forked from hairyhenderson/gomplate
-
Notifications
You must be signed in to change notification settings - Fork 0
/
token_strategy.go
75 lines (65 loc) · 1.54 KB
/
token_strategy.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
package vault
import (
"fmt"
"io/ioutil"
"log"
"net/url"
"os"
"path"
"github.com/blang/vfs"
)
// TokenAuthStrategy - a pass-through strategy for situations where we already
// have a Vault token.
type TokenAuthStrategy struct {
Token string
}
// NewTokenAuthStrategy - Try to create a new TokenAuthStrategy. If we can't
// nil will be returned.
func NewTokenAuthStrategy(fsOverrides ...vfs.Filesystem) *TokenAuthStrategy {
var fs vfs.Filesystem
if len(fsOverrides) == 0 {
fs = vfs.OS()
} else {
fs = fsOverrides[0]
}
if token := os.Getenv("VAULT_TOKEN"); token != "" {
return &TokenAuthStrategy{token}
}
if token := getTokenFromFile(fs); token != "" {
return &TokenAuthStrategy{token}
}
return nil
}
// GetToken - return the token
func (a *TokenAuthStrategy) GetToken(addr *url.URL) (string, error) {
return a.Token, nil
}
func (a *TokenAuthStrategy) String() string {
return fmt.Sprintf("token: %s", a.Token)
}
// Revokable -
func (a *TokenAuthStrategy) Revokable() bool {
return false
}
func homeDir() string {
if home := os.Getenv("HOME"); home != "" {
return home
}
if home := os.Getenv("USERPROFILE"); home != "" {
return home
}
log.Fatal(`Neither HOME nor USERPROFILE environment variables are set!
I can't figure out where the current user's home directory is!`)
return ""
}
func getTokenFromFile(fs vfs.Filesystem) string {
f, err := fs.OpenFile(path.Join(homeDir(), ".vault-token"), os.O_RDONLY, 0)
if err != nil {
return ""
}
b, err := ioutil.ReadAll(f)
if err != nil {
return ""
}
return string(b)
}