(PureBasic) Oracle Cloud Secrets - List Matching Secrets

See more Secrets Examples

List secrets in the Oracle Cloud Secrets matching one or more wildcarded names for app, service, domain, and username.

Note: This example requires Chilkat v10.1.0 or later.

For more information, see https://cknotes.com/chilkat-secrets-class-added-in-version-10-1-0/

Chilkat PureBasic Module Download Chilkat PureBasic Module

IncludeFile "CkJsonObject.pb"
IncludeFile "CkSecrets.pb"

Procedure ChilkatExample()

    ; This example requires the Chilkat API to have been previously unlocked.
    ; See Global Unlock Sample for sample code.

    ; The bootstrap secret will contain the following information:

    ; Private Key PEM

    ; See following examples for setting up a bootstrap secret in memory, 
    ; or in the local manager (Windows Credentials Manager or Apple Keychain)
    ; Setup Bootstrap Secret in Local Manager
    ; Setup Bootstrap Secret in Memory
    bootstrap.i = CkSecrets::ckCreate()
    If bootstrap.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; Set the location of the bootstrap secret.
    ; Can be "local_manager" or "memory", depending on how you setup the bootstrap secret.
    ; ---------------------------------------------------------------------------------------------
    ; If your operating system is NOT Windows or MacOS/iOS, then change "local_manager" to "memory"
    ; You can also, if desired, use "memory" on Windows and MacOS/iOS if your bootstrap secret was previously setup in memory.
    ; ---------------------------------------------------------------------------------------------
    CkSecrets::setCkLocation(bootstrap, "local_manager")

    ; Specify the bootstrap secret to be used.
    bsId.i = CkJsonObject::ckCreate()
    If bsId.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkJsonObject::ckUpdateString(bsId,"appName","oracle_bs")
    CkJsonObject::ckUpdateString(bsId,"service","Example")
    CkJsonObject::ckUpdateString(bsId,"username","Joe")

    ; ----------------------------------------------------
    secrets.i = CkSecrets::ckCreate()
    If secrets.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; Setup for the Oracle Cloud Secrets
    CkSecrets::setCkLocation(secrets, "oracle_cloud")
    success.i = CkSecrets::ckSetBootstrapSecret(secrets,bsId,bootstrap)
    If success = 0
        Debug CkSecrets::ckLastErrorText(secrets)
        CkSecrets::ckDispose(bootstrap)
        CkJsonObject::ckDispose(bsId)
        CkSecrets::ckDispose(secrets)
        ProcedureReturn
    EndIf

    ; Set wildcarded or exact values for appName, service, domain, and username.
    ; Omit any members where anything is allowed to match, or alternatively specify "*" to match anything.
    jsonMatch.i = CkJsonObject::ckCreate()
    If jsonMatch.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkJsonObject::ckUpdateString(jsonMatch,"appName","Test*")
    ; The following lines can be omitted. Not specifying anything for service, domain, or username is the same as "*".
    CkJsonObject::ckUpdateString(jsonMatch,"service","*")
    CkJsonObject::ckUpdateString(jsonMatch,"domain","*")
    CkJsonObject::ckUpdateString(jsonMatch,"username","*")

    ; Oracle Cloud Secrets requires a lot of additional information for each API call.
    ; You'll need to replace the following with your values.
    ; Note: To learn how to find these values, go to an AI such as ChatGPT and ask (for example) "In Oracle Cloud, where do I find my master key OCID?"
    CkJsonObject::ckUpdateString(jsonMatch,"vault_name","ocid1.vault.oc1.us-chicago-1.ijttzlz7aadxo.abxxeljt4gv6tgrar66i5ugffincjmp52oveht3y2zn74rgo6raz6h72qtia")
    CkJsonObject::ckUpdateString(jsonMatch,"region","us-chicago-1")
    CkJsonObject::ckUpdateString(jsonMatch,"tenancy_ocid","ocid1.tenancy.oc1..aaaaaaaaov6vd3xdybgvwblezx2kmgjmo3dvsuljbwpf2m27mk47kkxsa5aa")
    CkJsonObject::ckUpdateString(jsonMatch,"user_ocid","ocid1.user.oc1..aaaaaaaarsn42gwcl5rvahcmt5r6aheek65z54k5nbd6gtclmqn6emkqxajq")
    CkJsonObject::ckUpdateString(jsonMatch,"master_key_ocid","ocid1.key.oc1.us-chicago-1.ijttzlz7aadxo.abxyeljtfbqhl5h2velmojmm6ls77lskmc7ardpekjgw264my6fuyxmhm6xa")

    results.i = CkJsonObject::ckCreate()
    If results.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkJsonObject::setCkEmitCompact(results, 0)

    success = CkSecrets::ckListSecrets(secrets,jsonMatch,results)
    If success = 0
        Debug CkSecrets::ckLastErrorText(secrets)
        CkSecrets::ckDispose(bootstrap)
        CkJsonObject::ckDispose(bsId)
        CkSecrets::ckDispose(secrets)
        CkJsonObject::ckDispose(jsonMatch)
        CkJsonObject::ckDispose(results)
        ProcedureReturn
    EndIf

    Debug CkJsonObject::ckEmit(results)

    ; Sample output:

    ; {
    ;   "secrets": [
    ;     {
    ;       "appName": "Test2",
    ;       "service": "Custom",
    ;       "domain": "Ocean",
    ;       "username": "Starfish",
    ;       "oracleName": "Test2-Custom-Ocean-Starfish"
    ;     },
    ;     {
    ;       "appName": "Test",
    ;       "service": "Something",
    ;       "domain": "Xyz",
    ;       "username": "Abc",
    ;       "oracleName": "Test-Something-Xyz-Abc"
    ;     }
    ;   ]
    ; }

    ; ---------------------------------------------------------------------------------------
    ; Here's sample code for parsing the JSON list of secrets.

    appName.s
    service.s
    domain.s
    username.s
    oracleName.s

    i.i = 0
    numSecrets.i = CkJsonObject::ckSizeOfArray(results,"secrets")
    While i < numSecrets
        CkJsonObject::setCkI(results, i)
        ; Note: appName and domain are optional and may not exist in any given secret.
        appName = CkJsonObject::ckStringOf(results,"secrets[i].appName")
        service = CkJsonObject::ckStringOf(results,"secrets[i].service")
        domain = CkJsonObject::ckStringOf(results,"secrets[i].domain")
        username = CkJsonObject::ckStringOf(results,"secrets[i].username")
        ; Informational field for the raw Oracle secret name.
        oracleName = CkJsonObject::ckStringOf(results,"secrets[i].oracleName")
        i = i + 1
    Wend


    CkSecrets::ckDispose(bootstrap)
    CkJsonObject::ckDispose(bsId)
    CkSecrets::ckDispose(secrets)
    CkJsonObject::ckDispose(jsonMatch)
    CkJsonObject::ckDispose(results)


    ProcedureReturn
EndProcedure