backend.go

package keycloak

import (
	"context"
	"fmt"
	"strings"
	"sync"

	"github.com/Serviceware/vault-plugin-secrets-keycloak/keycloak"
	"github.com/hashicorp/vault/sdk/framework"
	"github.com/hashicorp/vault/sdk/logical"

	log "github.com/hashicorp/go-hclog"
)

type backend struct {
	*framework.Backend

	KeycloakServiceFactory keycloak.ServiceFactoryFunc

	logger log.Logger

	jwtMutex sync.Mutex
	jwt      map[ConnectionConfig]*keycloak.JWT
}

var _ logical.Factory = Factory

// Factory configures and returns Keycloak backends
func Factory(ctx context.Context, conf *logical.BackendConfig) (logical.Backend, error) {
	b, err := newBackend(conf)
	if err != nil {
		return nil, err
	}

	if conf == nil {
		return nil, fmt.Errorf("configuration passed into backend is nil")
	}

	if err := b.Setup(ctx, conf); err != nil {
		return nil, err
	}

	return b, nil
}

func newBackend(conf *logical.BackendConfig) (*backend, error) {

	b := &backend{
		jwt: make(map[ConnectionConfig]*keycloak.JWT),
	}

	b.Backend = &framework.Backend{
		Help:        strings.TrimSpace(keycloakHelp),
		BackendType: logical.TypeLogical,
		PathsSpecial: &logical.Paths{
			SealWrapStorage: []string{
				"config/connection",
			},
		},

		Paths: framework.PathAppend(
			b.paths(),
		),
	}
	b.KeycloakServiceFactory = keycloak.NewGocloakClient
	b.logger = conf.Logger
	return b, nil
}

func (b *backend) paths() []*framework.Path {
	return []*framework.Path{
		pathConfigConnection(b),
		pathConfigConnectionOfRealm(b),
		pathClientSecretDeprecated(b),
		pathClientSecret(b),
		pathRealmClientSecret(b),
		pathRealmClientOptionalSecret(b),
	}
}

const keycloakHelp = `
The Keycloak backend is retrieves secrets from keycloak.
`