cyberark/secretless-broker

version: 2
services:
  dropbox-basic:
    connector: generic_http
    listenOn: tcp://0.0.0.0:8071
    credentials:
      app_key:
        from: keychain
        get: service#dropbox/app-key
      app_secret:
        from: keychain
        get: service#dropbox/app-secret
    config:
      headers:
        Authorization: Basic {{ printf "%s:%s" .app_key .app_secret | base64 }}
      forceSSL: true
      authenticateURLsMatching:
        - ^http[s]*
  dropbox-oauth2:
    connector: generic_http
    listenOn: tcp://0.0.0.0:8081
    credentials:
      token:
        from: keychain
        get: service#dropbox/token
    config:
      headers:
        Authorization: Bearer {{ .token }}
      forceSSL: true
      authenticateURLsMatching:
        - ^http[s]*
  dropbox-api-arg:
    connector: generic_http
    listenOn: tcp://0.0.0.0:8091
    credentials:
      token:
        from: keychain
        get: service#dropbox/token
      api_arg:
        from: keychain
        get: service#dropbox/api-arg
    config:
      headers:
        Authorization: Bearer {{ .token }}
        Dropbox-API-Arg: "{{ .api_arg }}"
      forceSSL: true
      authenticateURLsMatching:
        - ^http[s]*