,33 @@ command :init do |c|
         manifest.update
         manifest.writeFile 'manifest.yaml'
 
+        unless File.exists?('.gitignore')
+            puts "Generating default .gitignore..."
+
+            File.write('.gitignore', 'config.yaml')
+        end
+
+        puts "Generating default config.yaml..."
+
+        unless File.exists?('config.yaml')
+            config = {
+                user: user_name,
+                private: ''
+            }
+
+            File.write('config.yaml', config.to_yaml)
+
+            puts 'Add the path to your private key to config.yaml to make life a breeze'
+        end
+
+        puts
         puts green('Done!')
-        puts 'Now, create a new repository with these files and commit. Your new secrets repo is ready to go.'
+        puts 'Now, create a new repository with these files and commit. Your new team-secrets repo is ready to go.'
     end
 end
 
-desc 'Manage users for this Secrets repository'
-long_desc 'Add and remove users or servers who will be able to manage this Secrets repository'
+desc 'Manage users for this team-secrets repository'
+long_desc 'Add and remove users or servers who will be able to manage this team-secrets repository'
 
 command :user do |c|
 
@@ -127,13 +154,49 @@ command :user do |c|
 
             # Check signatures
             # Use current user's private key to get master key from lock_box
-            # Use master key to get all secrets
             # Add new user's record & public key
             # Generate new master key
             # Encrypt all secrets with new master key
             # Encrypt master key with each user's public key, placing in lock_box
             # Update signatures
 
+            master_key = load_master_key(options[:user], options[:private])
+
+            manifest = ManifestManager.new master_key
+            manifest.validate
+
+            users = UserManager.new master_key
+
+            user_name = nil
+            key_file = nil
+
+            until user_name && (/\A.+\z/i =~ user_name)
+                default = `echo $USER`.chomp
+                print "The new user's username (no spaces): "
+                user_name = STDIN.gets.chomp
+            end
+
+            until key_file && File.exists?(key_file)
+                print "Path to new user's public key: "
+                key_file = STDIN.gets.chomp
+                puts "File does not exist or cannot be acccessed." unless File.exists?(key_file)
+            end
+
+            users.add user_name, key_file
+            users.writeFile 'users.yaml'
+
+            master_key = users.master_key
+
+            secrets.rotateMasterKey master_key
+            secrets.writeFile 'secrets.yaml'
+
+            manifest.master_key = master_key
+            manifest.update
+            manifest.writeFile 'manifest.yaml'
+
+            print green('Success! ')
+            puts 'User added.'
+
         end
     end
 
@@ -204,8 +267,8 @@ command :user do |c|
 
 end
 
-desc 'Manage the secrets in this Secrets repository'
-long_desc 'Add, read and remove secrets that users can retrieve from this Secrets repository'
+desc 'Manage the secrets in this team-secrets repository'
+long_desc 'Add, read and remove secrets that users can retrieve from this team-secrets repository'
 
 command :secret do |c|
 
@@ -415,6 +478,9 @@ on_error do |exception|
     next true if exception.class.name.split("::").first == 'GLI'
 
     $stderr.puts red(exception.message)
+
+    $stderr.puts exception.backtrace
+
     false # skip GLI's error handling
 end
 

data/team-secrets.gemspec

@@ -3,7 +3,7 @@ $:.push File.expand_path("../lib", __FILE__)
 
 Gem::Specification.new do |gem|
   gem.name          = 'team-secrets'
-  gem.version       = '0.1.1'
+  gem.version       = '0.1.2'
   gem.platform      = Gem::Platform::RUBY
   gem.authors       = ['Eric Bigoness']
   gem.email         = ['design@firelit.com']

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: team-secrets
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - Eric Bigoness
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-02-25 00:00:00.000000000 Z
+date: 2017-02-26 00:00:00.000000000 Z
 dependencies: []
 description: Encyrpt and store team secrets, passwords and API keys in a repository
   with built-in user management