generator-team-ignite-tour/generators/product-service/templates/src/hapi-azure-key-vault.js

Generates a demo environment in Azure DevOps

const KeyVault = require("azure-keyvault");
const Joi = require("joi");
const AuthenticationContext = require("adal-node").AuthenticationContext;

const optionsValidation = Joi.object({
  id: Joi.string(),
  secret: Joi.string(),
  uri: Joi.string()
});

const plugin = {
  pkg: {
    version: "1.0.0",
    name: "hapi-azure-key-vault"
  },
  async register(server, pluginOptions) {
    const { id, secret, uri } = await optionsValidation.validate(pluginOptions);

    const authenticator = function(challenge, callback) {
      // Create a new authentication context.
      const context = new AuthenticationContext(challenge.authorization);

      // Use the context to acquire an authentication token.
      return context.acquireTokenWithClientCredentials(
        challenge.resource,
        id,
        secret,
        function(err, tokenResponse) {
          if (err) throw err;
          // Calculate the value to be set in the request's Authorization header and resume the call.
          const authorizationValue =
            tokenResponse.tokenType + " " + tokenResponse.accessToken;

          return callback(null, authorizationValue);
        }
      );
    };

    const credentials = new KeyVault.KeyVaultCredentials(authenticator);

    const client = new KeyVault.KeyVaultClient(credentials);

    const getAll = async function() {
      const secrets = await client.getSecrets(uri);

      const response = await Promise.all(
        secrets.map(item => {
          const secretName = item.id.split("/")[4];
          return client
            .getSecretVersions(uri, secretName)
            .then(function(version) {
              return client.getSecret(
                uri,
                secretName,
                version[version.length - 1].id.split("/")[5]
              );
            });
        })
      );

      const keys = response.reduce((acc, item) => {
        acc[item.id.split("/")[4]] = item.value;
        return acc;
      }, {});

      return keys;
    };

    const secrets = await getAll();

    server.log(
      "azure-key-vault",
      `Got secrets for ${Object.keys(secrets).join(" | ")}`
    );

    const expose = {
      get: client.getSecret.bind(client, uri),
      set: client.setSecret.bind(client, uri),
      getAll,
      secrets
    };

    server.decorate("server", "keyvault", expose);
    server.decorate("request", "keyvault", expose);
  }
};

module.exports = plugin;