humanmade/hashicorp-vault

HashiCorp Vault integration plugin for WordPress

2.0.0 2019-03-22 15:51 UTC

Requires

• php: ~7.2
• composer/installers: ^1.6
• csharpru/vault-php: ^3.6
• csharpru/vault-php-guzzle6-transport: ^2.0
• wpdesk/wp-mutex: ^1.1

Requires (Dev)

• brainmaestro/composer-git-hooks: ^2.6
• humanmade/coding-standards: ^0.5.0
• phpcompatibility/php-compatibility: ^8

MIT

• Paul Gibbs

README

HashiCorp Vault integration for WordPress Access Vault secrets, utilising WordPress APIs for maximum scalability.
A Human Made library.

HashiCorp Vault integration for WordPress is a library which provides access to Vault secrets in a scaleable manner.

It wraps the CSharpRU/vault-php library, and uses WordPress' transients API to provide familiar and necessary caching for WordPress developers. The library offers automatic re-fetching of secrets prior to lease expiry.

Current limitations:

• Only token-based authentication is supported.
• Tokens with a renewable lease are not renewed using Vault's API. Instead, this library will refetch the token prior to expiry.

Installation

This library is distributed as a WordPress plugin. Install with Composer, and activate the plugin in the usual way.

Usage

In wp-config.php, define your Vault token:

define( 'HM_HASHICORP_VAULT_AUTH_TOKEN', 'your-token-123' );

define( 'HM_HASHICORP_VAULT_URL', 'https://example.com/your-vault/' );

Load the plugin in WordPress by requiring hashicorp-vault/plugin.php.

License

This project is made availabile with the MIT license.

Credits

Created by Human Made for enterprise-scale digital experiences. Written by Paul Gibbs. Thanks to all contributors.