upm

#!/usr/bin/env bash

# ─── CONFIG ────────────────────────────────────────────────────────────────────
DB_NAME="password_store"
DB_USER="password_admin"

# ─── FUNCTIONS ─────────────────────────────────────────────────────────────────

get_db_password() {
  if [ -z "${PGPASSWORD:-}" ]; then
    echo -n "Database password for $DB_USER: " >&2
    read -s PGPASSWORD
    echo >&2
    export PGPASSWORD
  fi
}

generate_random_password() {
  # Generate a 16-character random password (24 bytes base64 encoded gives ~16 chars after filtering)
  openssl rand -base64 12 | tr -dc '[:alnum:]' | cut -c1-16
  # Alternative with more special characters:
  # openssl rand -base64 16 | tr -dc 'a-zA-Z0-9!@#$%^&*()_+' | cut -c1-16
}

get_password_input() {
  while true; do
    echo "Choose password option:"
    echo "1) Enter my own password"
    echo "2) Generate random password"
    read -p "Select option (1/2): " choice

    case $choice in
      1)
        read -s -p "Enter password: " password
        echo
        break
        ;;
      2)
        password=$(generate_random_password)
        echo "Generated password: $password"
        break
        ;;
      *)
        echo "Invalid option. Please try again."
        ;;
    esac
  done
}

store_password() {
  echo "=== Store New Password ==="
  read -p "Service: " SERVICE
  read -p "Username: " USERNAME
  
  get_password_input
  
  # Check if entry exists before inserting
  local COUNT=$(PGPASSWORD="$PGPASSWORD" psql -U "$DB_USER" -d "$DB_NAME" -t -A \
    -c "SELECT COUNT(*) FROM credentials 
        WHERE service = '$(echo "$SERVICE" | sed "s/'/''/g")' 
        AND username = '$(echo "$USERNAME" | sed "s/'/''/g")';")
  
  if [ "$COUNT" -eq "0" ]; then
    PGPASSWORD="$PGPASSWORD" psql -U "$DB_USER" -d "$DB_NAME" <<-SQL
      INSERT INTO credentials (service, username, password)
      VALUES (
        '$(echo "$SERVICE" | sed "s/'/''/g")',
        '$(echo "$USERNAME" | sed "s/'/''/g")',
        '$(echo "$password" | sed "s/'/''/g")'
      );
SQL
  else
    PGPASSWORD="$PGPASSWORD" psql -U "$DB_USER" -d "$DB_NAME" <<-SQL
      UPDATE credentials 
      SET password = '$(echo "$password" | sed "s/'/''/g")'
      WHERE service = '$(echo "$SERVICE" | sed "s/'/''/g")'
        AND username = '$(echo "$USERNAME" | sed "s/'/''/g")';
SQL
  fi
  
  if [ $? -eq 0 ]; then
    echo "✅ Password saved successfully."
  else
    echo "❌ Failed to save password."
    return 1
  fi
}

retrieve_password() {
  echo "=== Retrieve Password ==="
  read -p "Service: " SERVICE
  read -p "Username: " USERNAME
  
  # Fetch from database
  local PASSWORD=$(PGPASSWORD="$PGPASSWORD" psql -U "$DB_USER" -d "$DB_NAME" -t -A \
    -c "SELECT password
        FROM credentials
        WHERE service = '$(echo "$SERVICE" | sed "s/'/''/g")'
        AND username = '$(echo "$USERNAME" | sed "s/'/''/g")';")
  
  if [ -z "$PASSWORD" ]; then
    echo "❌ No entry found for $SERVICE / $USERNAME"
    
    # Show available entries
    echo -e "\nAvailable entries:"
    PGPASSWORD="$PGPASSWORD" psql -U "$DB_USER" -d "$DB_NAME" -c \
      "SELECT service, username FROM credentials ORDER BY service, username;"
    return 1
  fi
  
  echo -n "Password: "
  echo "$PASSWORD"
}

list_entries() {
  echo "=== Available Credentials ==="
  PGPASSWORD="$PGPASSWORD" psql -U "$DB_USER" -d "$DB_NAME" -c \
    "SELECT service, username FROM credentials ORDER BY service, username;"
}

delete_entry() {
  echo "=== Delete Password Entry ==="
  read -p "Service: " SERVICE
  read -p "Username: " USERNAME
  
  PGPASSWORD="$PGPASSWORD" psql -U "$DB_USER" -d "$DB_NAME" -c \
    "DELETE FROM credentials 
     WHERE service = '$(echo "$SERVICE" | sed "s/'/''/g")' 
     AND username = '$(echo "$USERNAME" | sed "s/'/''/g")';"
  
  if [ $? -eq 0 ]; then
    echo "✅ Entry deleted (if it existed)."
  else
    echo "❌ Failed to delete entry."
    return 1
  fi
}

# ─── MAIN PROGRAM ───────────────────────────────────────────────────────────────
get_db_password

while true; do
  echo
  echo "==== Simple Password Manager ===="
  echo "1) Store new password"
  echo "2) Retrieve password"
  echo "3) List all entries"
  echo "4) Delete entry"
  echo "0) Exit"
  echo
  
  read -p "Select option: " OPTION
  echo
  
  case $OPTION in
    1) store_password ;;
    2) retrieve_password ;;
    3) list_entries ;;
    4) delete_entry ;;
    0) echo "Goodbye!"; exit 0 ;;
    *) echo "Invalid option" ;;
  esac
done