vault

type Client struct {
	*vault.Client
	// contains filtered or unexported fields
}

type ClientOption func(*Client)

type Config struct {
	Address string `yaml:"address"`
	Token   string `yaml:"token"`
}

type Transit interface {
	Enable(ctx context.Context) error
	ListKeys(ctx context.Context) ([]string, error)
	ReadKeyRing(ctx context.Context, key string) (TransitKey, error)
	AddKeyRing(ctx context.Context, key string) error
	DeleteKeyRing(ctx context.Context, key string) error
	TransitKeyRing(key string) TransitKeyRing
}

type TransitKey struct {
	Name                 string              `json:"name"`
	Type                 string              `json:"type"`
	Keys                 map[any]interface{} `json:"keys"`
	MinDecryptionVersion int                 `json:"min_decrytion_version"`
	MinEncryptionVersion int                 `json:"min_encryption_version"`
	LatestVersion        int                 `json:"latest_version"`
	DeletionAllowed      bool                `json:"deletion_allowed"`
	Derived              bool                `json:"derived"`
	Exportable           bool                `json:"exportable"`
	AllowPlaintextBackup bool                `json:"allow_plaintext_backup"`
	SupportsEncryption   bool                `json:"supports_encryption"`
	SupportsDecryption   bool                `json:"supports_decryption"`
	SupportsDerivation   bool                `json:"supports_derivation"`
	SupportsSigning      bool                `json:"supports_signing"`
	AutoRotatePeriod     int                 `json:"auto_rotate_period"`
	ImportedKey          bool                `json:"imported_key"`
	MinAvailableVersion  int                 `json:"min_available_version"`
}

type TransitKeyRing interface {
	RotateEncryptionKey(ctx context.Context) error
	SetAutoRotateEncryptionKey(ctx context.Context, duration time.Duration) error
	Encrypt(ctx context.Context, data any) (string, error)
	Decrypt(ctx context.Context, cipherText string, result any) error
}