74 lines
1.9 KiB
Go
74 lines
1.9 KiB
Go
package wincred
|
|
|
|
import (
|
|
"bytes"
|
|
"strings"
|
|
|
|
winc "github.com/danieljoos/wincred"
|
|
"github.com/docker/docker-credential-helpers/credentials"
|
|
)
|
|
|
|
// Wincred handles secrets using the Windows credential service.
|
|
type Wincred struct{}
|
|
|
|
// Add adds new credentials to the windows credentials manager.
|
|
func (h Wincred) Add(creds *credentials.Credentials) error {
|
|
g := winc.NewGenericCredential(creds.ServerURL)
|
|
g.UserName = creds.Username
|
|
g.CredentialBlob = []byte(creds.Secret)
|
|
g.Persist = winc.PersistLocalMachine
|
|
g.Attributes = []winc.CredentialAttribute{{"label", []byte(credentials.CredsLabel)}}
|
|
|
|
return g.Write()
|
|
}
|
|
|
|
// Delete removes credentials from the windows credentials manager.
|
|
func (h Wincred) Delete(serverURL string) error {
|
|
g, err := winc.GetGenericCredential(serverURL)
|
|
if g == nil {
|
|
return nil
|
|
}
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return g.Delete()
|
|
}
|
|
|
|
// Get retrieves credentials from the windows credentials manager.
|
|
func (h Wincred) Get(serverURL string) (string, string, error) {
|
|
g, _ := winc.GetGenericCredential(serverURL)
|
|
if g == nil {
|
|
return "", "", credentials.NewErrCredentialsNotFound()
|
|
}
|
|
for _, attr := range g.Attributes {
|
|
if strings.Compare(attr.Keyword, "label") == 0 &&
|
|
bytes.Compare(attr.Value, []byte(credentials.CredsLabel)) == 0 {
|
|
|
|
return g.UserName, string(g.CredentialBlob), nil
|
|
}
|
|
}
|
|
return "", "", credentials.NewErrCredentialsNotFound()
|
|
}
|
|
|
|
// List returns the stored URLs and corresponding usernames for a given credentials label.
|
|
func (h Wincred) List() (map[string]string, error) {
|
|
creds, err := winc.List()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
resp := make(map[string]string)
|
|
for i := range creds {
|
|
attrs := creds[i].Attributes
|
|
for _, attr := range attrs {
|
|
if strings.Compare(attr.Keyword, "label") == 0 &&
|
|
bytes.Compare(attr.Value, []byte(credentials.CredsLabel)) == 0 {
|
|
|
|
resp[creds[i].TargetName] = creds[i].UserName
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
return resp, nil
|
|
}
|