124 lines
3.9 KiB
Go
124 lines
3.9 KiB
Go
package accountscmd
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"strings"
|
|
|
|
"github.com/hashicorp/boundary/api/accounts"
|
|
"github.com/hashicorp/boundary/internal/cmd/base"
|
|
"github.com/hashicorp/boundary/sdk/strutil"
|
|
"github.com/hashicorp/vault/sdk/helper/password"
|
|
)
|
|
|
|
func init() {
|
|
extraPasswordActionsFlagsMapFunc = extraPasswordActionsFlagsMapFuncImpl
|
|
extraPasswordFlagsFunc = extraPasswordFlagsFuncImpl
|
|
extraPasswordFlagsHandlingFunc = extraPasswordFlagsHandlingFuncImpl
|
|
}
|
|
|
|
func extraPasswordActionsFlagsMapFuncImpl() map[string][]string {
|
|
return map[string][]string{
|
|
"create": {"login-name", "password"},
|
|
"update": {"login-name"},
|
|
}
|
|
}
|
|
|
|
type extraPasswordCmdVars struct {
|
|
flagLoginName string
|
|
flagPassword string
|
|
}
|
|
|
|
func (c *PasswordCommand) extraPasswordHelpFunc(helpMap map[string]func() string) string {
|
|
var helpStr string
|
|
switch c.Func {
|
|
case "create":
|
|
helpStr = base.WrapForHelpText([]string{
|
|
"Usage: boundary accounts create password [options] [args]",
|
|
"",
|
|
" Create a password-type account. Example:",
|
|
"",
|
|
` $ boundary accounts create password -login-name prodops -description "Password account for ProdOps"`,
|
|
"",
|
|
"",
|
|
})
|
|
|
|
case "update":
|
|
helpStr = base.WrapForHelpText([]string{
|
|
"Usage: boundary accounts update password [options] [args]",
|
|
"",
|
|
" Update a password-type account given its ID. Example:",
|
|
"",
|
|
` $ boundary accounts update password -id apw_1234567890 -name "devops" -description "Password account for DevOps"`,
|
|
"",
|
|
"",
|
|
})
|
|
}
|
|
return helpStr + c.Flags().Help()
|
|
}
|
|
|
|
func extraPasswordFlagsFuncImpl(c *PasswordCommand, set *base.FlagSets, f *base.FlagSet) {
|
|
f = set.NewFlagSet("Password Account Options")
|
|
|
|
for _, name := range flagsPasswordMap[c.Func] {
|
|
switch name {
|
|
case "login-name":
|
|
f.StringVar(&base.StringVar{
|
|
Name: "login-name",
|
|
Target: &c.flagLoginName,
|
|
Usage: "The login name for the account",
|
|
})
|
|
case "password":
|
|
f.StringVar(&base.StringVar{
|
|
Name: "password",
|
|
Target: &c.flagPassword,
|
|
Usage: "The password for the account. If not specified, the command will prompt for the password to be entered in a non-echoing way.",
|
|
})
|
|
}
|
|
}
|
|
}
|
|
|
|
func extraPasswordFlagsHandlingFuncImpl(c *PasswordCommand, opts *[]accounts.Option) bool {
|
|
if c.Func == "create" && c.flagLoginName == "" {
|
|
c.UI.Error("Login Name must be passed in via -login-name")
|
|
return false
|
|
}
|
|
|
|
switch c.flagLoginName {
|
|
case "":
|
|
case "null":
|
|
*opts = append(*opts, accounts.DefaultPasswordAccountLoginName())
|
|
default:
|
|
*opts = append(*opts, accounts.WithPasswordAccountLoginName(c.flagLoginName))
|
|
}
|
|
|
|
if strutil.StrListContains(flagsPasswordMap[c.Func], "password") {
|
|
switch c.flagPassword {
|
|
case "":
|
|
fmt.Print("Password is not set as flag, please enter it now (will be hidden): ")
|
|
value, err := password.Read(os.Stdin)
|
|
fmt.Print("\n")
|
|
if err != nil {
|
|
c.UI.Error(fmt.Sprintf("An error occurred attempting to read the password. The raw error message is shown below but usually this is because you attempted to pipe a value into the command or you are executing outside of a terminal (TTY). The raw error was:\n\n%s", err.Error()))
|
|
return false
|
|
}
|
|
fmt.Print("Please enter it one more time for confirmation: ")
|
|
confirmation, err := password.Read(os.Stdin)
|
|
fmt.Print("\n")
|
|
if err != nil {
|
|
c.UI.Error(fmt.Sprintf("An error occurred attempting to read the password. The raw error message is shown below but usually this is because you attempted to pipe a value into the command or you are executing outside of a terminal (TTY). The raw error was:\n\n%s", err.Error()))
|
|
return false
|
|
}
|
|
if strings.TrimSpace(value) != strings.TrimSpace(confirmation) {
|
|
c.UI.Error("Entered password and confirmation value did not match.")
|
|
return false
|
|
}
|
|
*opts = append(*opts, accounts.WithPasswordAccountPassword(strings.TrimSpace(value)))
|
|
default:
|
|
*opts = append(*opts, accounts.WithPasswordAccountPassword(c.flagPassword))
|
|
}
|
|
}
|
|
|
|
return true
|
|
}
|