kv1.go

package vaultkv

import (
	"fmt"
	"net/url"
	"reflect"
)

//Get retrieves the secret at the given path and unmarshals it into the given
//output object using the semantics of encoding/json.Unmarshal. If the object
//is nil, an unmarshal will not be attempted (this can be used to check for
//existence). If the object could not be unmarshalled into, the resultant error
//is returned. Example path would be /secret/foo, if Key/Value backend were
//mounted at "/secret". The Vault must be unsealed and initialized for this
//endpoint to work. No assumptions are made about the mounting point of your
//Key/Value backend.
func (v *Client) Get(path string, output interface{}) error {
	if output != nil &&
		reflect.ValueOf(output).Kind() != reflect.Ptr {
		return fmt.Errorf("Get output target must be a pointer if non-nil")
	}

	err := v.doRequest("GET", path, nil, &vaultResponse{Data: output})
	if err != nil {
		return err
	}

	return err
}

//List returns the list of paths nested directly under the given path. If this
//is not a "directory" for any paths, then ErrNotFound is returned. In the list
//of paths returned on success, if a path ends with a slash, then it is also a
//"directory". The Vault must be unsealed and initialized for this endpoint to
//work. No assumptions are made about the mounting point of your Key/Value
//backend.
func (v *Client) List(path string) ([]string, error) {
	ret := []string{}

	query := url.Values{}
	query.Add("list", "true")
	err := v.doRequest("GET", path, query, &vaultResponse{
		Data: &struct {
			Keys *[]string `json:"keys"`
		}{
			Keys: &ret,
		},
	})
	if err != nil {
		return nil, err
	}

	return ret, err
}

//Set puts the values in the given object at the given path. The given object
//must marshal into a JSON hash from string->anything (see: a golang map or
//struct). The Vault must be unsealed and initialized for this endpoint to work.
//No assumptions are made about the mounting point of your Key/Value backend.
func (v *Client) Set(path string, values interface{}) error {
	return v.doRequest("PUT", path, &values, nil)
}

//Delete attempts to delete the value at the specified path. No error is
//returned if there is already no value at the given path.
func (v *Client) Delete(path string) error {
	return v.doRequest("DELETE", path, nil, nil)
}