dotenvx 0.2.2

A secure environment variable management tool with built-in encryption
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86

use crate::crypto::decrypt;
use crate::parser::DotenvParser;
use crate::utils::error::Result;
use crate::utils::fs::read_file;
use std::path::Path;

pub fn get_command(key: Option<&str>, env_file: &Path, keys_file: Option<&Path>) -> Result<()> {
    let content = read_file(env_file)?;
    let mut parser = DotenvParser::new();
    parser.parse(&content)?;

    let private_key = find_private_key(env_file, keys_file);

    if let Some(key_name) = key {
        // Get specific key
        if let Some(value) = parser.variables().get(key_name) {
            let final_value =
                if let (true, Ok(key)) = (value.starts_with("encrypted:"), &private_key) {
                    decrypt(value, key).unwrap_or_else(|_| value.clone())
                } else {
                    value.clone()
                };
            println!("{}={}", key_name, final_value);
        } else {
            eprintln!("Key '{}' not found", key_name);
            std::process::exit(1);
        }
    } else {
        // Get all keys
        for (k, v) in parser.variables() {
            if k == "DOTENV_PUBLIC_KEY" {
                continue;
            }

            let final_value = if let (true, Ok(key)) = (v.starts_with("encrypted:"), &private_key) {
                decrypt(v, key).unwrap_or_else(|_| v.clone())
            } else {
                v.clone()
            };
            println!("{}={}", k, final_value);
        }
    }

    Ok(())
}

fn find_private_key(env_file: &Path, keys_file: Option<&Path>) -> Result<String> {
    use crate::utils::error::DotenvxError;

    if let Some(keys_path) = keys_file {
        if keys_path.exists() {
            let content = read_file(keys_path)?;
            if let Some(key) = extract_key(&content) {
                return Ok(key);
            }
        }
    }

    if let Some(parent) = env_file.parent() {
        let default_keys = parent.join(".env.keys");
        if default_keys.exists() {
            let content = read_file(&default_keys)?;
            if let Some(key) = extract_key(&content) {
                return Ok(key);
            }
        }
    }

    if let Ok(key) = std::env::var("DOTENV_PRIVATE_KEY") {
        return Ok(key);
    }

    Err(DotenvxError::MissingPrivateKey {
        key_name: "DOTENV_PRIVATE_KEY".to_string(),
    })
}

fn extract_key(content: &str) -> Option<String> {
    for line in content.lines() {
        let trimmed = line.trim();
        if let Some(value) = trimmed.strip_prefix("DOTENV_PRIVATE_KEY=") {
            return Some(value.trim_matches('"').to_string());
        }
    }
    None
}