1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71

//! # envcrypt
//! Drop-in replacement for [`env!`](https://doc.rust-lang.org/std/macro.env.html)
//! that encrypts your variables at compile-time and decrypts them at runtime,
//! preventing naughty folks from snooping your binary for secrets or credentials.
//!
//! ## Usage
//!
//! ```ignore
//! use envcrypt::envcrypt;
//!
//! fn main() {
//!   let my_super_secret_key = envcrypt!("SECRET_KEY");
//!   // do stuff with your secret key
//! }
//! ```
//!
//! With [`dotenv`](https://crates.io/crates/dotenv):
//!
//! `.env`:
//!
//! ```dotenv
//! CLIENT_SECRET="my_client_secret"
//! SOME_TOKEN="some_token"
//! ```
//!
//! `build.rs`:
//!
//! ```ignore
//! fn main() {
//!   println!("cargo:rerun-if-changed=.env");
//!
//!   for (key, value) in dotenv::vars() {
//!     println!("cargo:rustc-env=${key}=${value}");
//!   }
//! }
//! ```
//!
//! `main.rs`:
//!
//! ```ignore
//! use envcrypt::envcrypt;
//!
//! fn main() {
//!   let client_secret = envcrypt!("CLIENT_SECRET");
//! }
//! ```
//!
//! ## Details
//!
//! Encryption is powered by [`MagicCrypt`](https://crates.io/crates/magic-crypt) using AES-256 encryption.

#[doc(hidden)]
pub mod __internal {
    use magic_crypt::{MagicCrypt256, MagicCryptTrait};

    #[doc(hidden)]
    pub fn decrypt(
        key: impl AsRef<str>,
        iv: impl AsRef<str>,
        encrypted_value: impl AsRef<str>,
    ) -> String {
        let magic = MagicCrypt256::new(key.as_ref(), Some(iv.as_ref()));
        magic
            .decrypt_base64_to_string(encrypted_value.as_ref())
            .unwrap()
    }
}

/// Encrypt an environment variable at compile time,
/// and decrypt it at runtime.
pub use envcrypt_macro::envcrypt;