Support ANSIBLE_VAULT_PASSWORD_FILE environment variable about ansible-vault-editor-idea-plugin HOT 2 CLOSED

wheelerlaw commented on August 27, 2024

Support ANSIBLE_VAULT_PASSWORD_FILE environment variable

from ansible-vault-editor-idea-plugin.

Comments (2)

wheelerlaw commented on August 27, 2024 1

So I gave it a shot. I don't really know how to do IntelliJ Plugin development so I don't know how to test this out, and this is pretty sloppy code since there is a bunch of duplication, but it's a first stab at it.

The workflow is as follows:

Check for environment variable.
- If null, check for saved password and try that.
  - If saved variable is null or does not work, prompt for password
- If not null, try password in environment variable.
  - If environment variable does not work, check for saved password and try that
    - If saved variable is null or does not work, prompt for password

    override fun actionPerformed(e: AnActionEvent) {
        val document = e.getData(PlatformDataKeys.EDITOR)?.document ?: return
        val vault = FileVault(document)

        val password = System.getenv("ANSIBLE_VAULT_PASSWORD_FILE")
        if (password == null) {
            trySavedPassword(vault)
        } else {
            try {
                VaultEditorDialog(
                    vault.getDecryptedData(password),
                    password.toCharArray(),
                    vault
                ).showAndGet()
            } catch (e: IOException) {
                trySavedPassword(vault)
            }
        }
    }
    
    private fun trySavedPassword(vault: FileVault) {
        val password = getPassword(vault)
        if (password == null) {
            VaultPasswordDialog(vault).showAndGet()
        } else {
            try {
                VaultEditorDialog(
                    vault.getDecryptedData(password),
                    password.toCharArray(),
                    vault
                ).showAndGet()
            } catch (e: IOException) {
                removePassword(vault)
                VaultPasswordDialog(vault).showAndGet()
            }
        }
    }