chiefy/vaulted

'use strict';
var
  Vaulted = {},
  Promise = require('bluebird'),
  _ = require('lodash'),
  utils = require('../utils');

/**
  * @module keys
  * @extends Vaulted
  * @desc Provides implementation for the Vault Key Rotation APIs
  *
 */

module.exports = function extend(Proto) {
  Vaulted.getKeyStatusEndpoint = _.partial(Proto.validateEndpoint, 'sys/key-status');
  Vaulted.getKeyRotateEndpoint = _.partial(Proto.validateEndpoint, 'sys/rotate');
  Vaulted.getRekeyInitEndpoint = _.partial(Proto.validateEndpoint, 'sys/rekey/init');
  Vaulted.getRekeyUpdateEndpoint = _.partial(Proto.validateEndpoint, 'sys/rekey/update');
  _.extend(Proto, Vaulted);
};

/**
 * @method getKeyStatus
 * @desc Gets the status of the current key
 *
 * @param {string} [options.token] - the authentication token
 * @resolve {Status} Resolves with the vault key status.
 * @reject {Error} An error indicating what went wrong
 * @return {Promise}
 */
Vaulted.getKeyStatus = Promise.method(function getKeyStatus(options) {
  options = options || {};

  return this.getKeyStatusEndpoint()
    .get({
      headers: this.headers,
      _token: options.token
    });
});

/**
 * @method rotateKey
 * @desc Initiate the rotation of the encryption key for data stored in the vault
 *
 * @param {string} [options.token] - the authentication token
 * @resolve success
 * @reject {Error} An error indicating what went wrong
 * @return {Promise}
 */
Vaulted.rotateKey = Promise.method(function rotateKey(options) {
  options = options || {};

  return this.getKeyRotateEndpoint()
    .put({
      headers: this.headers,
      _token: options.token
    });
});

/**
 * @method getRekeyStatus
 * @desc Gets the status of the rekey process.
 *
 * @param {string} [options.token] - the authentication token
 * @resolve {Status} Resolves with the vault rekey status.
 * @reject {Error} An error indicating what went wrong
 * @return {Promise}
 */
Vaulted.getRekeyStatus = Promise.method(function getRekeyStatus(options) {
  options = options || {};

  return this.getRekeyInitEndpoint()
    .get({
      headers: this.headers,
      _token: options.token
    });
});

/**
 * @method startRekey
 * @desc Start the rekey process.
 *
 * @param {number} [options.secret_shares=config['secret_shares']] - number of shares to split the master key into
 * @param {number} [options.secret_threshold=config['secret_threshold']] - number of shares required to reconstruct the master key
 * @param {string} [options.token] - the authentication token
 * @resolve success
 * @reject {Error} An error indicating what went wrong
 * @return {Promise}
 */
Vaulted.startRekey = Promise.method(function startRekey(options) {

  options = _.defaults(options || {}, {
    secret_shares: this.config.get('secret_shares'),
    secret_threshold: this.config.get('secret_threshold')
  });

  return this.getRekeyInitEndpoint()
    .put({
      headers: this.headers,
      body: options,
      _token: options.token
    });
});

/**
 * @method stopRekey
 * @desc Stops/Cancels the current rekey process.
 *
 * @param {string} [options.token] - the authentication token
 * @resolve success
 * @reject {Error} An error indicating what went wrong
 * @return {Promise}
 */
Vaulted.stopRekey = Promise.method(function stopRekey(options) {
  options = options || {};

  return this.getRekeyInitEndpoint()
    .delete({
      headers: this.headers,
      _token: options.token
    });
});

/**
 * @method updateRekey
 * @desc Sends the next key share to continue the rekey process.
 *
 * @param {string} [options.token] - the authentication token
 * @param {Object} options.body.key - A single master share key
 * @param {string} options.body.nonce - The nonce from the current re-key operation
 * @resolve {Vaulted} Resolves with current instance of Vaulted after capturing the keys and token
 * @reject {Error} An error indicating what went wrong
 * @return {Promise}
 */
Vaulted.updateRekey = Promise.method(function updateRekey(options) {
  options = utils.setDefaults(options);

  return this.getRekeyUpdateEndpoint()
    .put({
      headers: this.headers,
      body: options.body,
      _token: options.token
    });

});