keyflux 0.1.14

A CLI tool and library for synchronizing environment secrets across multiple platforms including local files, GitHub Secrets, Supabase Vault, and Vercel Secrets. It facilitates secure management and automation of sensitive data.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80

use async_trait::async_trait;
use postgres::{Client, NoTls};
use log::{info};
use serde::{Deserialize, Serialize};

use crate::error::FluxError;
use crate::file::key_collection::KeyCollection;
use crate::key::Key;
use crate::traits::Flux;

/// Structure representing a connection to a PostgreSQL database with Supabase Vault.
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct SupabaseVaultFlux {
    pub connection_string: String,
}

impl SupabaseVaultFlux {
    pub fn new(connection_string: String) -> Self {
        SupabaseVaultFlux {
            connection_string,
        }
    }

    /// Helper function to establish a database connection synchronously.
    fn connect(&self) -> Result<Client, FluxError> {
        Client::connect(&self.connection_string, NoTls)
            .map_err(|e| FluxError::DatabaseError(format!("Failed to connect to database: {}", e)))
    }
}

#[async_trait]
impl Flux for SupabaseVaultFlux {
    async fn initialize(&self) -> Result<(), FluxError> {
        // let client = self.connect()?;
        info!("Supabase Vault initialized successfully.");
        Ok(())
    }

    async fn finalize(&self) -> Result<(), FluxError> {
        info!("Supabase Vault finalized successfully.");
        Ok(())
    }

    async fn single(&self, key: &Key) -> Result<(), FluxError> {
        let mut client = self.connect()?;
        let stmt = "SELECT vault.create_secret($1, $2, $3);";
        let params: &[&(dyn postgres::types::ToSql + Sync)] = &[&key.value(), &key.name(), &""];
        client.execute(stmt, params)
            .map_err(|e| FluxError::DatabaseError(format!("Failed to execute query: {}", e)))?;
        info!("Secret '{}' added successfully.", key.name());
        Ok(())
    }

    async fn batch(&self, keys: &KeyCollection) -> Result<(), FluxError> {
        let mut client = self.connect()?;
        for key in keys {
            let stmt = "SELECT vault.create_secret($1, $2, $3);";
            let params: &[&(dyn postgres::types::ToSql + Sync)] = &[&key.value(), &key.name(), &""];
            client.execute(stmt, params)
                .map_err(|e| FluxError::DatabaseError(format!("Failed to execute query: {}", e)))?;
            info!("Secret '{}' added successfully.", key.name());
        }
        Ok(())
    }

    async fn check(&self, key: &Key) -> Result<Option<String>, FluxError> {
        let mut client = self.connect()?;
        let stmt = "SELECT decrypted_secret FROM vault.decrypted_secrets WHERE name = $1;";
        let rows = client.query(stmt, &[&key.name()])
            .map_err(|e| FluxError::DatabaseError(format!("Failed to execute query: {}", e)))?;
        if let Some(row) = rows.iter().next() {
            let secret: String = row.get("decrypted_secret");
            Ok(Some(secret))
        } else {
            Ok(None)
        }
    }

    // Implement other methods as necessary
}