@itgorillaz/configify 3.0.0-alpha.4 → 3.1.0-alpha.0

package/README.md

@@ -172,9 +172,20 @@ export class DatabaseConfiguration {
 
 ### Dealing with Secrets
 
-Out of the box, this module can resolve AWS Secrets Manager and Parameter Store secrets. For that, just need to choose which strategies you would like to use to resolve AWS secrets:
+Out of the box, this module can resolve AWS Secrets Manager and Parameter Store secrets.
+
+For that, first is you need to install the required aws-sdk modules:
+
+```
+npm install @aws-sdk/client-ssm @aws-sdk/client-secrets-manager
+```
+
+then you can choose which strategies you would like to use to resolve AWS secrets:
 
 ```js
+import { ConfigifyModule } from '@itgorillaz/configify';
+import { AwsSecretsResolverFactory } from '@itgorillaz/configify/configuration/resolvers/aws';
+
 // use default aws client instances
 ConfigifyModule.forRootAsync({
   secretsResolverStrategies: [

package/configuration/resolvers/bitwarden/bitwarden-secrets-manager.resolver.d.ts

@@ -0,0 +1,13 @@
+import { BitwardenClient } from '@bitwarden/sdk-napi';
+import { ConfigurationResolver } from '../configuration-resolver.interface';
+export declare class BitwardenSecretsManagerConfigurationResolver implements ConfigurationResolver {
+    private readonly client;
+    private readonly accessToken;
+    private readonly BITWARDEN_SECRETS_MANAGER_YAML_KEY;
+    private readonly BITWARDEN_SECRETS_MANAGER_ENV_PREFIX;
+    constructor(client: BitwardenClient, accessToken: string);
+    resolve(config: Record<string, any>): Promise<Record<string, any>>;
+    private filterConfiguration;
+    private resolveSecretValue;
+    private buildBulkRequest;
+}

package/configuration/resolvers/bitwarden/bitwarden-secrets-manager.resolver.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BitwardenSecretsManagerConfigurationResolver = void 0;
+class BitwardenSecretsManagerConfigurationResolver {
+    constructor(client, accessToken) {
+        this.client = client;
+        this.accessToken = accessToken;
+        this.BITWARDEN_SECRETS_MANAGER_YAML_KEY = 'bitwarden-secrets-manager';
+        this.BITWARDEN_SECRETS_MANAGER_ENV_PREFIX = 'BITWARDEN_SECRETS_MANAGER';
+    }
+    async resolve(config) {
+        const parameters = this.filterConfiguration(config);
+        const promises = this.buildBulkRequest(parameters);
+        const results = await Promise.all(promises);
+        const errors = results.filter((r) => !r.success);
+        if (errors && errors.length) {
+            throw new Error(`Unable to resolve parameter:\n${errors
+                .map((e) => { var _a; return `${e.key}: ${e.id} - ${(_a = e.error) === null || _a === void 0 ? void 0 : _a.message}`; })
+                .join('\n')}`);
+        }
+        for (const result of results) {
+            config[result.key] = result.value;
+        }
+        return config;
+    }
+    filterConfiguration(config) {
+        return Object.fromEntries(Object.entries(config).filter(([key]) => key.startsWith(this.BITWARDEN_SECRETS_MANAGER_YAML_KEY) ||
+            key.startsWith(this.BITWARDEN_SECRETS_MANAGER_ENV_PREFIX)));
+    }
+    async resolveSecretValue(key, id) {
+        try {
+            await this.client.auth().loginAccessToken(this.accessToken);
+            const response = await this.client.secrets().get(id);
+            return {
+                id,
+                key,
+                value: response.value,
+                success: true,
+            };
+        }
+        catch (e) {
+            return {
+                id,
+                key,
+                error: e,
+                success: false,
+            };
+        }
+    }
+    buildBulkRequest(config) {
+        const promises = [];
+        for (const [key, value] of Object.entries(config)) {
+            promises.push(this.resolveSecretValue(key, value));
+        }
+        return promises;
+    }
+}
+exports.BitwardenSecretsManagerConfigurationResolver = BitwardenSecretsManagerConfigurationResolver;
+//# sourceMappingURL=bitwarden-secrets-manager.resolver.js.map

package/configuration/resolvers/bitwarden/bitwarden-secrets-manager.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitwarden-secrets-manager.resolver.js","sourceRoot":"","sources":["../../../../src/configuration/resolvers/bitwarden/bitwarden-secrets-manager.resolver.ts"],"names":[],"mappings":";;;AAOA,MAAa,4CAA4C;IAcvD,YACmB,MAAuB,EACvB,WAAmB;QADnB,WAAM,GAAN,MAAM,CAAiB;QACvB,gBAAW,GAAX,WAAW,CAAQ;QAbrB,uCAAkC,GACjD,2BAA2B,CAAC;QAEb,yCAAoC,GACnD,2BAA2B,CAAC;IAU3B,CAAC;IAUJ,KAAK,CAAC,OAAO,CAAC,MAA2B;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAEnD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE5C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,iCAAiC,MAAM;iBACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,MAAM,MAAA,CAAC,CAAC,KAAK,0CAAE,OAAO,EAAE,CAAA,EAAA,CAAC;iBACrD,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QACpC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAQO,mBAAmB,CACzB,MAA2B;QAE3B,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3B,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CACR,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,kCAAkC,CAAC;YACvD,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAC5D,CACF,CAAC;IACJ,CAAC;IASO,KAAK,CAAC,kBAAkB,CAC9B,GAAW,EACX,EAAU;QAEV,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC5D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrD,OAAO;gBACL,EAAE;gBACF,GAAG;gBACH,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,EAAE;gBACF,GAAG;gBACH,KAAK,EAAE,CAAU;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;IACH,CAAC;IAQO,gBAAgB,CACtB,MAA2B;QAE3B,MAAM,QAAQ,GAA6B,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAhHD,oGAgHC"}

package/configuration/resolvers/bitwarden/bitwarden-secrets-resolver.factory.d.ts

@@ -0,0 +1,7 @@
+import { BitwardenSecretsManagerConfigurationResolver } from './bitwarden-secrets-manager.resolver';
+import { BitwardenServerRegion } from './bitwarden-server.region';
+export declare class BitwardenSecretsResolverFactory {
+    private static readonly BITWARDEN_EU_SETTINGS;
+    private static readonly BITWARDEN_US_SETTINGS;
+    static defaultBitwardenSecretsResolver(region: BitwardenServerRegion, accessToken?: string): BitwardenSecretsManagerConfigurationResolver;
+}

package/configuration/resolvers/bitwarden/bitwarden-secrets-resolver.factory.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BitwardenSecretsResolverFactory = void 0;
+const sdk_napi_1 = require("@bitwarden/sdk-napi");
+const bitwarden_secrets_manager_resolver_1 = require("./bitwarden-secrets-manager.resolver");
+const bitwarden_server_region_1 = require("./bitwarden-server.region");
+class BitwardenSecretsResolverFactory {
+    static defaultBitwardenSecretsResolver(region, accessToken) {
+        const token = accessToken || process.env.BWS_ACCESS_TOKEN;
+        if (!token) {
+            throw new Error('No Bitwarden access token provided');
+        }
+        const settings = bitwarden_server_region_1.BitwardenServerRegion.EU === region
+            ? this.BITWARDEN_EU_SETTINGS
+            : this.BITWARDEN_US_SETTINGS;
+        const client = new sdk_napi_1.BitwardenClient(settings);
+        return new bitwarden_secrets_manager_resolver_1.BitwardenSecretsManagerConfigurationResolver(client, token);
+    }
+}
+exports.BitwardenSecretsResolverFactory = BitwardenSecretsResolverFactory;
+BitwardenSecretsResolverFactory.BITWARDEN_EU_SETTINGS = {
+    apiUrl: 'https://api.bitwarden.eu',
+    identityUrl: 'https://identity.bitwarden.eu',
+    userAgent: 'Bitwarden SDK',
+    deviceType: sdk_napi_1.DeviceType.SDK,
+};
+BitwardenSecretsResolverFactory.BITWARDEN_US_SETTINGS = {
+    apiUrl: 'https://api.bitwarden.com',
+    identityUrl: 'https://identity.bitwarden.com',
+    userAgent: 'Bitwarden SDK',
+    deviceType: sdk_napi_1.DeviceType.SDK,
+};
+//# sourceMappingURL=bitwarden-secrets-resolver.factory.js.map

package/configuration/resolvers/bitwarden/bitwarden-secrets-resolver.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitwarden-secrets-resolver.factory.js","sourceRoot":"","sources":["../../../../src/configuration/resolvers/bitwarden/bitwarden-secrets-resolver.factory.ts"],"names":[],"mappings":";;;AAAA,kDAI6B;AAC7B,6FAAoG;AACpG,uEAAkE;AAMlE,MAAa,+BAA+B;IA6B1C,MAAM,CAAC,+BAA+B,CACpC,MAA6B,EAC7B,WAAoB;QAEpB,MAAM,KAAK,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAE1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,QAAQ,GACZ,+CAAqB,CAAC,EAAE,KAAK,MAAM;YACjC,CAAC,CAAC,IAAI,CAAC,qBAAqB;YAC5B,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;QAEjC,MAAM,MAAM,GAAG,IAAI,0BAAe,CAAC,QAAQ,CAAC,CAAC;QAE7C,OAAO,IAAI,iFAA4C,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;;AA/CH,0EAgDC;AA5CyB,qDAAqB,GAAmB;IAC9D,MAAM,EAAE,0BAA0B;IAClC,WAAW,EAAE,+BAA+B;IAC5C,SAAS,EAAE,eAAe;IAC1B,UAAU,EAAE,qBAAU,CAAC,GAAG;CAC3B,CAAC;AAKsB,qDAAqB,GAAmB;IAC9D,MAAM,EAAE,2BAA2B;IACnC,WAAW,EAAE,gCAAgC;IAC7C,SAAS,EAAE,eAAe;IAC1B,UAAU,EAAE,qBAAU,CAAC,GAAG;CAC3B,CAAC"}

package/configuration/resolvers/bitwarden/bitwarden-server.region.d.ts

@@ -0,0 +1,4 @@
+export declare enum BitwardenServerRegion {
+    EU = "EU",
+    US = "US"
+}

package/configuration/resolvers/bitwarden/bitwarden-server.region.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BitwardenServerRegion = void 0;
+var BitwardenServerRegion;
+(function (BitwardenServerRegion) {
+    BitwardenServerRegion["EU"] = "EU";
+    BitwardenServerRegion["US"] = "US";
+})(BitwardenServerRegion || (exports.BitwardenServerRegion = BitwardenServerRegion = {}));
+//# sourceMappingURL=bitwarden-server.region.js.map

package/configuration/resolvers/bitwarden/bitwarden-server.region.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitwarden-server.region.js","sourceRoot":"","sources":["../../../../src/configuration/resolvers/bitwarden/bitwarden-server.region.ts"],"names":[],"mappings":";;;AAAA,IAAY,qBAGX;AAHD,WAAY,qBAAqB;IAC/B,kCAAS,CAAA;IACT,kCAAS,CAAA;AACX,CAAC,EAHW,qBAAqB,qCAArB,qBAAqB,QAGhC"}

package/configuration/resolvers/bitwarden/index.d.ts

@@ -0,0 +1,3 @@
+export * from './bitwarden-secrets-manager.resolver';
+export * from './bitwarden-secrets-resolver.factory';
+export * from './bitwarden-server.region';

package/configuration/resolvers/bitwarden/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./bitwarden-secrets-manager.resolver"), exports);
+__exportStar(require("./bitwarden-secrets-resolver.factory"), exports);
+__exportStar(require("./bitwarden-server.region"), exports);
+//# sourceMappingURL=index.js.map

package/configuration/resolvers/bitwarden/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/configuration/resolvers/bitwarden/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uEAAqD;AACrD,uEAAqD;AACrD,4DAA0C"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@itgorillaz/configify",
-  "version": "3.0.0-alpha.4",
+  "version": "3.1.0-alpha.0",
   "description": "NestJS Config on Steroids",
   "author": "tommelo",
   "private": false,
@@ -39,6 +39,7 @@
   "devDependencies": {
     "@aws-sdk/client-secrets-manager": "^3.454.0",
     "@aws-sdk/client-ssm": "^3.461.0",
+    "@bitwarden/sdk-napi": "^1.0.0",
     "@nestjs/cli": "^11.0.2",
     "@nestjs/schematics": "^11.0.0",
     "@nestjs/testing": "^11.0.5",