infisical/cli/packages/util/vault.go

package util

import (
	"fmt"
	"os"

	"github.com/99designs/keyring"
	log "github.com/sirupsen/logrus"
	"golang.org/x/term"
)

// Keyring instance
var keyringInstance keyring.Keyring
var keyringInstanceConfig keyring.Config

func GetCurrentVaultBackend() (keyring.BackendType, error) {
	configFile, err := GetConfigFile()
	if err != nil {
		return "", fmt.Errorf("getCurrentVaultBackend: unable to get config file [err=%s]", err)
	}

	if configFile.VaultBackendType == "" {
		if keyring.AvailableBackends()[0] == keyring.FileBackend {
		}
		return keyring.AvailableBackends()[0], nil
	}

	return configFile.VaultBackendType, nil
}

func InitKeyRingInstance() {
	currentVaultBackend, err := GetCurrentVaultBackend()
	if err != nil {
		log.Infof("InitKeyRingInstance: unable to get the current vault backend, [err=%s]", err)
	}

	keyringInstanceConfig = keyring.Config{
		FilePasswordFunc:               fileKeyringPassphrasePrompt,
		ServiceName:                    SERVICE_NAME,
		LibSecretCollectionName:        SERVICE_NAME,
		KWalletAppID:                   SERVICE_NAME,
		KWalletFolder:                  SERVICE_NAME,
		KeychainTrustApplication:       true,
		WinCredPrefix:                  SERVICE_NAME,
		FileDir:                        fmt.Sprintf("~/%s-file-vault", SERVICE_NAME),
		KeychainAccessibleWhenUnlocked: true,
	}

	// if the user explicitly sets a vault backend, then only use that
	if currentVaultBackend != "" {
		keyringInstanceConfig.AllowedBackends = []keyring.BackendType{keyring.BackendType(currentVaultBackend)}
	}

	keyringInstance, err = keyring.Open(keyringInstanceConfig)
	if err != nil {
		log.Errorf("InitKeyRingInstance: Unable to create instance of Keyring because of [err=%s]", err)
	}
}

func fileKeyringPassphrasePrompt(prompt string) (string, error) {
	if password, ok := os.LookupEnv("INFISICAL_VAULT_FILE_PASSPHRASE"); ok {
		return password, nil
	}

	fmt.Fprintf(os.Stderr, "%s: ", prompt)
	b, err := term.ReadPassword(int(os.Stdin.Fd()))
	if err != nil {
		return "", err
	}
	return string(b), nil
}