rops 0.1.7

SOPS-like library in pure Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70

use std::{fmt::Debug, hash::Hash};

use crate::*;

pub trait AppendIntegrationKey<I: Integration>: Debug + PartialEq + Eq + Hash {
    fn append_to_metadata_builder(self, integration_metadata_builder: &mut IntegrationMetadataBuilder);
}

#[derive(Default)]
pub struct IntegrationMetadataBuilder {
    #[cfg(feature = "age")]
    pub age_key_ids: Vec<<AgeIntegration as Integration>::KeyId>,
    #[cfg(feature = "aws-kms")]
    pub aws_kms_key_ids: Vec<<AwsKmsIntegration as Integration>::KeyId>,
}

#[derive(Debug, thiserror::Error)]
pub enum IntegrationMetadataBuilderError {
    #[error(transparent)]
    Integration(#[from] IntegrationError),
    #[error("no integration keys were set, without them it's impossible to store the private data key")]
    MissingKeys,
}

impl IntegrationMetadataBuilder {
    pub fn into_integration_metadata(self, data_key: &DataKey) -> Result<IntegrationMetadata, IntegrationMetadataBuilderError> {
        if self.missing_keys() {
            return Err(IntegrationMetadataBuilderError::MissingKeys);
        }

        let mut integration_metadata = IntegrationMetadata::default();

        #[cfg(feature = "age")]
        integration_metadata.add_keys::<AgeIntegration>(self.age_key_ids, data_key)?;
        #[cfg(feature = "aws-kms")]
        integration_metadata.add_keys::<AwsKmsIntegration>(self.aws_kms_key_ids, data_key)?;

        Ok(integration_metadata)
    }

    fn missing_keys(&self) -> bool {
        #[cfg(feature = "age")]
        if !self.age_key_ids.is_empty() {
            return false;
        }

        #[cfg(feature = "aws-kms")]
        if !self.aws_kms_key_ids.is_empty() {
            return false;
        }

        // Not using any feature flags should also return true
        true
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn builder_disallows_missing_keys() {
        assert!(matches!(
            IntegrationMetadataBuilder::default()
                .into_integration_metadata(&DataKey::mock())
                .unwrap_err(),
            IntegrationMetadataBuilderError::MissingKeys
        ))
    }
}