Contents

class CredStash::Secret
  attr_reader :name, :value, :key, :encrypted_value, :hmac

  def initialize(name:, value: nil, key: nil, encrypted_value: nil, hmac: nil)
    @name = name
    @value = value
    @key = key
    @encrypted_value = encrypted_value
    @hmac = hmac
  end

  def encrypt!
    @key = CredStash::CipherKey.generate
    @encrypted_value = @key.encrypt(@value)
    @hmac = @key.hmac(@encrypted_value)
  end

  def save
    self.class.repository.put(to_item)
  end

  def falsified?
    @key.hmac(@encrypted_value) == @hmac
  end

  def decrypted_value
    @key.decrypt(@encrypted_value)
  end

  class << self
    def find(name)
      item = repository.get(name)
      new(
        name: name,
        key: CredStash::CipherKey.decrypt(Base64.decode64(item.key)),
        encrypted_value: Base64.decode64(item.contents),
        hmac: item.hmac
      )
    end

    def repository
      CredStash::Repository.new
    end
  end


  private

  def to_item
    CredStash::Repository::Item.new(
      name: name,
      version: "%019d" % (current_version + 1),
      key: Base64.encode64(key.wrapped_key),
      contents: Base64.encode64(encrypted_value),
      hmac: hmac
    )
  end

  def current_version
    item = CredStash::Repository.new.select(name, pluck: 'version', limit: 1).first
    if item
      item.version.to_i
    else
      0
    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
rcredstash-0.4.0	lib/cred_stash/secret.rb
rcredstash-0.3.0	lib/cred_stash/secret.rb