0ef529b710
* WIP: output policy
* Outputs example policy HCL for given request
* Simplify conditional
* Add PATCH capability
* Use OpenAPI spec and regex patterns to determine if path is sudo
* Add test for isSudoPath
* Add changelog
* Fix broken CLI tests
* Add output-policy to client cloning code
* Smaller fixes from PR comments
* Clone client instead of saving and restoring custom values
* Fix test
* Address comments
* Don't unset output-policy flag on KV requests otherwise the preflight request will fail and not populate LastOutputPolicyError
* Print errors saved in buffer from preflight KV requests
* Unescape characters in request URL
* Rename methods and properties to improve readability
* Put KV-specificness at front of KV-specific error
* Simplify logic by doing more direct returns of strings and errors
* Use precompiled regexes and move OpenAPI call to tests
* Remove commented out code
* Remove legacy MFA paths
* Remove unnecessary use of client
* Move sudo paths map to plugin helper
* Remove unused error return
* Add explanatory comment
* Remove need to pass in address
* Make {name} regex less greedy
* Use method and path instead of info from retryablerequest
* Add test for IsSudoPaths, use more idiomatic naming
* Use precompiled regexes and move OpenAPI call to tests (#15170)
* Use precompiled regexes and move OpenAPI call to tests
* Remove commented out code
* Remove legacy MFA paths
* Remove unnecessary use of client
* Move sudo paths map to plugin helper
* Remove unused error return
* Add explanatory comment
* Remove need to pass in address
* Make {name} regex less greedy
* Use method and path instead of info from retryablerequest
* Add test for IsSudoPaths, use more idiomatic naming
* Make stderr writing more obvious, fix nil pointer deref
96 lines
2.4 KiB
Go
96 lines
2.4 KiB
Go
package api
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
"strings"
|
|
|
|
retryablehttp "github.com/hashicorp/go-retryablehttp"
|
|
)
|
|
|
|
const (
|
|
ErrOutputStringRequest = "output a string, please"
|
|
)
|
|
|
|
var LastOutputStringError *OutputStringError
|
|
|
|
type OutputStringError struct {
|
|
*retryablehttp.Request
|
|
TLSSkipVerify bool
|
|
ClientCACert, ClientCAPath string
|
|
ClientCert, ClientKey string
|
|
finalCurlString string
|
|
}
|
|
|
|
func (d *OutputStringError) Error() string {
|
|
if d.finalCurlString == "" {
|
|
cs, err := d.buildCurlString()
|
|
if err != nil {
|
|
return err.Error()
|
|
}
|
|
d.finalCurlString = cs
|
|
}
|
|
|
|
return ErrOutputStringRequest
|
|
}
|
|
|
|
func (d *OutputStringError) CurlString() (string, error) {
|
|
if d.finalCurlString == "" {
|
|
cs, err := d.buildCurlString()
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
d.finalCurlString = cs
|
|
}
|
|
return d.finalCurlString, nil
|
|
}
|
|
|
|
func (d *OutputStringError) buildCurlString() (string, error) {
|
|
body, err := d.Request.BodyBytes()
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
// Build cURL string
|
|
finalCurlString := "curl "
|
|
if d.TLSSkipVerify {
|
|
finalCurlString += "--insecure "
|
|
}
|
|
if d.Request.Method != http.MethodGet {
|
|
finalCurlString = fmt.Sprintf("%s-X %s ", finalCurlString, d.Request.Method)
|
|
}
|
|
if d.ClientCACert != "" {
|
|
clientCACert := strings.Replace(d.ClientCACert, "'", "'\"'\"'", -1)
|
|
finalCurlString = fmt.Sprintf("%s--cacert '%s' ", finalCurlString, clientCACert)
|
|
}
|
|
if d.ClientCAPath != "" {
|
|
clientCAPath := strings.Replace(d.ClientCAPath, "'", "'\"'\"'", -1)
|
|
finalCurlString = fmt.Sprintf("%s--capath '%s' ", finalCurlString, clientCAPath)
|
|
}
|
|
if d.ClientCert != "" {
|
|
clientCert := strings.Replace(d.ClientCert, "'", "'\"'\"'", -1)
|
|
finalCurlString = fmt.Sprintf("%s--cert '%s' ", finalCurlString, clientCert)
|
|
}
|
|
if d.ClientKey != "" {
|
|
clientKey := strings.Replace(d.ClientKey, "'", "'\"'\"'", -1)
|
|
finalCurlString = fmt.Sprintf("%s--key '%s' ", finalCurlString, clientKey)
|
|
}
|
|
for k, v := range d.Request.Header {
|
|
for _, h := range v {
|
|
if strings.ToLower(k) == "x-vault-token" {
|
|
h = `$(vault print token)`
|
|
}
|
|
finalCurlString = fmt.Sprintf("%s-H \"%s: %s\" ", finalCurlString, k, h)
|
|
}
|
|
}
|
|
|
|
if len(body) > 0 {
|
|
// We need to escape single quotes since that's what we're using to
|
|
// quote the body
|
|
escapedBody := strings.Replace(string(body), "'", "'\"'\"'", -1)
|
|
finalCurlString = fmt.Sprintf("%s-d '%s' ", finalCurlString, escapedBody)
|
|
}
|
|
|
|
return fmt.Sprintf("%s%s", finalCurlString, d.Request.URL.String()), nil
|
|
}
|