coop-cloud/rauthy
1
0
Fork 0
Code Issues 2 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix: don't regenerate enc_keys if they already exist, require --local #21

Open
dannygroenewegen wants to merge 1 commits from fix/enc-keys-idempotent-local into main
pull from: fix/enc-keys-idempotent-local
merge into: :main
Conversation 0 Commits 1 Files Changed 1
+14
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
abra.sh
+14
View File
@@ -23,6 +23,20 @@ generate_bootstrap_admin_password() {
}
generate_enc_keys() {
if [ "$TARGET" != "local" ]; then
echo "generate_enc_keys must run with --local" >&2
echo "Run: abra app cmd $APP_NAME --local generate_enc_keys" >&2
exit 1
fi
local EXISTING
EXISTING=$(abra app secret list -m "$APP_NAME" 2>/dev/null | jq -r '.[] | select(.["created on server"] == "true") | .name')
if echo "$EXISTING" | grep -qx -e "enc_keys_a" -e "enc_keys_b"; then
echo "enc_keys_a/enc_keys_b already exist on the server"
exit
fi
KEY_A="$(openssl rand -base64 32)"
KEY_B="$(openssl rand -base64 32)"
abra app secret insert "$APP_NAME" enc_keys_a a1 "$KEY_A" --chaos