Vault Token Helper

vault-token-helper.rb

#!/usr/bin/env ruby

require 'json'
require 'date'

unless ENV['VAULT_ADDR']
  STDERR.puts "No VAULT_ADDR environment variable set. Set it and run me again!"
  exit 100
end

begin
  tokens = JSON.parse(File.read("#{ENV['HOME']}/.vault_tokens"))
rescue Errno::ENOENT => e
  # file doesn't exist so create a blank hash for it
  tokens = {}
end

write = true

case ARGV.first
when 'get'
  print tokens[ENV['VAULT_ADDR']] if tokens[ENV['VAULT_ADDR']]
  write = false
when 'store'
  tokens[ENV['VAULT_ADDR']] = STDIN.read
when 'erase'
  tokens.delete!(ENV['VAULT_ADDR'])
end

log = "#{ENV['HOME']}/.vault-token-helper.log"
begin
  log_size = File.size(log)
rescue Errno::ENOENT => e
  log_size = 0
end
File.write(log, "#{DateTime.now()}: #{ARGV.first} #{ENV['VAULT_ADDR']} #{tokens.key?(ENV['VAULT_ADDR'])}\n", log_size || 0, mode: 'a')

if write
  File.open("#{ENV['HOME']}/.vault_tokens", 'w') { |file| file.write(tokens.to_json) }
end