keywhiz.cli.configs.AddOrUpdateActionConfig.java Source code

Introduction

Here is the source code for keywhiz.cli.configs.AddOrUpdateActionConfig.java

Source

/*
 * Copyright (C) 2015 Square, Inc.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package keywhiz.cli.configs;

import com.beust.jcommander.Parameter;
import com.beust.jcommander.Parameters;
import com.fasterxml.jackson.core.type.TypeReference;
import com.fasterxml.jackson.databind.ObjectMapper;
import com.google.common.base.Throwables;
import com.google.common.collect.ImmutableMap;
import java.io.IOException;
import java.util.List;
import org.joda.time.DateTime;

import static java.lang.String.format;

public class AddOrUpdateActionConfig {
    @Parameter(names = "--name", description = "Name of the item to add", required = true)
    public String name;

    @Parameter(names = "--description", description = "Description of the item to add or update")
    public String description;

    @Parameter(names = "--json", description = "Metadata JSON blob")
    public String json;

    @Parameter(names = { "-g", "--group" }, description = "Also assign the secret to this group (secrets only)")
    public String group;

    @Parameter(names = { "-e",
            "--expiry" }, description = "Secret expiry. For keystores, it is recommended to use the expiry of the earliest key. Format should be 2006-01-02T15:04:05Z or seconds since epoch.")
    public String expiry;

    public String getDescription() {
        String description = this.description;
        if (description == null) {
            return "";
        }
        return description;
    }

    public ImmutableMap<String, String> getMetadata(ObjectMapper mapper) {
        ImmutableMap<String, String> metadata = ImmutableMap.of();
        if (json != null && !json.isEmpty()) {
            TypeReference typeRef = new TypeReference<ImmutableMap<String, String>>() {
            };
            try {
                metadata = mapper.readValue(json, typeRef);
            } catch (IOException e) {
                throw Throwables.propagate(e);
            }
            validateMetadata(metadata);
        }
        return metadata;
    }

    public long getExpiry() {
        if (expiry != null) {
            try {
                return Long.parseLong(expiry);
            } catch (NumberFormatException e) {
            }
            DateTime dt = new DateTime(expiry);
            return dt.getMillis() / 1000;
        }
        return 0;
    }

    private static void validateMetadata(ImmutableMap<String, String> metadata) {
        for (ImmutableMap.Entry<String, String> entry : metadata.entrySet()) {
            String key = entry.getKey();
            String value = entry.getValue();

            // We want to perform strong validation of the metadata to make sure it is well formed.
            if (!key.matches("(owner|group|mode)")) {
                if (!key.startsWith("_")) {
                    throw new IllegalArgumentException(format(
                            "Illegal metadata key %s: custom metadata keys must start with an underscore", key));
                }
                if (!key.matches("^[a-zA-Z_0-9\\-.:]+$")) {
                    throw new IllegalArgumentException(format(
                            "Illegal metadata key %s: metadata keys can only contain: a-z A-Z 0-9 _ - . :", key));
                }
            }

            if (key.equals("mode") && !value.matches("0[0-7]+")) {
                throw new IllegalArgumentException(format("mode %s is not proper octal", value));
            }
        }
    }

}