Refactoring Code

2025-11-10 12:40:35 +02:00
parent 5a666e6f60
commit fbaa5780d9
39 changed files with 1559 additions and 1223 deletions
@@ -0,0 +1,32 @@
+wxi-ssh-keys-clean(){
+  wxi-header "SSH / Keys / Clean"
+  wxi-restricted
+
+  if [[ ! -z $1 ]]
+  then
+    if [[ -f "$HOME/.ssh/keys/$1" ]]
+    then
+      rm "$HOME/.ssh/keys/$1" &> /dev/null
+      rm "$HOME/.ssh/keys/$1.pub" &> /dev/null
+      rm "$HOME/.ssh/keys/$1.sig" &> /dev/null
+    fi
+  else
+    wx-ssh-keys-clean $ORG
+
+    if [[ $USERNAME == "cwchristerw" ]]
+    then
+      wx-ssh-keys-clean warengroup
+    fi
+
+    for file in ~/.ssh/keys/*
+    do
+      VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/keys/$(basename "$file" .pub) -X GET --header "X-Vault-Token: $VAULT_TOKEN")
+      if [[ $VAULT_STATUS -eq 200 ]]
+      then
+        rm "$file" &> /dev/null
+      fi
+    done
+  fi
+
+  wxi-footer
+}
@@ -0,0 +1,13 @@
+wxi-ssh-keys-generate(){
+  wxi-header "SSH / Keys / Generate"
+  wxi-restricted
+
+  if [[ ! -z $1 ]]
+  then
+    if [[ ! -f "$HOME/.ssh/keys/$1" ]]
+    then
+      ssh-keygen -t ed25519 -f $HOME/.ssh/keys/$1 -q -N "" -C "$USERNAME" &> /dev/null
+    fi
+  fi
+  wxi-footer
+}
@@ -0,0 +1,18 @@
+wxi-ssh-keys-retrieve(){
+  wxi-header "SSH / Keys / Retrieve"
+  wxi-restricted
+
+  if [[ ! -z $1 ]]
+  then
+    VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/keys/$1 -X GET --header "X-Vault-Token: $VAULT_TOKEN")
+    if [[ $VAULT_STATUS -eq 200 ]]
+    then
+      echo $(curl https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/keys/$1 -X GET --header "X-Vault-Token: $VAULT_TOKEN" -s | jq -r '.data.data.private') | base64 -d > ~/.ssh/keys/$1 2>&1
+      chmod 700 ~/.ssh/keys/$1
+      echo $(curl https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/keys/$1 -X GET --header "X-Vault-Token: $VAULT_TOKEN" -s | jq -r '.data.data.public') | base64 -d > ~/.ssh/keys/$1.pub 2>&1
+      chmod 700 ~/.ssh/keys/$1.pub
+    fi
+  fi
+
+  wxi-footer
+}
@@ -0,0 +1,13 @@
+wxi-ssh-keys-save(){
+  wxi-header "SSH / Keys / Save"
+  wxi-restricted
+
+  if [[ ! -z $1 ]]
+  then
+    if [[ -f "$HOME/.ssh/keys/$1" ]]
+    then
+      curl https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/keys/$1 -X POST --header "X-Vault-Token: $VAULT_TOKEN" -d "{ \"data\": { \"private\": \"$(cat ~/.ssh/keys/$1 | base64 -w 0)\", \"public\": \"$(cat ~/.ssh/keys/$1.pub | base64 -w 0)\" } }" -s &> /dev/null
+    fi
+  fi
+  wxi-footer
+}
@@ -0,0 +1,27 @@
+wxi-ssh-keys-sign(){
+  wxi-header "SSH / Keys / Sign"
+  wxi-restricted
+
+  wx-ssh-keys-sign-create $ORG sysadmin 3600
+
+  if [[ $USERNAME == "cwchristerw" ]]
+  then
+    wx-ssh-keys-sign-create warengroup sysadmin 3600
+  fi
+  wxi-footer
+}
+
+wxi-ssh-keys-sign-create(){
+  NAME=$1
+  ROLE=$2
+  PRINCIPALS=$2
+  TTL=$3
+
+  wxi-ssh-keys-generate $NAME &> /dev/null
+
+  if [[ -f "$HOME/.ssh/keys/$NAME" ]]
+  then
+    wxi-content text "$NAME/$ROLE"
+    echo $(curl https://$VAULT_DOMAIN/v1/ssh/sign/$ROLE -X POST --header "X-Vault-Token: $VAULT_TOKEN" -d "{ \"public_key\": \"$(cat $HOME/.ssh/keys/$NAME.pub)\", \"valid_principals\": \"$PRINCIPALS,$USERNAME\", \"ttl\": \"$TTL\" }" -s | jq -r '.data.signed_key') > ~/.ssh/keys/$NAME.sig 2>&1
+  fi
+}
@@ -0,0 +1,14 @@
+wxi-ssh-keys-sync(){
+  wxi-header "SSH / Keys / Sync"
+  wxi-restricted
+  VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/cli/metadata/$USERNAME/settings/ssh/keys -X LIST --header "X-Vault-Token: $VAULT_TOKEN")
+  if [[ $VAULT_STATUS -eq 200 ]]
+  then
+    for name in $(curl https://$VAULT_DOMAIN/v1/cli/metadata/$USERNAME/settings/ssh/keys -X LIST --header "X-Vault-Token: $VAULT_TOKEN" -s | jq -r '.data.keys | @sh' | tr -d \')
+    do
+      echo $name
+      wx-ssh-keys-retrieve $name --multiple
+    done
+  fi
+  wxi-footer
+}