OpenC3/cosmos

# encoding: ascii-8bit

# Copyright 2024 OpenC3, Inc.
# All Rights Reserved.
#
# This program is free software; you can modify and/or redistribute it
# under the terms of the GNU Affero General Public License
# as published by the Free Software Foundation; version 3 with
# attribution addendums as found in the LICENSE.txt
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Affero General Public License for more details.
#
# This file may also be used under the terms of a commercial license
# if purchased from OpenC3, Inc.

require 'openc3/utilities/secrets'

class SecretsController < ApplicationController
  def index
    return unless authorization('admin')
    render json: OpenC3::Secrets.getClient.keys(scope: params[:scope])
  end

  def create
    return unless authorization('admin')

    file = params[:file]
    if file
      value = file.tempfile.read
    else
      value = params[:value]
    end

    OpenC3::Secrets.getClient.set(params[:key], value, scope: params[:scope])
    OpenC3::Logger.info("Secret set: #{params[:key]}", scope: params[:scope], user: username())
    head :ok
  rescue => e
    logger.error(e.formatted)
    render json: { status: 'error', message: e.message }, status: 500
  end

  def destroy
    return unless authorization('admin')
    OpenC3::Secrets.getClient.delete(params['key'], scope: params[:scope])
    OpenC3::Logger.info("Secret deleted: #{params[:key]}", scope: params[:scope], user: username())
    head :ok
  rescue => e
    logger.error(e.formatted)
    render json: { status: 'error', message: e.message }, status: 500
  end
end