Dark-Alex-17/coyote
1
0
Fork 0
Code Issues Pull Requests Actions 9 Packages Projects Releases Wiki Activity

fix: use unique values for the secrets round trip verification

Browse Source
This commit is contained in:
Alex Clarke
2026-06-03 15:04:50 -06:00
parent 1dde7f4442
commit eeaeb42c9a
1 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/vault/mod.rs
+5 -4
View File
@@ -16,6 +16,7 @@ use gman::providers::local::LocalProvider;
use inquire::{Password, PasswordDisplayMode, required}; use inquire::{Password, PasswordDisplayMode, required};
use std::sync::{Arc, LazyLock}; use std::sync::{Arc, LazyLock};
use tokio::runtime::Handle; use tokio::runtime::Handle;
use uuid::Uuid;
pub static SECRET_RE: LazyLock<Regex> = LazyLock::new(|| Regex::new(r"\{\{(.+)}}").unwrap()); pub static SECRET_RE: LazyLock<Regex> = LazyLock::new(|| Regex::new(r"\{\{(.+)}}").unwrap());
@@ -175,22 +176,22 @@ impl Vault {
} }
pub fn validate_round_trip(&self) -> Result<()> { pub fn validate_round_trip(&self) -> Result<()> {
const PROBE_KEY: &str = "__coyote_setup_probe__";
const PROBE_VALUE: &str = "ok"; const PROBE_VALUE: &str = "ok";
let probe_key = format!("__coyote_setup_probe_{}__", Uuid::new_v4().simple());
let h = Handle::current(); let h = Handle::current();
let result: Result<()> = tokio::task::block_in_place(|| { let result: Result<()> = tokio::task::block_in_place(|| {
h.block_on(async { h.block_on(async {
self.provider_ref() self.provider_ref()
.set_secret(PROBE_KEY, PROBE_VALUE) .set_secret(&probe_key, PROBE_VALUE)
.await .await
.with_context(|| "vault write probe failed")?; .with_context(|| "vault write probe failed")?;
let got = self let got = self
.provider_ref() .provider_ref()
.get_secret(PROBE_KEY) .get_secret(&probe_key)
.await .await
.with_context(|| "vault read probe failed")?; .with_context(|| "vault read probe failed")?;
let _ = self.provider_ref().delete_secret(PROBE_KEY).await; let _ = self.provider_ref().delete_secret(&probe_key).await;
if got != PROBE_VALUE { if got != PROBE_VALUE {
bail!("vault read probe returned an unexpected value"); bail!("vault read probe returned an unexpected value");
} }