diff --git a/hvac_handler.py b/hvac_handler.py index 5784555..8db9769 100644 --- a/hvac_handler.py +++ b/hvac_handler.py @@ -1,18 +1,14 @@ -import base64 import hvac +import base64 +import os - -client = hvac.Client( - url='http://127.0.0.1:8200', - token='root' -) +HVAC_AGENT_URL = os.getenv("HVAC_AGENT_URL","http://vault-agent:8201") +client = hvac.Client(url=HVAC_AGENT_URL) def decrypt_token(ciphertext: str) -> str: - response = client.secrets.transit.decrypt_data( - name='push-tokens', - ciphertext=ciphertext - ) - plaintext_b64 = response['data']['plaintext'] - return base64.b64decode(plaintext_b64).decode() - - + response = client.secrets.transit.decrypt_data( + name="push-tokens", + ciphertext=ciphertext + ) + plaintext_b64 = response["data"]["plaintext"] + return base64.b64decode(plaintext_b64).decode()