org.springframework.vault.authentication.AppRoleAuthenticationOptions Java Examples

The following examples show how to use org.springframework.vault.authentication.AppRoleAuthenticationOptions. You can vote up the ones you like or vote down the ones you don't like, and go to the original project or source file by following the links above each example. You may check out the related API usage on the sidebar.

Example #1

Source File: EnvironmentVaultConfiguration.java From spring-vault with Apache License 2.0

6 votes

protected ClientAuthentication appRoleAuthentication() {

		String roleId = getProperty("vault.app-role.role-id");
		String secretId = getProperty("vault.app-role.secret-id");
		String path = getProperty("vault.app-role.app-role-path",
				AppRoleAuthenticationOptions.DEFAULT_APPROLE_AUTHENTICATION_PATH);

		Assert.hasText(roleId, "Vault AppRole authentication: RoleId (vault.app-role.role-id) must not be empty");

		AppRoleAuthenticationOptionsBuilder builder = AppRoleAuthenticationOptions.builder()
				.roleId(RoleId.provided(roleId)).path(path);

		if (StringUtils.hasText(secretId)) {
			builder = builder.secretId(SecretId.provided(secretId));
		}

		return new AppRoleAuthentication(builder.build(), restOperations());
	}

Example #2

Source File: AppRoleClientAuthenticationProviderTests.java From spring-cloud-config with Apache License 2.0

6 votes

@Test
public void appRoleWithFullPull() {

	VaultEnvironmentProperties properties = new VaultEnvironmentProperties();
	properties.setToken("token");
	properties.getAppRole().setRole("my-role");

	AppRoleAuthenticationOptions options = AppRoleClientAuthenticationProvider
			.getAppRoleAuthenticationOptions(properties);

	assertThat(options.getAppRole()).isEqualTo("my-role");
	assertThat(options.getRoleId())
			.isInstanceOf(RoleId.pull(VaultToken.of("token")).getClass());
	assertThat(options.getSecretId())
			.isInstanceOf(SecretId.pull(VaultToken.of("token")).getClass());
}

Example #3

Source File: AppRoleClientAuthenticationProviderTests.java From spring-cloud-config with Apache License 2.0

6 votes

@Test
public void appRoleRoleIdProvidedSecretIdPull() {

	VaultEnvironmentProperties properties = new VaultEnvironmentProperties();
	properties.setToken("token");
	properties.getAppRole().setRoleId("foo");
	properties.getAppRole().setRole("my-role");

	AppRoleAuthenticationOptions options = AppRoleClientAuthenticationProvider
			.getAppRoleAuthenticationOptions(properties);

	assertThat(options.getAppRole()).isEqualTo("my-role");
	assertThat(options.getRoleId()).isInstanceOf(RoleId.provided("foo").getClass());
	assertThat(options.getSecretId())
			.isInstanceOf(SecretId.pull(VaultToken.of("token")).getClass());
}

Example #4

Source File: ClientAuthenticationFactoryUnitTests.java From spring-cloud-vault with Apache License 2.0

6 votes

@Test
public void shouldSupportAppRoleRoleIdProvidedSecretIdPull() {

	VaultProperties properties = new VaultProperties();
	properties.setToken("token");
	properties.getAppRole().setRoleId("foo");
	properties.getAppRole().setRole("my-role");

	AppRoleAuthenticationOptions options = ClientAuthenticationFactory
			.getAppRoleAuthenticationOptions(properties);

	assertThat(options.getAppRole()).isEqualTo("my-role");
	assertThat(options.getRoleId()).isInstanceOf(RoleId.provided("foo").getClass());
	assertThat(options.getSecretId())
			.isInstanceOf(SecretId.pull(VaultToken.of("token")).getClass());
}

Example #5

Source File: ClientAuthenticationFactoryUnitTests.java From spring-cloud-vault with Apache License 2.0

6 votes

@Test
public void shouldSupportAppRoleFullPull() {

	VaultProperties properties = new VaultProperties();
	properties.setToken("token");
	properties.getAppRole().setRole("my-role");

	AppRoleAuthenticationOptions options = ClientAuthenticationFactory
			.getAppRoleAuthenticationOptions(properties);

	assertThat(options.getAppRole()).isEqualTo("my-role");
	assertThat(options.getRoleId())
			.isInstanceOf(RoleId.pull(VaultToken.of("token")).getClass());
	assertThat(options.getSecretId())
			.isInstanceOf(SecretId.pull(VaultToken.of("token")).getClass());
}

Example #6

Source File: AppRoleClientAuthenticationProvider.java From spring-cloud-config with Apache License 2.0

6 votes

private static AppRoleAuthenticationOptions.SecretId getSecretId(
		VaultEnvironmentProperties vaultProperties,
		VaultEnvironmentProperties.AppRoleProperties appRole) {

	if (StringUtils.hasText(appRole.getSecretId())) {
		return AppRoleAuthenticationOptions.SecretId.provided(appRole.getSecretId());
	}

	if (StringUtils.hasText(vaultProperties.getToken())
			&& StringUtils.hasText(appRole.getRole())) {
		return AppRoleAuthenticationOptions.SecretId
				.pull(VaultToken.of(vaultProperties.getToken()));
	}

	if (StringUtils.hasText(vaultProperties.getToken())) {
		return AppRoleAuthenticationOptions.SecretId
				.wrapped(VaultToken.of(vaultProperties.getToken()));
	}

	return AppRoleAuthenticationOptions.SecretId.absent();
}

Example #7

Source File: AppRoleClientAuthenticationProvider.java From spring-cloud-config with Apache License 2.0

6 votes

private static AppRoleAuthenticationOptions.RoleId getRoleId(
		VaultEnvironmentProperties vaultProperties,
		VaultEnvironmentProperties.AppRoleProperties appRole) {

	if (StringUtils.hasText(appRole.getRoleId())) {
		return AppRoleAuthenticationOptions.RoleId.provided(appRole.getRoleId());
	}

	if (StringUtils.hasText(vaultProperties.getToken())
			&& StringUtils.hasText(appRole.getRole())) {
		return AppRoleAuthenticationOptions.RoleId
				.pull(VaultToken.of(vaultProperties.getToken()));
	}

	if (StringUtils.hasText(vaultProperties.getToken())) {
		return AppRoleAuthenticationOptions.RoleId
				.wrapped(VaultToken.of(vaultProperties.getToken()));
	}

	throw new IllegalArgumentException("Any of '" + VAULT_PROPERTIES_PREFIX
			+ "app-role.role-id', '.token', "
			+ "or '.app-role.role' and '.token' must be provided if the "
			+ AuthenticationMethod.APPROLE + " authentication method is specified.");
}

Example #8

Source File: AppRoleClientAuthenticationProvider.java From spring-cloud-config with Apache License 2.0

6 votes

static AppRoleAuthenticationOptions getAppRoleAuthenticationOptions(
		VaultEnvironmentProperties vaultProperties) {

	VaultEnvironmentProperties.AppRoleProperties appRole = vaultProperties
			.getAppRole();

	AppRoleAuthenticationOptions.AppRoleAuthenticationOptionsBuilder builder = AppRoleAuthenticationOptions
			.builder().path(appRole.getAppRolePath());

	if (StringUtils.hasText(appRole.getRole())) {
		builder.appRole(appRole.getRole());
	}

	AppRoleAuthenticationOptions.RoleId roleId = getRoleId(vaultProperties, appRole);
	AppRoleAuthenticationOptions.SecretId secretId = getSecretId(vaultProperties,
			appRole);

	builder.roleId(roleId).secretId(secretId);

	return builder.build();
}

Example #9

Source File: AppRoleClientAuthenticationProviderTests.java From spring-cloud-config with Apache License 2.0

5 votes

@Test
public void appRoleRoleIdProvidedSecretIdWrapped() {

	VaultEnvironmentProperties properties = new VaultEnvironmentProperties();
	properties.setToken("token");
	properties.getAppRole().setRoleId("foo");

	AppRoleAuthenticationOptions options = AppRoleClientAuthenticationProvider
			.getAppRoleAuthenticationOptions(properties);

	assertThat(options.getRoleId()).isInstanceOf(RoleId.provided("foo").getClass());
	assertThat(options.getSecretId())
			.isInstanceOf(SecretId.wrapped(VaultToken.of("token")).getClass());
}

Example #10

Source File: AppRoleClientAuthenticationProviderTests.java From spring-cloud-config with Apache License 2.0

5 votes

@Test
public void appRoleRoleIdWrappedSecretIdProvided() {

	VaultEnvironmentProperties properties = new VaultEnvironmentProperties();
	properties.setToken("token");
	properties.getAppRole().setSecretId("bar");

	AppRoleAuthenticationOptions options = AppRoleClientAuthenticationProvider
			.getAppRoleAuthenticationOptions(properties);

	assertThat(options.getRoleId())
			.isInstanceOf(RoleId.wrapped(VaultToken.of("token")).getClass());
	assertThat(options.getSecretId())
			.isInstanceOf(SecretId.provided("bar").getClass());
}

Example #11

Source File: AppRoleClientAuthenticationProviderTests.java From spring-cloud-config with Apache License 2.0

5 votes

@Test
public void appRoleFullWrapped() {

	VaultEnvironmentProperties properties = new VaultEnvironmentProperties();
	properties.setToken("token");

	AppRoleAuthenticationOptions options = AppRoleClientAuthenticationProvider
			.getAppRoleAuthenticationOptions(properties);

	assertThat(options.getRoleId())
			.isInstanceOf(RoleId.wrapped(VaultToken.of("token")).getClass());
	assertThat(options.getSecretId())
			.isInstanceOf(SecretId.wrapped(VaultToken.of("token")).getClass());
}

Example #12

Source File: AppRoleClientAuthenticationProviderTests.java From spring-cloud-config with Apache License 2.0

5 votes

@Test
public void appRoleRoleIdProvidedSecretIdAbsent() {

	VaultEnvironmentProperties properties = new VaultEnvironmentProperties();
	properties.getAppRole().setRoleId("foo");

	AppRoleAuthenticationOptions options = AppRoleClientAuthenticationProvider
			.getAppRoleAuthenticationOptions(properties);

	assertThat(options.getRoleId()).isInstanceOf(RoleId.provided("foo").getClass());
	assertThat(options.getSecretId()).isInstanceOf(SecretId.absent().getClass());
}

Example #13

Source File: AppRoleClientAuthenticationProviderTests.java From spring-cloud-config with Apache License 2.0

5 votes

@Test
public void appRoleRoleIdProvidedSecretIdProvided() {

	VaultEnvironmentProperties properties = new VaultEnvironmentProperties();
	properties.getAppRole().setRoleId("foo");
	properties.getAppRole().setSecretId("bar");

	AppRoleAuthenticationOptions options = AppRoleClientAuthenticationProvider
			.getAppRoleAuthenticationOptions(properties);

	assertThat(options.getRoleId()).isInstanceOf(RoleId.provided("foo").getClass());
	assertThat(options.getSecretId())
			.isInstanceOf(SecretId.provided("bar").getClass());
}

Example #14

Source File: AppRoleClientAuthenticationProvider.java From spring-cloud-config with Apache License 2.0

5 votes

@Override
public ClientAuthentication getClientAuthentication(
		VaultEnvironmentProperties vaultProperties,
		RestOperations vaultRestOperations, RestOperations externalRestOperations) {

	AppRoleAuthenticationOptions options = getAppRoleAuthenticationOptions(
			vaultProperties);

	return new AppRoleAuthentication(options, vaultRestOperations);
}

Example #15

Source File: ClientAuthenticationFactoryUnitTests.java From spring-cloud-vault with Apache License 2.0

5 votes

@Test
public void shouldSupportAppRoleRoleIdProvidedSecretIdWrapped() {

	VaultProperties properties = new VaultProperties();
	properties.setToken("token");
	properties.getAppRole().setRoleId("foo");

	AppRoleAuthenticationOptions options = ClientAuthenticationFactory
			.getAppRoleAuthenticationOptions(properties);

	assertThat(options.getRoleId()).isInstanceOf(RoleId.provided("foo").getClass());
	assertThat(options.getSecretId())
			.isInstanceOf(SecretId.wrapped(VaultToken.of("token")).getClass());
}

Example #16

Source File: ClientAuthenticationFactoryUnitTests.java From spring-cloud-vault with Apache License 2.0

5 votes

@Test
public void shouldSupportAppRoleRoleIdWrappedSecretIdProvided() {

	VaultProperties properties = new VaultProperties();
	properties.setToken("token");
	properties.getAppRole().setSecretId("bar");

	AppRoleAuthenticationOptions options = ClientAuthenticationFactory
			.getAppRoleAuthenticationOptions(properties);

	assertThat(options.getRoleId())
			.isInstanceOf(RoleId.wrapped(VaultToken.of("token")).getClass());
	assertThat(options.getSecretId())
			.isInstanceOf(SecretId.provided("bar").getClass());
}

Example #17

Source File: ClientAuthenticationFactoryUnitTests.java From spring-cloud-vault with Apache License 2.0

5 votes

@Test
public void shouldSupportAppRoleFullWrapped() {

	VaultProperties properties = new VaultProperties();
	properties.setToken("token");

	AppRoleAuthenticationOptions options = ClientAuthenticationFactory
			.getAppRoleAuthenticationOptions(properties);

	assertThat(options.getRoleId())
			.isInstanceOf(RoleId.wrapped(VaultToken.of("token")).getClass());
	assertThat(options.getSecretId())
			.isInstanceOf(SecretId.wrapped(VaultToken.of("token")).getClass());
}

Example #18

Source File: ClientAuthenticationFactoryUnitTests.java From spring-cloud-vault with Apache License 2.0

5 votes

@Test
public void shouldSupportAppRoleRoleIdProvidedSecretIdAbsent() {

	VaultProperties properties = new VaultProperties();
	properties.getAppRole().setRoleId("foo");

	AppRoleAuthenticationOptions options = ClientAuthenticationFactory
			.getAppRoleAuthenticationOptions(properties);

	assertThat(options.getRoleId()).isInstanceOf(RoleId.provided("foo").getClass());
	assertThat(options.getSecretId()).isInstanceOf(SecretId.absent().getClass());
}

Example #19

Source File: ClientAuthenticationFactoryUnitTests.java From spring-cloud-vault with Apache License 2.0

5 votes

@Test
public void shouldSupportAppRoleRoleIdProvidedSecretIdProvided() {

	VaultProperties properties = new VaultProperties();
	properties.getAppRole().setRoleId("foo");
	properties.getAppRole().setSecretId("bar");

	AppRoleAuthenticationOptions options = ClientAuthenticationFactory
			.getAppRoleAuthenticationOptions(properties);

	assertThat(options.getRoleId()).isInstanceOf(RoleId.provided("foo").getClass());
	assertThat(options.getSecretId())
			.isInstanceOf(SecretId.provided("bar").getClass());
}

Example #20

Source File: ClientAuthenticationFactory.java From spring-cloud-vault with Apache License 2.0

4 votes

static AppRoleAuthenticationOptions getAppRoleAuthenticationOptions(
		VaultProperties vaultProperties) {

	AppRoleProperties appRole = vaultProperties.getAppRole();

	AppRoleAuthenticationOptionsBuilder builder = AppRoleAuthenticationOptions
			.builder().path(appRole.getAppRolePath());

	if (StringUtils.hasText(appRole.getRole())) {
		builder.appRole(appRole.getRole());
	}

	RoleId roleId = getRoleId(vaultProperties, appRole);
	SecretId secretId = getSecretId(vaultProperties, appRole);

	builder.roleId(roleId).secretId(secretId);

	return builder.build();
}

Example #21

Source File: ClientAuthenticationFactory.java From spring-cloud-vault with Apache License 2.0

3 votes

private ClientAuthentication appRoleAuthentication(VaultProperties vaultProperties) {

		AppRoleAuthenticationOptions options = getAppRoleAuthenticationOptions(
				vaultProperties);

		return new AppRoleAuthentication(options, this.restOperations);
	}

Example #22

Source File: HashicorpKeyVaultServiceFactoryUtil.java From tessera with Apache License 2.0

3 votes

ClientAuthentication configureClientAuthentication(KeyVaultConfig keyVaultConfig, EnvironmentVariableProvider envProvider, ClientHttpRequestFactory clientHttpRequestFactory, VaultEndpoint vaultEndpoint) {

        final String roleId = envProvider.getEnv(HASHICORP_ROLE_ID);
        final String secretId = envProvider.getEnv(HASHICORP_SECRET_ID);
        final String authToken = envProvider.getEnv(HASHICORP_TOKEN);

        if(roleId != null && secretId != null) {

            AppRoleAuthenticationOptions appRoleAuthenticationOptions = AppRoleAuthenticationOptions.builder()
                .path(keyVaultConfig.getProperty("approlePath").get())
                .roleId(AppRoleAuthenticationOptions.RoleId.provided(roleId))
                .secretId(AppRoleAuthenticationOptions.SecretId.provided(secretId))
                .build();

            RestOperations restOperations = VaultClients.createRestTemplate(vaultEndpoint, clientHttpRequestFactory);

            return new AppRoleAuthentication(appRoleAuthenticationOptions, restOperations);

        } else if (Objects.isNull(roleId) != Objects.isNull(secretId)) {

            throw new HashicorpCredentialNotSetException("Both " + HASHICORP_ROLE_ID + " and " + HASHICORP_SECRET_ID + " environment variables must be set to use the AppRole authentication method");

        } else if (authToken == null){

            throw new HashicorpCredentialNotSetException("Both " + HASHICORP_ROLE_ID + " and " + HASHICORP_SECRET_ID + " environment variables must be set to use the AppRole authentication method.  Alternatively set " + HASHICORP_TOKEN + " to authenticate using the Token method");
        }

        return new TokenAuthentication(authToken);
    }