turnkey_tk 0.4.1

A CLI for machines to use Turnkey for git, ssh, and credential management
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52

//! Imports secrets by encrypting locally and submitting only ciphertext.

use anyhow::Result;
use serde_json::json;
use std::collections::BTreeMap;
use std::mem::take;
use turnkey_client::ActivityResult;
use zeroize::Zeroizing;

use super::input::{SecretName, UniqueKeyValues, quorum_for};
use crate::auth::{ResolvedAuth, build_turnkey_client};
use crate::operations::OperationOutput;

pub(super) async fn run(
    auth: ResolvedAuth,
    name: SecretName,
    mut value: Zeroizing<String>,
    properties: UniqueKeyValues,
) -> Result<OperationOutput> {
    let quorum = quorum_for(auth.api_base_url.as_str())?;
    let ResolvedAuth {
        org_id,
        api_base_url,
        stamper,
        ..
    } = auth;
    let client = build_turnkey_client(stamper, &api_base_url)?;
    let properties: BTreeMap<String, String> = properties.into();
    let plaintext = take(&mut *value);
    let ActivityResult {
        result: secret_id,
        activity_id,
        status,
        app_proofs: _,
    } = client
        .import_secret(
            org_id.to_string(),
            Some(name.clone().into()),
            plaintext,
            properties,
            &quorum,
        )
        .await?;
    Ok(OperationOutput::result(
        "secret.import",
        json!({
            "secretId": secret_id,
            "name": name,
            "activity": {"id": activity_id, "status": status},
        }),
    ))
}