Jmaa
Overview Repositories
34
 Projects Packages Public Activity Starred Repositories
5

secret-loader (0.1.9)

Published 2024-07-14 22:31:19 +00:00 by Jmaa in Jmaa/secret_loader

Installation

pip install --index-url  secret-loader

About this package

System for loading secrets from a variety of sources.

Secret Loader System.

System for loading secrets from a variety of sources.

Usage:

import secret_loader
secrets = secret_loader.SecretLoader(env_key_prefix = 'MYAPP')

db_username = secrets.load_or_fail('DATABASE_USERNAME')
db_password = secrets.load_or_fail('DATABASE_PASSWORD')

Secret loading order:

  1. Hardcoded values. This is purely for debugging, prototyping, and for configuring below options.
  2. Files pointed to by environment variables. Docker friendly.
  3. Secrets folder. Also Docker friendly.
  4. Pass: the standard unix password manager. Most suited for personal usage; very unsuited for server environments. Requires pass installed locally, and configuration of the PASS_STORE_SUBFOLDER through one of the above methods.
  5. Vault instance if configured. Suited for production environments.

TODO

  • Avoid leakage to swap files.
  • Wrap secrets in intelligent strings:
    • Instead of returning None on unloaded, return UnknownSecret, that produce error when formatted.
    • repr(secret) should not include contents, but only the secret and how it was loaded.
    • Methods on Secret should be kept minimal.
  • Vault:
    • Ensure vault code path works.
    • Document usage and requirements.

License

Copyright 2024 Jon Michael Aanes. All rights reserved.

License

Copyright (c) 2024 Jon Michael Aanes

All rights reserved.

Requirements

Requires Python: >=3.9
Details
PyPI
Jmaa/secret_loader
2024-07-14 22:31:19 +00:00
37
Jon Michael Aanes
Project Site
8.4 KiB
Assets (2)
secret_loader-0.1.9-py3-none-any.whl 4.6 KiB
secret_loader-0.1.9.tar.gz 3.8 KiB
Versions (23) View all
0.1.25 2024-11-01
0.1.24 2024-10-31
0.1.23 2024-10-27
0.1.22 2024-10-26
0.1.21 2024-10-20
Issues