Skip to content

Read access token from a secure file. #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
kousu wants to merge 2 commits into
base: master
Choose a base branch
from
Open

Read access token from a secure file. #4

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
bf4a6fc
Read access token from a secure file.
Jun 1, 2018
55b0838
Update docs
Jun 2, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 5 additions & 3 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,9 +9,11 @@ My use case: *Connect to home server that is on a dynamic IP via a fixed domain

1. Generate [Personal Access Token](https://cloud.digitalocean.com/settings/applications) from your Digital Ocean account.

2. Modify the script to add `access token` and set script permission to `755`.
2. Place the token in ~/.config/do_dns_update/access_token

chmod 755 /path/to/file/do_dns_update.sh
3. Make script runnable.

chmod +x /path/to/file/do_dns_update.sh

3. [Cron](http://en.wikipedia.org/wiki/Cron#Predefined_scheduling_definitions) the script to update Digital Ocean's DNS at desired frequency. (Note: *API rate limit is currently 1200 /hr. Script run uses 2.*)

Expand Down Expand Up @@ -41,4 +43,4 @@ My use case: *Connect to home server that is on a dynamic IP via a fixed domain

## License

The MIT License (MIT).
The MIT License (MIT).
31 changes: 25 additions & 6 deletions do_dns_update.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,8 +1,9 @@
#!/bin/bash
# @requires awk, curl, grep, mktemp, sed, tr.
# @requires awk, curl, grep, mktemp, sed, tr, stat.

## START EDIT HERE.
do_access_token=""; # paste your DO Personal Access Token here.
: ${XDG_CONFIG_DIRS:=~/.config}

do_access_token="${XDG_CONFIG_DIRS}"/do_dns_update/access_token
curl_timeout="15";
loop_max_records="50";
url_do_api="https://api.digitalocean.com/v2";
Expand Down Expand Up @@ -48,11 +49,29 @@ do_domain="$2";
if [ $# -lt 2 ] || [ -z "$do_record" ] || [ -z "$do_domain" ] ; then
echo "Missing required arguments. (See -h for help)";
exit 1;
elif [ -z "$do_access_token" ] ; then
echo "Missing token. Please edit this script and add your access token first.";
exit 1;
elif [ ! -r "$do_access_token" ]; then
echo "Missing token. Please paste it into $do_access_token first."
exit 1
# insist on secure permissions: only the owner of the file should be able to read or write it.
# we do a bitwise AND to mask out the g=rw and o=rw bits from the permissions;
# if masking those out gives 0, then we're good
# note the leading 0s! That makes these numbers octal!
# XXX if we're concerned about writes then this also needs to check permissions on all parent directories too.
elif [ $(($(stat -c "%#0a" $do_access_token) & 0066)) -ne 0 ]; then
echo "Error: $do_access_token has insecure permissions."
exit 1
fi

# read in access token
strip_comments()
{
sed 's/#.*//' | # strip comments
sed 's/^\s*//' | # strip leading whitespace
sed 's/\s*$//' | # strip trailing whitespace
sed '/^$/d' # strip empty lines -- which, after stripping leading/trailing whitespace, covers blank lines too
}
do_access_token="$(cat $do_access_token | strip_comments | head -n 1)";

echov()
{
if [ $verbose == true ] ; then
Expand Down