wooga / atlas-build-unity
82%
master: 78%

LAST BUILD BRANCH: PR-154
DEFAULT BRANCH: master
Repo Added
Files 71
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH PR-59
branch: PR-59
CHANGE BRANCH
x

3

push

jenkins

Add secret handling base types

Description
===========

This patch brings in base type for future secret handling. These types
are planned as a base API for further detailed implementation in future
patches / plugin extensions.

We have three basic sets of types

* _secrets_ - a wrapper type that holds a secret value
* _resolver_ - a basic object that can resolve a secret
* _secrets_ a map like structure to hold secrets in memory

Secrets
-------

The exposed type is an interface with a pretty simple API

```groovy
interface Secret<T> {
    T getSecretValue()
}
```

There is one base implementation available (`DefaultSecret`) and two concrete
implementations for secret file (`byte[]`) and secret text (`String`).
The concrete classes are only added for completion and are used in some
unit tests.

A second extended form of secret is the `EncryptedSecret`.

```groovy
interface EncryptedSecret<T> extends Secret<T> {
    T decryptedSecretValue(SecretKeySpec key)
    Secret<T> decryptSecret(SecretKeySpec key)
}
```

Objects of type `EncryptedSecret` should encrypt the secret value on
creation. The type contains a two API's to either convert this type back
to an unencrypted secret or to return the enclosed secret value
directly. To make implementation easier, this patch also adds an
`abstract` base class for `EncryptedSecret` objects calles
`AbstractEncryptedSecret`.
This class contains helper methods to encode and decode the secret value
with a passed `AES` key. The implementor needs to provide two
implementations:

```groovy
abstract T decryptedSecretValue(SecretKeySpec key)
abstract protected T encryptSecretValue(T secret, SecretKeySpec key)
```

Two concrete types are also provided for the `EncryptedSecret` called
`EncryptedSecretFile` and `EncryptedSecretText`.

Resolver
--------

The `SecretResolver` interface contains only one small API

```groovy
interface SecretResolver<T> {
    Secret<T> resolve(String secretId)
}
```
This patch provides a default... (continued)

861 of 1045 relevant lines covered (82.39%)

1.68 hits per line

Relevant lines Covered
1045 RELEVANT LINES 861 COVERED LINES
1.68 HITS PER LINE
Source Files on PR-59

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
3 PR-59 Add secret handling base types Description =========== This patch brings in base type for future secret handling. These types are planned as a base API for further detailed implementation in future patches / plugin extensions. We have three bas... push jenkins pending completion  
2 PR-59 Add secret handling base types Description =========== This patch brings in base type for future secret handling. These types are planned as a base API for further detailed implementation in future patches / plugin extensions. We have three bas... push jenkins pending completion  
1 PR-59 Add secret handling base types Description =========== This patch brings in base type for future secret handling. These types are planned as a base API for further detailed implementation in future patches / plugin extensions. We have three bas... push jenkins pending completion  
See All Builds (473)