actions.go

package ejsonkms

import (
	"encoding/json"
	"fmt"
	"os"

	"github.com/Shopify/ejson"
	"github.com/Shopify/ejson2env"
)

func EncryptAction(args []string) error {
	if len(args) < 1 {
		return fmt.Errorf("at least one file path must be given")
	}
	for _, filePath := range args {
		n, err := ejson.EncryptFileInPlace(filePath)
		if err != nil {
			return err
		}
		fmt.Printf("Wrote %d bytes to %s.\n", n, filePath)
	}
	return nil
}

func DecryptAction(args []string, awsRegion, outFile string) error {
	if len(args) != 1 {
		return fmt.Errorf("exactly one file path must be given")
	}
	ejsonFilePath := args[0]

	decrypted, err := Decrypt(ejsonFilePath, awsRegion)
	if err != nil {
		return err
	}

	target := os.Stdout
	if outFile != "" {
		target, err = os.Create(outFile)
		if err != nil {
			return err
		}
		defer target.Close()
	}

	_, err = target.Write(decrypted)
	return err
}

// ejsonKmsFile - an ejson file
type ejsonKmsFile struct {
	PublicKey     string `json:"_public_key"`
	PrivateKeyEnc string `json:"_private_key_enc"`
}

func KeygenAction(args []string, kmsKeyID, awsRegion, outFile string) error {
	ejsonKmsKeys, err := Keygen(kmsKeyID, awsRegion)
	if err != nil {
		return err
	}

	ejsonKmsFile := ejsonKmsFile{
		PublicKey:     ejsonKmsKeys.PublicKey,
		PrivateKeyEnc: ejsonKmsKeys.PrivateKeyEnc,
	}

	ejsonFile, err := json.MarshalIndent(ejsonKmsFile, "", "  ")
	if err != nil {
		return err
	}

	fmt.Println("Private Key:", ejsonKmsKeys.PrivateKey)
	target := os.Stdout
	if outFile != "" {
		target, err = os.Create(outFile)
		if err != nil {
			return err
		}
		defer func() { _ = target.Close() }()
	} else {
		fmt.Println("EJSON File:")
	}

	_, err = target.Write(ejsonFile)
	if err != nil {
		return err
	}
	return nil
}

func EnvAction(ejsonFilePath, awsRegion string, quiet bool) error {
	exportFunc := ejson2env.ExportEnv
	if quiet {
		exportFunc = ejson2env.ExportQuiet
	}
	privateKeyEnc, err := findPrivateKeyEnc(ejsonFilePath)
	if err != nil {
		return err
	}

	kmsDecryptedPrivateKey, err := decryptPrivateKeyWithKMS(privateKeyEnc, awsRegion)
	if err != nil {
		return err
	}

	envValues, err := ejson2env.ReadAndExtractEnv(ejsonFilePath, "", kmsDecryptedPrivateKey)

	if nil != err && !ejson2env.IsEnvError(err) {
		return fmt.Errorf("could not load environment from file: %s", err)
	}

	exportFunc(os.Stdout, envValues)
	return nil
}