86 lines
2.4 KiB
Go
86 lines
2.4 KiB
Go
// Copyright © 2022 Roberto Hidalgo <joao@un.rob.mx>
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
package opclient
|
|
|
|
import (
|
|
"fmt"
|
|
"strings"
|
|
|
|
"github.com/1Password/connect-sdk-go/onepassword"
|
|
op "github.com/1Password/connect-sdk-go/onepassword"
|
|
"github.com/sirupsen/logrus"
|
|
)
|
|
|
|
const itemMissingErrorSuffix = `" isn't an item.` // Specify the item...
|
|
const itemMissingErrorWithVault = `" isn't an item in the "` // "vaultName" vault. Specify the item...
|
|
|
|
func ItemMissingError(name string, err error) bool {
|
|
if opErr, ok := err.(*onepassword.Error); ok {
|
|
return opErr.StatusCode == 404
|
|
}
|
|
needle := itemMissingErrorSuffix
|
|
needleWithVault := itemMissingErrorWithVault
|
|
if name != "" {
|
|
needle = fmt.Sprintf(`"%s`+itemMissingErrorSuffix, name)
|
|
needleWithVault = fmt.Sprintf(`"%s`+itemMissingErrorWithVault, name)
|
|
}
|
|
return strings.Contains(err.Error(), needle) || strings.Contains(err.Error(), needleWithVault)
|
|
}
|
|
|
|
var client opClient
|
|
|
|
type opClient interface {
|
|
Get(vault, name string) (*op.Item, error)
|
|
Update(item *op.Item, remote *op.Item) error
|
|
Create(vault string, item *op.Item) error
|
|
List(vault, prefix string) ([]string, error)
|
|
}
|
|
|
|
func init() {
|
|
client = &CLI{}
|
|
}
|
|
|
|
func Use(newClient opClient) {
|
|
client = newClient
|
|
}
|
|
|
|
func Get(vault, name string) (*op.Item, error) {
|
|
return client.Get(vault, name)
|
|
}
|
|
|
|
func Update(vault, name string, item *op.Item) error {
|
|
remote, err := client.Get(vault, name)
|
|
if err != nil {
|
|
if ItemMissingError(name, err) {
|
|
return client.Create(vault, item)
|
|
}
|
|
|
|
return fmt.Errorf("could not fetch remote 1password item to compare against: %w", err)
|
|
}
|
|
|
|
remoteCS := Checksum(remote.Fields)
|
|
// we're checking the checksum we just calculated matches the stored on remote
|
|
// and that remoteCS matching the current item's stored password
|
|
// nolint:gocritic
|
|
if remoteCS == item.GetValue("password") && remoteCS == remote.GetValue("password") {
|
|
logrus.Debugf("remote %s\nlocal %s", remoteCS, item.GetValue("password"))
|
|
logrus.Warnf("item %s/%s is already up to date", item.Vault.ID, item.Title)
|
|
return nil
|
|
}
|
|
|
|
logrus.Infof("Item %s/%s already exists, updating", item.Vault.ID, item.Title)
|
|
return client.Update(item, remote)
|
|
}
|
|
|
|
func List(vault, prefix string) ([]string, error) {
|
|
return client.List(vault, prefix)
|
|
}
|
|
|
|
func keyForField(field *op.ItemField) string {
|
|
name := strings.ReplaceAll(field.Label, ".", "\\.")
|
|
if field.Section != nil {
|
|
name = field.Section.ID + "." + name
|
|
}
|
|
return name
|
|
}
|