Add shuffle-salts command

README.md

@@ -352,6 +352,16 @@ wp config set <name> <value> [--add] [--raw] [--anchor=<anchor>] [--placement=<p
     # Set the WP_DEBUG constant to true.
     $ wp config set WP_DEBUG true --raw
 
+
+
+### wp config shuffle-salts
+
+Refreshes the salts in the wp-config.php file
+
+~~~
+wp config shuffle-salts
+~~~
+
 ## Installing
 
 This package is included with WP-CLI itself, no additional installation necessary.

features/config-shuffle-salts.feature

@@ -0,0 +1,54 @@
+Feature: Refresh the salts in the wp-config.php file
+
+  Scenario: Salts are created properly when none initially exist
+    Given a WP install
+    When I try `wp config get AUTH_KEY --type=constant`
+    Then STDERR should contain:
+    """
+    The constant 'AUTH_KEY' is not defined in the 'wp-config.php' file.
+    """
+
+    When I run `wp config shuffle-salts`
+    Then STDOUT should contain:
+    """
+    Shuffled the salt keys.
+    """
+    And the wp-config.php file should contain:
+    """
+    define( 'AUTH_KEY'
+    """
+
+  Scenario: Shuffle the salts
+    Given a WP install
+    When I run `wp config shuffle-salts`
+    Then STDOUT should contain:
+    """
+    Shuffled the salt keys.
+    """
+    And the wp-config.php file should contain:
+    """
+    define( 'AUTH_KEY'
+    """
+    And the wp-config.php file should contain:
+    """
+    define( 'LOGGED_IN_SALT'
+    """
+
+    When I run `wp config get AUTH_KEY --type=constant`
+    Then save STDOUT as {AUTH_KEY_ORIG}
+    When I run `wp config get LOGGED_IN_SALT --type=constant`
+    Then save STDOUT as {LOGGED_IN_SALT_ORIG}
+
+    When I run `wp config shuffle-salts`
+    Then STDOUT should contain:
+    """
+    Shuffled the salt keys.
+    """
+    And the wp-config.php file should not contain:
+    """
+    {AUTH_KEY_ORIG}
+    """
+    And the wp-config.php file should not contain:
+    """
+    {LOGGED_IN_SALT_ORIG}
+    """

src/Config_Command.php

@@ -619,6 +619,65 @@ public function has( $args, $assoc_args ) {
 		}
 	}
 
+	/**
+	 * Refreshes the salts defined in the wp-config.php file
+	 *
+	 * ## OPTIONS
+	 *
+	 * ## EXAMPLES
+	 *
+	 *     # Get new salts for your wp-config.php file
+	 *     $ wp config shuffle-salts
+	 *
+	 * @subcommand shuffle-salts
+	 * @when before_wp_load
+	 */
+	public function shuffle_salts( $args, $assoc_args ) {
+
+		$constant_list = array(
+			'AUTH_KEY',
+			'SECURE_AUTH_KEY',
+			'LOGGED_IN_KEY',
+			'NONCE_KEY',
+			'AUTH_SALT',
+			'SECURE_AUTH_SALT',
+			'LOGGED_IN_SALT',
+			'NONCE_SALT'
+		);
+
+		try {
+			foreach ( $constant_list as $key ) {
+				$secret_keys[ $key ] = trim( self::unique_key() );
+			}
+			throw new Exception( 'TEST' );
+		} catch ( Exception $ex ) {
+
+			$remote_salts = self::_read( 'https://api.wordpress.org/secret-key/1.1/salt/' );
+			$remote_salts = explode( "\n", $remote_salts );
+			foreach ( $remote_salts as $k => $salt ) {
+				if ( ! empty( $salt ) ) {
+					$key = $constant_list[ $k ];
+					$secret_keys[ $key ] = trim( substr( $salt, 28, 64 ) );
+				}
+			}
+
+		}
+
+		$path = $this->get_config_path();
+
+		try {
+			$config_transformer = new WPConfigTransformer( $path );
+			foreach ( $secret_keys as $constant => $key ) {
+				$config_transformer->update( 'constant', $constant, (string) $key );
+			}
+		} catch ( Exception $exception ) {
+			WP_CLI::error( "Could not process the 'wp-config.php' transformation.\nReason: " . $exception->getMessage() );
+		}
+
+		WP_CLI::success( 'Shuffled the salt keys.' );
+
+	}
+
 	/**
 	 * Filters wp-config.php file configurations.
 	 *