feat: implement secure config provider with load method

2026-04-01 14:45:53 -05:00
parent 17314375cb
commit 995d61cd10
2 changed files with 601 additions and 0 deletions
@@ -0,0 +1,87 @@
+using System.Globalization;
+using System.Text.Json;
+
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.Logging;
+
+using StevanFreeborn.Extensions.Configuration.Secure.Cryptography;
+using StevanFreeborn.Extensions.Configuration.Secure.Storage;
+
+namespace StevanFreeborn.Extensions.Configuration.Secure.Configuration;
+
+internal class SecureConfigProvider(
+  ISecureStorageProvider storageProvider,
+  ICryptoProvider cryptoProvider,
+  ILogger<SecureConfigProvider> logger
+) : ConfigurationProvider
+{
+  private readonly ISecureStorageProvider _storageProvider = storageProvider ?? throw new ArgumentNullException(nameof(storageProvider));
+  private readonly ICryptoProvider _cryptoProvider = cryptoProvider ?? throw new ArgumentNullException(nameof(cryptoProvider));
+  private readonly ILogger<SecureConfigProvider> _logger = logger ?? throw new ArgumentNullException(nameof(cryptoProvider));
+
+  public override void Load()
+  {
+    var encryptedData = _storageProvider.ReadAllAsync().GetAwaiter().GetResult();
+    var flattenedData = new Dictionary<string, string?>(StringComparer.OrdinalIgnoreCase);
+
+    foreach (var kvp in encryptedData)
+    {
+      try
+      {
+        var decryptedJson = _cryptoProvider.Decrypt(kvp.Value);
+
+        using var document = JsonDocument.Parse(decryptedJson);
+        FlattenJsonElement(flattenedData, document.RootElement, kvp.Key);
+      }
+#pragma warning disable CA1031 // Do not catch general exception types
+      catch (Exception ex)
+#pragma warning restore CA1031 // Do not catch general exception types
+      {
+        _logger.LogDecryptionFailure(ex, kvp.Key);
+      }
+    }
+
+    Data = flattenedData;
+  }
+
+  private static void FlattenJsonElement(IDictionary<string, string?> data, JsonElement element, string currentKey)
+  {
+    switch (element.ValueKind)
+    {
+      case JsonValueKind.Object:
+        foreach (var property in element.EnumerateObject())
+        {
+          var newKey = string.IsNullOrEmpty(currentKey) ? property.Name : ConfigurationPath.Combine(currentKey, property.Name);
+          FlattenJsonElement(data, property.Value, newKey);
+        }
+        break;
+      case JsonValueKind.Array:
+        var index = 0;
+        foreach (var arrayElement in element.EnumerateArray())
+        {
+          var newKey = ConfigurationPath.Combine(currentKey, index.ToString(CultureInfo.InvariantCulture));
+          FlattenJsonElement(data, arrayElement, newKey);
+          index++;
+        }
+        break;
+      case JsonValueKind.String:
+        data[currentKey] = element.GetString();
+        break;
+      case JsonValueKind.Number:
+        data[currentKey] = element.GetRawText();
+        break;
+      case JsonValueKind.True:
+        data[currentKey] = "true";
+        break;
+      case JsonValueKind.False:
+        data[currentKey] = "false";
+        break;
+      case JsonValueKind.Null:
+      case JsonValueKind.Undefined:
+      default:
+        data[currentKey] = null;
+        break;
+    }
+  }
+}
+