vault.lease — amperity/vault-clj 0.7.0

Storage logic for Vault secrets and their associated leases.

auth-lease clj

(auth-lease auth)

Adds extra fields and sanitizes an authentication lease.

expired? clj

(expired? lease)

Determines whether the lease has expired.

expires-within? clj

(expires-within? lease duration)

Determines whether the lease expires within the given number of seconds.

lease-watcher clj

(lease-watcher path watch-fn)

Constructs a watch function which will call the given function with the secret info at a given path when the lease changes.

leased? clj

(leased? secret)

Determines whether the secret is leased.

list-leases clj

(list-leases store)

Returns a list of lease information currently stored.

lookup clj

(lookup store path-or-id)

Looks up the given secret path in the store by path or lease-id. Returns the lease data, if present.

new-store clj

(new-store)

Creates a new stateful store for leased secrets.

This takes the form of a reference map of secret paths to lease data, including the secret data and any registered callbacks.

remove-lease! clj

(remove-lease! store lease-id)

Removes a lease from the store by id.

remove-path! clj

(remove-path! store path)

Removes a lease from the store by path.

renewable-leases clj

(renewable-leases store window)

Returns a sequence of leases which are within window seconds of expiring, are renewable, and are marked for renewal.

renewable? clj

(renewable? secret)

Determines whether a leased lease is renewable.

rotatable-leases clj

(rotatable-leases store window)

Returns a sequence of leases which are within window seconds of expiring, are not renewable, and are marked for rotation.

secret-lease clj

(secret-lease info)

Adds extra fields and cleans up the secret lease info.

sweep! clj

(sweep! store)

Removes expired leases from the store.

update! clj

(update! store info)

Updates secret lease information in the store.