+ remove deprecated stuff
This commit is contained in:
sam
parent
ee8f6d8e65
commit
3ea5189ad8
2 changed files with 0 additions and 181 deletions
|
|
@ -1,14 +0,0 @@
|
|||
# Testing module proposals
|
||||
|
||||
- Basic API calls
|
||||
- Login/logout
|
||||
- kv IO test module
|
||||
- Token
|
||||
- Lookup
|
||||
- Generation
|
||||
|
||||
(- TLS module)
|
||||
(- Auth module)
|
||||
|
||||
|
||||
==> Nur KvV2 testen
|
||||
|
|
@ -1,167 +0,0 @@
|
|||
#[cfg(test)]
|
||||
mod tests {
|
||||
use super::*;
|
||||
use base::create_mock_meta;
|
||||
#[test]
|
||||
fn test_update_secret() {
|
||||
let db: sled::Db = sled::open("sled_db").unwrap();
|
||||
update_secret(&db, "foo", TempSecret{version: -99, content: "cool".to_string()});
|
||||
}
|
||||
#[test]
|
||||
fn test_get_secret() {
|
||||
let db: sled::Db = sled::open("sled_db").unwrap();
|
||||
get_secret(&db, "foo");
|
||||
}
|
||||
#[test]
|
||||
fn test_delete_secret(){
|
||||
let db: sled::Db = sled::open("sled_db").unwrap();
|
||||
delete_secret(&db, "foo");
|
||||
}
|
||||
#[test]
|
||||
fn test_meta(){
|
||||
let db: sled::Db = sled::open("sled_db").unwrap();
|
||||
println!("writing metadata:");
|
||||
update_secret_meta(&db, "metatest", create_mock_meta());
|
||||
println!("getting metadata:");
|
||||
get_secretmeta(&db, "metatest");
|
||||
}
|
||||
}
|
||||
|
||||
use sled::Db;
|
||||
use base::{deserialize_metadata_struct, deserialize_secret_struct, serialize_metadata_json, serialize_secret_json, SecretMeta, TempSecret};
|
||||
|
||||
/// [TODO] Currently no proper versioning
|
||||
/// inserts a secret. If there was already a secret in the given path, the version is incremented
|
||||
fn update_secret(db: &Db, path: &str, mut secret: TempSecret) {
|
||||
match get_secret(db, path) {
|
||||
Some(old_secret) => {
|
||||
// case secret found. TODO save it somewhere for versioning
|
||||
secret.version = old_secret.version + 1;
|
||||
#[cfg(test)]
|
||||
print!("something was found. new version {} \n", secret.version)
|
||||
}
|
||||
None => {
|
||||
// case new secret
|
||||
secret.version = 1;
|
||||
}
|
||||
}
|
||||
// if let secret_json = serialize_secret_json(&secret) {
|
||||
// let _res = db.insert(path, secret_json); // maybe this can be handled cleaner
|
||||
match serialize_secret_json(&secret) {
|
||||
Ok(secret_json) => {
|
||||
#[cfg(test)]
|
||||
println!("String: {:?}", secret_json.clone());
|
||||
let as_ivec = sled::IVec::from(secret_json.into_bytes()); // maybe outsource this in a fn later
|
||||
#[cfg(test)]
|
||||
println!("ivec: {:?}", as_ivec);
|
||||
match db.insert(path, as_ivec) {
|
||||
Ok(_) => println!("Secret inserted"),
|
||||
Err(e) => eprintln!("Failed to insert secret: {}", e),
|
||||
}
|
||||
}
|
||||
Err(e) => eprintln!("Failed to serialize secret: {}", e),
|
||||
}
|
||||
}
|
||||
|
||||
// !TODO eliminate redundancy: refactor get and update functions to accept generic types!
|
||||
|
||||
// read and return a secret from the DB
|
||||
//if there is no secret, return None
|
||||
fn get_secret(db: &Db, path: &str) -> Option<TempSecret>{
|
||||
let raw_secret;
|
||||
match db.get(path) {
|
||||
Ok(Some(ivec)) => {
|
||||
raw_secret = ivec;
|
||||
}
|
||||
Err(e) => {
|
||||
eprintln!("Error on retrieving secret: {}", e);
|
||||
return None;
|
||||
}
|
||||
Ok(None) => {
|
||||
return None;
|
||||
}
|
||||
}
|
||||
// outsource this in a fn later. TODO maybe deal with unwrap
|
||||
let as_str = String::from_utf8(raw_secret.to_vec()).unwrap();
|
||||
match deserialize_secret_struct(&as_str) {
|
||||
Ok(secret) => {
|
||||
#[cfg(test)]
|
||||
println!("got some secret: {:?}", secret);
|
||||
return Some(secret);
|
||||
}
|
||||
Err(e) => {
|
||||
eprintln!("error on secret deserialization: {}", e);
|
||||
return None;
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
// TODO write abstract get_something fn
|
||||
// https://developer.hashicorp.com/vault/api-docs/secret/kv/kv-v2#read-secret-metadata
|
||||
fn get_secretmeta(db: &Db, path: &str) -> Option<SecretMeta>{
|
||||
let raw_metadata;
|
||||
match db.get(path) {
|
||||
Ok(Some(ivec)) => {
|
||||
raw_metadata = ivec;
|
||||
}
|
||||
Err(e) => {
|
||||
eprintln!("Error on retrieving metadata: {}", e);
|
||||
return None;
|
||||
}
|
||||
Ok(None) => {
|
||||
return None;
|
||||
}
|
||||
}
|
||||
let as_str = String::from_utf8(raw_metadata.to_vec()).unwrap();
|
||||
match deserialize_metadata_struct(&as_str) {
|
||||
Ok(meta) => {
|
||||
#[cfg(test)]
|
||||
println!("got some metadata: {:?}", meta);
|
||||
return Some(meta);
|
||||
}
|
||||
Err(e) => {
|
||||
eprintln!("error on secret deserialization: {}", e);
|
||||
return None;
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
// currently early version (copied from update_secret)
|
||||
fn update_secret_meta(db: &Db, path: &str, mut meta: SecretMeta) {
|
||||
match get_secretmeta(db, path) {
|
||||
Some(meta) => {
|
||||
// case secret found. TODO save it somewhere for versioning
|
||||
#[cfg(test)]
|
||||
print!("something was found. new version {:?} \n", meta)
|
||||
}
|
||||
None => {
|
||||
}
|
||||
}
|
||||
match serialize_metadata_json(&meta) {
|
||||
Ok(meta_json) => {
|
||||
#[cfg(test)]
|
||||
println!("String: {:?}", meta_json.clone());
|
||||
let as_ivec = sled::IVec::from(meta_json.into_bytes()); // maybe outsource this in a fn later
|
||||
#[cfg(test)]
|
||||
println!("ivec: {:?}", as_ivec);
|
||||
match db.insert(path, as_ivec) {
|
||||
Ok(_) => println!("Metadata inserted"),
|
||||
Err(e) => eprintln!("Failed to insert meta: {}", e),
|
||||
}
|
||||
}
|
||||
Err(e) => eprintln!("Failed to serialize meta: {}", e),
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
/// TODO soft delete the secret version at path. can be undone with undelete_secret
|
||||
// https://developer.hashicorp.com/vault/api-docs/secret/kv/kv-v2#delete-latest-version-of-secret
|
||||
// https://developer.hashicorp.com/vault/api-docs/secret/kv/kv-v2#delete-secret-versions
|
||||
|
||||
/// hard delete secret at path
|
||||
fn delete_secret(db: &Db, path: &str) {
|
||||
let rem = db.remove(path);
|
||||
}
|
||||
Loading…
Reference in a new issue