Naoyuki Kanezawa
9 years ago
committed by
GitHub
GitHub
6 changed files with 319 additions and 6 deletions
@ -0,0 +1,210 @@ |
|||||
|
#!/usr/bin/env node |
||||
|
import chalk from 'chalk'; |
||||
|
import table from 'text-table'; |
||||
|
import minimist from 'minimist'; |
||||
|
import * as cfg from '../lib/cfg'; |
||||
|
import { handleError, error } from '../lib/error'; |
||||
|
import NowSecrets from '../lib/secrets'; |
||||
|
import ms from 'ms'; |
||||
|
|
||||
|
const argv = minimist(process.argv.slice(2), { |
||||
|
boolean: ['help', 'debug', 'base64'], |
||||
|
alias: { |
||||
|
help: 'h', |
||||
|
debug: 'd', |
||||
|
base64: 'b' |
||||
|
} |
||||
|
}); |
||||
|
const subcommand = argv._[0]; |
||||
|
|
||||
|
// options |
||||
|
const help = () => { |
||||
|
console.log(` |
||||
|
${chalk.bold('𝚫 now secrets')} <ls | add | rename | rm> <secret> |
||||
|
|
||||
|
${chalk.dim('Options:')} |
||||
|
|
||||
|
-h, --help output usage information |
||||
|
-b, --base64 treat value as base64-encoded |
||||
|
-d, --debug debug mode [off] |
||||
|
|
||||
|
${chalk.dim('Examples:')} |
||||
|
|
||||
|
${chalk.gray('–')} Lists all your secrets: |
||||
|
|
||||
|
${chalk.cyan('$ now secrets ls')} |
||||
|
|
||||
|
${chalk.gray('–')} Adds a new secret: |
||||
|
|
||||
|
${chalk.cyan('$ now secrets add my-secret "my value"')} |
||||
|
|
||||
|
${chalk.gray('–')} Once added, a secret's value can't be retrieved in plaintext anymore |
||||
|
${chalk.gray('–')} If the secret's value is more than one word, wrap it in quotes |
||||
|
${chalk.gray('–')} Actually, when in doubt, wrap your value in quotes |
||||
|
|
||||
|
${chalk.gray('–')} Exposes a secret as an env variable: |
||||
|
|
||||
|
${chalk.cyan(`$ now -e MY_SECRET=${chalk.bold('@my-secret')}`)} |
||||
|
|
||||
|
Notice the ${chalk.cyan.bold('`@`')} symbol which makes the value a secret reference. |
||||
|
|
||||
|
${chalk.gray('–')} Renames a secret: |
||||
|
|
||||
|
${chalk.cyan(`$ now secrets rename my-secret my-renamed-secret`)} |
||||
|
|
||||
|
${chalk.gray('–')} Removes a secret: |
||||
|
|
||||
|
${chalk.cyan(`$ now secrets rm my-secret`)} |
||||
|
`); |
||||
|
}; |
||||
|
|
||||
|
// options |
||||
|
const debug = argv.debug; |
||||
|
const apiUrl = argv.url || 'https://api.zeit.co'; |
||||
|
|
||||
|
const exit = (code) => { |
||||
|
// we give stdout some time to flush out |
||||
|
// because there's a node bug where |
||||
|
// stdout writes are asynchronous |
||||
|
// https://github.com/nodejs/node/issues/6456 |
||||
|
setTimeout(() => process.exit(code || 0), 100); |
||||
|
}; |
||||
|
|
||||
|
if (argv.help || !subcommand) { |
||||
|
help(); |
||||
|
exit(0); |
||||
|
} else { |
||||
|
const config = cfg.read(); |
||||
|
|
||||
|
Promise.resolve(config.token || login(apiUrl)) |
||||
|
.then(async (token) => { |
||||
|
try { |
||||
|
await run(token); |
||||
|
} catch (err) { |
||||
|
handleError(err); |
||||
|
exit(1); |
||||
|
} |
||||
|
}) |
||||
|
.catch((e) => { |
||||
|
error(`Authentication error – ${e.message}`); |
||||
|
exit(1); |
||||
|
}); |
||||
|
} |
||||
|
|
||||
|
async function run (token) { |
||||
|
const secrets = new NowSecrets(apiUrl, token, { debug }); |
||||
|
const args = argv._.slice(1); |
||||
|
const start = Date.now(); |
||||
|
|
||||
|
if ('ls' === subcommand || 'list' === subcommand) { |
||||
|
if (0 !== args.length) { |
||||
|
error(`Invalid number of arguments. Usage: ${chalk.cyan('`now secret ls`')}`); |
||||
|
return exit(1); |
||||
|
} |
||||
|
const list = await secrets.ls(); |
||||
|
const elapsed = ms(new Date() - start); |
||||
|
console.log(`> ${list.length} secrets found ${chalk.gray(`[${elapsed}]`)}`); |
||||
|
const cur = Date.now(); |
||||
|
const out = table(list.map((secret) => { |
||||
|
return [ |
||||
|
'', |
||||
|
secret.uid, |
||||
|
chalk.bold(secret.name), |
||||
|
chalk.gray(ms(cur - new Date(secret.created)) + ' ago') |
||||
|
]; |
||||
|
}), { align: ['l', 'r', 'l'], hsep: ' '.repeat(3) }); |
||||
|
if (out) console.log('\n' + out + '\n'); |
||||
|
return secrets.close(); |
||||
|
} |
||||
|
|
||||
|
if ('rm' === subcommand || 'remove' === subcommand) { |
||||
|
if (1 !== args.length) { |
||||
|
error(`Invalid number of arguments. Usage: ${chalk.cyan('`now secret rm <id | name>`')}`); |
||||
|
return exit(1); |
||||
|
} |
||||
|
const list = await secrets.ls(); |
||||
|
const theSecret = list.filter((secret) => { |
||||
|
return secret.uid === args[0] |
||||
|
|| secret.name === args[0]; |
||||
|
})[0]; |
||||
|
|
||||
|
if (theSecret) { |
||||
|
const yes = await readConfirmation(theSecret); |
||||
|
if (!yes) { |
||||
|
error('User abort'); |
||||
|
return exit(0); |
||||
|
} |
||||
|
} else { |
||||
|
error(`No secret found by id or name "${args[0]}"`); |
||||
|
return exit(1); |
||||
|
} |
||||
|
|
||||
|
const secret = await secrets.rm(args[0]); |
||||
|
const elapsed = ms(new Date() - start); |
||||
|
console.log(`${chalk.cyan('> Success!')} Secret ${chalk.bold(secret.name)} ${chalk.gray(`(${secret.uid})`)} removed ${chalk.gray(`[${elapsed}]`)}`); |
||||
|
return secrets.close(); |
||||
|
} |
||||
|
|
||||
|
if ('rename' === subcommand) { |
||||
|
if (2 !== args.length) { |
||||
|
error(`Invalid number of arguments. Usage: ${chalk.cyan('`now secret rename <old-name> <new-name>`')}`); |
||||
|
return exit(1); |
||||
|
} |
||||
|
const secret = await secrets.rename(args[0], args[1]); |
||||
|
const elapsed = ms(new Date() - start); |
||||
|
console.log(`${chalk.cyan('> Success!')} Secret ${chalk.bold(secret.oldName)} ${chalk.gray(`(${secret.uid})`)} renamed to ${chalk.bold(args[1])} ${chalk.gray(`[${elapsed}]`)}`); |
||||
|
return secrets.close(); |
||||
|
} |
||||
|
|
||||
|
if ('add' === subcommand || 'set' === subcommand) { |
||||
|
if (2 !== args.length) { |
||||
|
error(`Invalid number of arguments. Usage: ${chalk.cyan('`now secret add <name> <value>`')}`); |
||||
|
if (args.length > 2) { |
||||
|
const [, ...rest] = args; |
||||
|
console.log('> If your secret has spaces, make sure to wrap it in quotes. Example: \n' |
||||
|
+ ` ${chalk.cyan('$ now secret add ${args[0]} "${escaped}"')} `); |
||||
|
} |
||||
|
return exit(1); |
||||
|
} |
||||
|
const [name, value_] = args; |
||||
|
let value; |
||||
|
if (argv.base64) { |
||||
|
value = { base64: value_ }; |
||||
|
} else { |
||||
|
value = value_; |
||||
|
} |
||||
|
const secret = await secrets.add(name, value); |
||||
|
const elapsed = ms(new Date() - start); |
||||
|
console.log(`${chalk.cyan('> Success!')} Secret ${chalk.bold(name)} ${chalk.gray(`(${secret.uid})`)} added ${chalk.gray(`[${elapsed}]`)}`); |
||||
|
return secrets.close(); |
||||
|
} |
||||
|
|
||||
|
error('Please specify a valid subcommand: ls | add | rename | rm'); |
||||
|
help(); |
||||
|
exit(1); |
||||
|
} |
||||
|
|
||||
|
process.on('uncaughtException', (err) => { |
||||
|
handleError(err); |
||||
|
exit(1); |
||||
|
}); |
||||
|
|
||||
|
function readConfirmation (secret) { |
||||
|
return new Promise((resolve, reject) => { |
||||
|
const time = chalk.gray(ms(new Date() - new Date(secret.created)) + ' ago'); |
||||
|
const tbl = table( |
||||
|
[[secret.uid, chalk.bold(secret.name), time]], |
||||
|
{ align: ['l', 'r', 'l'], hsep: ' '.repeat(6) } |
||||
|
); |
||||
|
|
||||
|
process.stdout.write('> The following secret will be removed permanently\n'); |
||||
|
process.stdout.write(' ' + tbl + '\n'); |
||||
|
|
||||
|
process.stdout.write(`${chalk.bold.red('> Are you sure?')} ${chalk.gray('[yN] ')}`); |
||||
|
|
||||
|
process.stdin.on('data', (d) => { |
||||
|
process.stdin.pause(); |
||||
|
resolve('y' === d.toString().trim().toLowerCase()); |
||||
|
}).resume(); |
||||
|
}); |
||||
|
} |
||||
@ -0,0 +1,104 @@ |
|||||
|
import Now from '../lib'; |
||||
|
|
||||
|
export default class Secrets extends Now { |
||||
|
|
||||
|
ls () { |
||||
|
return this.retry(async (bail, attempt) => { |
||||
|
if (this._debug) console.time(`> [debug] #${attempt} GET /secrets`); |
||||
|
const res = await this._fetch('/secrets'); |
||||
|
if (this._debug) console.timeEnd(`> [debug] #${attempt} GET /secrets`); |
||||
|
const body = await res.json(); |
||||
|
return body.secrets; |
||||
|
}); |
||||
|
} |
||||
|
|
||||
|
rm (nameOrId) { |
||||
|
return this.retry(async (bail, attempt) => { |
||||
|
if (this._debug) console.time(`> [debug] #${attempt} DELETE /secrets/${nameOrId}`); |
||||
|
const res = await this._fetch(`/secrets/${nameOrId}`, { method: 'DELETE' }); |
||||
|
if (this._debug) console.timeEnd(`> [debug] #${attempt} DELETE /secrets/${nameOrId}`); |
||||
|
|
||||
|
if (403 === res.status) { |
||||
|
return bail(new Error('Unauthorized')); |
||||
|
} |
||||
|
|
||||
|
const body = await res.json(); |
||||
|
|
||||
|
if (res.status !== 200) { |
||||
|
if (404 === res.status || 400 === res.status) { |
||||
|
const err = new Error(body.error.message); |
||||
|
err.userError = true; |
||||
|
return bail(err); |
||||
|
} else { |
||||
|
throw new Error(body.error.message); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
return body; |
||||
|
}); |
||||
|
} |
||||
|
|
||||
|
add (name, value) { |
||||
|
return this.retry(async (bail, attempt) => { |
||||
|
if (this._debug) console.time(`> [debug] #${attempt} POST /secrets`); |
||||
|
const res = await this._fetch('/secrets', { |
||||
|
method: 'POST', |
||||
|
body: { |
||||
|
name, |
||||
|
value |
||||
|
} |
||||
|
}); |
||||
|
if (this._debug) console.timeEnd(`> [debug] #${attempt} POST /secrets`); |
||||
|
|
||||
|
if (403 === res.status) { |
||||
|
return bail(new Error('Unauthorized')); |
||||
|
} |
||||
|
|
||||
|
const body = await res.json(); |
||||
|
|
||||
|
if (res.status !== 200) { |
||||
|
if (404 === res.status || 400 === res.status) { |
||||
|
const err = new Error(body.error.message); |
||||
|
err.userError = true; |
||||
|
return bail(err); |
||||
|
} else { |
||||
|
throw new Error(body.error.message); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
return body; |
||||
|
}); |
||||
|
} |
||||
|
|
||||
|
rename (nameOrId, newName) { |
||||
|
return this.retry(async (bail, attempt) => { |
||||
|
if (this._debug) console.time(`> [debug] #${attempt} PATCH /secrets/${nameOrId}`); |
||||
|
const res = await this._fetch(`/secrets/${nameOrId}`, { |
||||
|
method: 'PATCH', |
||||
|
body: { |
||||
|
name: newName |
||||
|
} |
||||
|
}); |
||||
|
if (this._debug) console.timeEnd(`> [debug] #${attempt} PATCH /secrets/${nameOrId}`); |
||||
|
|
||||
|
if (403 === res.status) { |
||||
|
return bail(new Error('Unauthorized')); |
||||
|
} |
||||
|
|
||||
|
const body = await res.json(); |
||||
|
|
||||
|
if (res.status !== 200) { |
||||
|
if (404 === res.status || 400 === res.status) { |
||||
|
const err = new Error(body.error.message); |
||||
|
err.userError = true; |
||||
|
return bail(err); |
||||
|
} else { |
||||
|
throw new Error(body.error.message); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
return body; |
||||
|
}); |
||||
|
} |
||||
|
|
||||
|
} |
||||
Loading…
Reference in new issue