Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Integrate HashiCorp Vault: #14

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

airnomad1
Copy link

@airnomad1 airnomad1 commented Mar 25, 2021

Description

BAT can be used as Postman alternative with better security for credentials & PII Masking. This PR would provide basic integration with HashiCorp Vault service to fetch credentials stored in the Vault. This would solve the security issues caused by storing sensitive credentials in local machines, Also this would stop exposing credentials deliberately. HashiCorp Vault is integrated with in the execution context 'World' to fetch configured credentials via the Vault.

How it works ?

To use the Vault integration follow these steps.

  1. Create the environment variable VAULT_ADDR = {VAULT ENDPOINT}
  2. Login to your Vault & fetch the secret to unseal the Vault
  3. Pass these parameters to cucumber-js when running the tests. Reference the example below.
cucumber-js --world-parameters '{\"vault_token\":\"VAULT-SECRET\", \"vault_secret\":\"PATH-TO-SECRET-STORED-IN-THE-VAULT"}'

TODO:

  1. Add more unit tests for the Vault Integration.
  2. Make JSON response with syntax highlighting
  3. Change the way vault_token & vault_secret passed to the runtime. Use environment variables may be.

HashiCorp Vault is integrated with the execution context 'World'
to fetch configured credentials via the Vault.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant