via-cli 0.2.0

Run commands and API requests with 1Password-backed credentials without exposing secrets to your shell
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86

use crate::config::{CommandConfig, Config};
use crate::error::ViaError;
use crate::providers::ProviderRegistry;

mod delegated;
mod rest;

pub fn invoke(
    config: &Config,
    providers: &ProviderRegistry,
    service_name: &str,
    capability_name: &str,
    args: Vec<String>,
) -> Result<(), ViaError> {
    let service = config
        .services
        .get(service_name)
        .ok_or_else(|| ViaError::UnknownService(service_name.to_owned()))?;
    let command =
        service
            .commands
            .get(capability_name)
            .ok_or_else(|| ViaError::UnknownCapability {
                service: service_name.to_owned(),
                capability: capability_name.to_owned(),
            })?;
    let provider = providers.get(&service.provider)?;

    match command {
        CommandConfig::Rest(rest) => rest::execute(service_name, service, rest, provider, args),
        CommandConfig::Delegated(delegated) => {
            delegated::execute(service_name, service, delegated, provider, args)
        }
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    fn config() -> Config {
        Config::from_toml_str(
            r#"
version = 1

[providers.onepassword]
type = "1password"

[services.github]
provider = "onepassword"

[services.github.secrets]
token = "op://Private/GitHub/token"

[services.github.commands.api]
mode = "rest"
base_url = "https://api.github.com"
"#,
        )
        .unwrap()
    }

    #[test]
    fn invoke_rejects_unknown_service() {
        let config = config();
        let providers = ProviderRegistry::from_config(&config).unwrap();
        let error = invoke(&config, &providers, "missing", "api", Vec::new()).unwrap_err();

        assert!(matches!(error, ViaError::UnknownService(service) if service == "missing"));
    }

    #[test]
    fn invoke_rejects_unknown_capability() {
        let config = config();
        let providers = ProviderRegistry::from_config(&config).unwrap();
        let error = invoke(&config, &providers, "github", "missing", Vec::new()).unwrap_err();

        assert!(matches!(
            error,
            ViaError::UnknownCapability {
                service,
                capability
            } if service == "github" && capability == "missing"
        ));
    }
}