Examples with SanitizedSecret keywhiz.api.model.SanitizedSecret used on opensource projects

Example 36 with SanitizedSecret

use of keywhiz.api.model.SanitizedSecret in project keywhiz by square.

the class RenameAction method renameSecret.

private void renameSecret() {
    try {
        SanitizedSecret secret = keywhiz.getSanitizedSecretByName(config.oldName);
        keywhiz.renameSecret(secret.id(), config.newName);
    } catch (IOException e) {
        throw new RuntimeException(e);
    }
}

Example 37 with SanitizedSecret

use of keywhiz.api.model.SanitizedSecret in project keywhiz by square.

the class UnassignAction method run.

@Override
public void run() {
    List<String> unassignType = unassignActionConfig.unassignType;
    if (unassignType == null || unassignType.isEmpty()) {
        throw new IllegalArgumentException("Must specify a single type to unassign.");
    }
    if (unassignActionConfig.name == null || !validName(unassignActionConfig.name) || unassignActionConfig.group == null || !validName(unassignActionConfig.group)) {
        throw new IllegalArgumentException(format("Invalid name, must match %s", VALID_NAME_PATTERN));
    }
    Group group;
    try {
        group = keywhizClient.getGroupByName(unassignActionConfig.group);
        if (group == null) {
            throw new AssertionError("Group doesn't exist.");
        }
    } catch (IOException e) {
        throw Throwables.propagate(e);
    }
    String firstType = unassignType.get(0).toLowerCase().trim();
    switch(firstType) {
        case "client":
            try {
                Client client = keywhizClient.getClientByName(unassignActionConfig.name);
                if (!keywhizClient.groupDetailsForId(group.getId()).getClients().contains(client)) {
                    throw new AssertionError(format("Client '%s' not assigned to group '%s'.", unassignActionConfig.name, group));
                }
                logger.info("Evicting client '{}' from group '{}'.", client.getName(), group.getName());
                keywhizClient.evictClientFromGroupByIds(client.getId(), group.getId());
            } catch (NotFoundException e) {
                throw new AssertionError("Client or group doesn't exist.");
            } catch (IOException e) {
                throw Throwables.propagate(e);
            }
            break;
        case "secret":
            try {
                long groupId = group.getId();
                SanitizedSecret sanitizedSecret = keywhizClient.getSanitizedSecretByName(unassignActionConfig.name);
                if (!keywhizClient.groupDetailsForId(groupId).getSecrets().contains(sanitizedSecret)) {
                    throw new AssertionError(format("Secret '%s' not assigned to group '%s'", unassignActionConfig.name, group));
                }
                logger.info("Revoke group '{}' access to secret '{}'.", group.getName(), SanitizedSecret.displayName(sanitizedSecret));
                keywhizClient.revokeSecretFromGroupByIds(sanitizedSecret.id(), groupId);
            } catch (NotFoundException e) {
                throw new AssertionError("Secret or group doesn't exist.");
            } catch (IOException e) {
                throw Throwables.propagate(e);
            }
            break;
        default:
            throw new IllegalArgumentException("Invalid unassign type specified: " + firstType);
    }
}

Example 38 with SanitizedSecret

use of keywhiz.api.model.SanitizedSecret in project keywhiz by square.

the class SecretResource method secretListingExpiringForGroup.

/**
 * Retrieve listing of secrets expiring soon in a group
 *
 * @param time timestamp for farthest expiry to include
 * @param name Group name
 * responseMessage 200 List of secrets expiring soon in group
 */
@Timed
@ExceptionMetered
@Path("expiring/{time}/{name}")
@GET
@Produces(APPLICATION_JSON)
public Iterable<String> secretListingExpiringForGroup(@Auth AutomationClient automationClient, @PathParam("time") Long time, @PathParam("name") String name) {
    Group group = groupDAO.getGroup(name).orElseThrow(NotFoundException::new);
    List<SanitizedSecret> secrets = secretControllerReadOnly.getSanitizedSecrets(time, group);
    return secrets.stream().map(SanitizedSecret::name).collect(toSet());
}

Example 39 with SanitizedSecret

use of keywhiz.api.model.SanitizedSecret in project keywhiz by square.

the class GroupResource method secretsWithGroupsForGroup.

/**
 * Retrieve metadata for secrets in a particular group, including all
 * groups linked to each secret.
 *
 * @param name Group name
 *
 * responseMessage 200 Group information retrieved
 * responseMessage 404 Group not found
 */
@Timed
@ExceptionMetered
@GET
@Path("{name}/secretsandgroups")
@Produces(APPLICATION_JSON)
public Set<SanitizedSecretWithGroups> secretsWithGroupsForGroup(@Auth AutomationClient automationClient, @PathParam("name") String name) {
    Group group = groupDAOReadOnly.getGroup(name).orElseThrow(NotFoundException::new);
    Set<SanitizedSecret> secrets = aclDAOReadOnly.getSanitizedSecretsFor(group);
    Map<Long, List<Group>> groupsForSecrets = aclDAOReadOnly.getGroupsForSecrets(secrets.stream().map(SanitizedSecret::id).collect(Collectors.toUnmodifiableSet()));
    return secrets.stream().map(s -> {
        List<Group> groups = groupsForSecrets.get(s.id());
        if (groups == null) {
            groups = ImmutableList.of();
        }
        return SanitizedSecretWithGroups.of(s, groups);
    }).collect(Collectors.toUnmodifiableSet());
}

Example 40 with SanitizedSecret

use of keywhiz.api.model.SanitizedSecret in project keywhiz by square.

the class ClientsResource method clientDetailResponseFromId.

private ClientDetailResponse clientDetailResponseFromId(long clientId) {
    Optional<Client> optionalClient = clientDAO.getClientById(clientId);
    if (!optionalClient.isPresent()) {
        throw new NotFoundException("Client not found.");
    }
    Client client = optionalClient.get();
    ImmutableList<Group> groups = ImmutableList.copyOf(aclDAO.getGroupsFor(client));
    ImmutableList<SanitizedSecret> sanitizedSecrets = ImmutableList.copyOf(aclDAO.getSanitizedSecretsFor(client));
    return ClientDetailResponse.fromClient(client, groups, sanitizedSecrets);
}