33 lines
1 KiB
Ruby
33 lines
1 KiB
Ruby
class Internal::SecretsController < Internal::ApplicationController
|
|
layout "internal"
|
|
|
|
before_action :validate_settable_secret, only: [:update]
|
|
after_action only: [:update] do
|
|
Audit::Logger.log(:internal, current_user, params.dup)
|
|
end
|
|
|
|
def index
|
|
@vault_enabled = AppSecrets.vault_enabled?
|
|
@secrets = AppSecrets::SETTABLE_SECRETS.map do |key|
|
|
secret_value = AppSecrets[key]
|
|
secret_value = secret_value.present? ? "#{secret_value.first(8)}******" : "Not In Vault"
|
|
[key, secret_value]
|
|
end
|
|
end
|
|
|
|
def update
|
|
AppSecrets[params[:key_name]] = params[:key_value]
|
|
|
|
flash[:success] = "Secret #{params[:key_name]} was successfully updated in Vault."
|
|
redirect_to internal_secrets_path
|
|
end
|
|
|
|
private
|
|
|
|
def validate_settable_secret
|
|
update_param = params.permit(*AppSecrets::SETTABLE_SECRETS)
|
|
params[:key_name], params[:key_value] = update_param.to_h.to_a.first
|
|
|
|
bad_request unless update_param.present? && params[:key_name].is_a?(String) && params[:key_value].is_a?(String)
|
|
end
|
|
end
|