Cryptr microclient

decryptr.sh

#!/bin/bash

secret_path="$1"
secret_field="$2"

set -e

if [[ -z "$secret_field" ]]; then
    secret_field="data"
fi

content_json=$(vault read -format=json "$secret_path")

if echo "$content_json" | jq -e ".data.$secret_field" &> /dev/null; then
    field_content=$(echo "$content_json" | jq -r ".data.$secret_field")
else
    >&2 echo "$secret_path has no field named $secret_field"
    exit 1
fi

if [[ "$field_content" == "data:;base64,"* ]]; then
    echo "$field_content" | sed 's/data:;base64,//' | base64 -i - -D
else
    echo "$field_content"
fi