Added .NET to available frameworks

cli/packages/cmd/secrets.go

@@ -0,0 +1,103 @@
+/*
+Copyright © 2022 NAME HERE <EMAIL ADDRESS>
+*/
+package cmd
+
+import (
+	"fmt"
+
+	"github.com/Infisical/infisical-merge/packages/models"
+	"github.com/Infisical/infisical-merge/packages/util"
+	"github.com/Infisical/infisical-merge/packages/visualize"
+	log "github.com/sirupsen/logrus"
+	"github.com/spf13/cobra"
+)
+
+var secretsCmd = &cobra.Command{
+	Example:               `infisical secrets"`,
+	Short:                 "Used to create, read update and delete secrets",
+	Use:                   "secrets",
+	DisableFlagsInUseLine: true,
+	PreRun:                toggleDebug,
+	Args:                  cobra.NoArgs,
+	Run: func(cmd *cobra.Command, args []string) {
+
+		secrets, err := util.GetAllEnvironmentVariables("", "dev")
+		secrets = util.SubstituteSecrets(secrets)
+		if err != nil {
+			log.Debugln(err)
+			return
+		}
+		visualize.PrintAllSecretDetails(secrets)
+	},
+}
+
+var secretsGetCmd = &cobra.Command{
+	Example:               `secrets get <secret name A> <secret name B>..."`,
+	Short:                 "Used to retrieve secrets by name",
+	Use:                   "get [secrets]",
+	DisableFlagsInUseLine: true,
+	Args:                  cobra.MinimumNArgs(1),
+	PreRun:                toggleDebug,
+	Run:                   getSecretsByNames,
+}
+
+var secretsSetCmd = &cobra.Command{
+	Example:               `secrets set <secret name A> <secret value A> <secret name B> <secret value B>..."`,
+	Short:                 "Used update retrieve secrets by name",
+	Use:                   "set [secrets]",
+	DisableFlagsInUseLine: true,
+	PreRun:                toggleDebug,
+	Args:                  cobra.NoArgs,
+	Run: func(cmd *cobra.Command, args []string) {
+		fmt.Println("set secret")
+	},
+}
+
+var secretsDeleteCmd = &cobra.Command{
+	Example:               `secrets delete <secret name A> <secret name B>..."`,
+	Short:                 "Used to delete secrets by name",
+	Use:                   "delete [secrets]",
+	DisableFlagsInUseLine: true,
+	PreRun:                toggleDebug,
+	Args:                  cobra.NoArgs,
+	Run: func(cmd *cobra.Command, args []string) {
+		fmt.Println("Delete secret")
+	},
+}
+
+func init() {
+	secretsCmd.AddCommand(secretsGetCmd)
+	secretsCmd.AddCommand(secretsSetCmd)
+	secretsCmd.AddCommand(secretsDeleteCmd)
+	rootCmd.AddCommand(secretsCmd)
+}
+
+func getSecretsByNames(cmd *cobra.Command, args []string) {
+	secrets, err := util.GetAllEnvironmentVariables("", "dev")
+	if err != nil {
+		log.Error("Unable to retrieve secrets. Run with -d to see full logs")
+		log.Debug(err)
+	}
+
+	requestedSecrets := []models.SingleEnvironmentVariable{}
+
+	secretsMap := make(map[string]models.SingleEnvironmentVariable)
+	for _, secret := range secrets {
+		secretsMap[secret.Key] = secret
+	}
+
+	for _, secretKeyFromArg := range args {
+		if value, ok := secretsMap[secretKeyFromArg]; ok {
+			requestedSecrets = append(requestedSecrets, value)
+		} else {
+			requestedSecrets = append(requestedSecrets, models.SingleEnvironmentVariable{
+				Key:   secretKeyFromArg,
+				Type:  "NOT FOUND",
+				Value: "NOT FOUND",
+			})
+		}
+	}
+
+	visualize.PrintAllSecretDetails(requestedSecrets)
+}

cli/packages/util/crypto.go

@@ -3,21 +3,26 @@ package util
 import (
 	"crypto/aes"
 	"crypto/cipher"
+	"crypto/rand"
+	"io"
+
+	"golang.org/x/crypto/nacl/box"
 )
 
-func DecryptSymmetric(key []byte, encryptedPrivateKey []byte, tag []byte, IV []byte) ([]byte, error) {
+// will decrypt cipher text to plain text using iv and tag
+func DecryptSymmetric(key []byte, cipherText []byte, tag []byte, iv []byte) ([]byte, error) {
 	block, err := aes.NewCipher(key)
 	if err != nil {
 		return nil, err
 	}
 
-	aesgcm, err := cipher.NewGCMWithNonceSize(block, len(IV))
+	aesgcm, err := cipher.NewGCMWithNonceSize(block, len(iv))
 	if err != nil {
 		return nil, err
 	}
 
-	var nonce = IV
-	var ciphertext = append(encryptedPrivateKey, tag...)
+	var nonce = iv
+	var ciphertext = append(cipherText, tag...) // the aesgcm open method expects auth tag at the end of the cipher text
 
 	plaintext, err := aesgcm.Open(nil, nonce, ciphertext, nil)
 	if err != nil {
@@ -26,3 +31,46 @@ func DecryptSymmetric(key []byte, encryptedPrivateKey []byte, tag []byte, IV []b
 
 	return plaintext, nil
 }
+
+func GenerateNewKey() (newKey []byte, keyErr error) {
+	key := make([]byte, 16) // block size defaults to 16 so this is fine
+	_, err := rand.Read(key)
+	return key, err
+}
+
+// Will encrypt a plain text with the provided key
+func EncryptSymmetric(plaintext []byte, key []byte) (cipherText []byte, iv []byte, tag []byte, err error) {
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return nil, nil, nil, err
+	}
+
+	aesgcm, err := cipher.NewGCMWithNonceSize(block, 16) // default is 12, 16 because https://github.com/Infisical/infisical/blob/bea0ff6e05a4de73a5db625d4ae181a015b50855/backend/src/utils/aes-gcm.ts#L4
+	if err != nil {
+		return nil, nil, nil, err
+	}
+
+	// create a nonce
+	nonce := make([]byte, aesgcm.NonceSize())
+	if _, err := io.ReadFull(rand.Reader, nonce); err != nil {
+		panic(err)
+	}
+
+	ciphertext := aesgcm.Seal(nil, nonce, plaintext, nil)
+
+	ciphertextOnly := ciphertext[:len(ciphertext)-16] // combines the auth tag with the cipher text so we need to extract it
+
+	authTag := ciphertext[len(ciphertext)-16:]
+
+	return ciphertextOnly, nonce, authTag, nil
+}
+
+func DecryptAsymmetric(ciphertext []byte, nonce []byte, publicKey []byte, privateKey []byte) (plainText []byte) {
+	plainTextToReturn, _ := box.Open(nil, ciphertext, (*[24]byte)(nonce), (*[32]byte)(publicKey), (*[32]byte)(privateKey))
+	return plainTextToReturn
+}
+
+func EncryptAssymmetric(message []byte, nonce []byte, publicKey []byte, privateKey []byte) (encryptedMessage []byte) {
+	encryptedPlainText := box.Seal(nil, message, (*[24]byte)(nonce), (*[32]byte)(publicKey), (*[32]byte)(privateKey))
+	return encryptedPlainText
+}

cli/packages/util/secrets.go

@@ -11,7 +11,6 @@ import (
 	"github.com/Infisical/infisical-merge/packages/models"
 	"github.com/go-resty/resty/v2"
 	log "github.com/sirupsen/logrus"
-	"golang.org/x/crypto/nacl/box"
 )
 
 const PERSONAL_SECRET_TYPE_NAME = "personal"
@@ -56,7 +55,7 @@ func getSecretsByWorkspaceIdAndEnvName(httpClient resty.Client, envName string,
 	}
 
 	// log.Debugln("workspaceKey", workspaceKey, "nonce", nonce, "senderPublicKey", senderPublicKey, "currentUsersPrivateKey", currentUsersPrivateKey)
-	workspaceKeyInBytes, _ := box.Open(nil, workspaceKey, (*[24]byte)(nonce), (*[32]byte)(senderPublicKey), (*[32]byte)(currentUsersPrivateKey))
+	workspaceKeyInBytes := DecryptAsymmetric(workspaceKey, nonce, senderPublicKey, currentUsersPrivateKey)
 	var listOfEnv []models.SingleEnvironmentVariable
 
 	for _, secret := range pullSecretsRequestResponse.Secrets {
@@ -166,7 +165,8 @@ func GetSecretsFromAPIUsingInfisicalToken(infisicalToken string, envName string,
 		return nil, err
 	}
 
-	workspaceKeyInBytes, _ := box.Open(nil, workspaceKey, (*[24]byte)(nonce), (*[32]byte)(senderPublicKey), (*[32]byte)(currentUsersPrivateKey))
+	// workspaceKeyInBytes, _ := box.Open(nil, workspaceKey, (*[24]byte)(nonce), (*[32]byte)(senderPublicKey), (*[32]byte)(currentUsersPrivateKey))
+	workspaceKeyInBytes := DecryptAsymmetric(workspaceKey, nonce, senderPublicKey, currentUsersPrivateKey)
 	var listOfEnv []models.SingleEnvironmentVariable
 
 	for _, secret := range pullSecretsByInfisicalTokenResponse.Secrets {
@@ -223,6 +223,7 @@ func GetAllEnvironmentVariables(projectId string, envName string) ([]models.Sing
 			return nil, err
 		}
 
+		// TODO: Should be based on flag. I.e only get all workspaces if desired, otherwise only get the one in the current root of project
 		workspaceConfigs, err := GetAllWorkSpaceConfigsStartingFromCurrentPath()
 		if err != nil {
 			return nil, fmt.Errorf("unable to check if you have a %s file in your current directory", INFISICAL_WORKSPACE_CONFIG_FILE_NAME)

cli/packages/visualize/secrets.go

@@ -0,0 +1,14 @@
+package visualize
+
+import "github.com/Infisical/infisical-merge/packages/models"
+
+func PrintAllSecretDetails(secrets []models.SingleEnvironmentVariable) {
+	rows := [][]string{}
+	for _, secret := range secrets {
+		rows = append(rows, []string{secret.Key, secret.Value, secret.Type})
+	}
+
+	headers := []string{"Secret name", "Secret vaule", "Secret type"}
+
+	Table(headers, rows)
+}

cli/packages/visualize/visualize.go

@@ -6,13 +6,23 @@ import (
 	"github.com/jedib0t/go-pretty/table"
 )
 
+type TableOptions struct {
+	Title string
+}
+
+// func GetDefaultTableOptions() TableOptions{
+// 	return TableOptions{
+// 		Title: "",
+// 	}
+// }
+
 // Given headers and rows, this function will print out a table
 func Table(headers []string, rows [][]string) {
 	t := table.NewWriter()
 	t.SetOutputMirror(os.Stdout)
 	t.SetStyle(table.StyleLight)
 
-	// t.SetTitle("Title")
+	// t.SetTitle(tableOptions.Title)
 	t.Style().Options.DrawBorder = true
 	t.Style().Options.SeparateHeader = true
 	t.Style().Options.SeparateColumns = true