Add token management helpers for API credentials

apitokens/tokens.go

@@ -34,8 +34,11 @@ var (
 	ErrInvalidToken  = errors.New("invalid api token")
 	ErrExpiredToken  = errors.New("expired api token")
 	ErrDisabledToken = errors.New("disabled api token")
+	ErrTokenNotFound = errors.New("api token not found")
 )
 
+var EntryPath = []string{"Root", "API Tokens"}
+
 type Effect string
 type Operation string
 type ResourceKind string
@@ -192,6 +195,38 @@ func Entries(model vault.Model) ([]Token, error) {
 	return out, nil
 }
 
+func Find(model vault.Model, id string) (Token, error) {
+	tokens, err := Entries(model)
+	if err != nil {
+		return Token{}, err
+	}
+	for _, token := range tokens {
+		if token.ID == id {
+			return token, nil
+		}
+	}
+	return Token{}, ErrTokenNotFound
+}
+
+func Upsert(model *vault.Model, token Token) {
+	model.UpsertEntry(token.Entry(EntryPath))
+	model.CreateGroup([]string{"Root"}, "API Tokens")
+}
+
+func Delete(model *vault.Model, id string) error {
+	for i, entry := range model.Entries {
+		token, ok, err := TokenFromEntry(entry)
+		if err != nil {
+			return err
+		}
+		if ok && token.ID == id {
+			model.Entries = append(model.Entries[:i], model.Entries[i+1:]...)
+			return nil
+		}
+	}
+	return ErrTokenNotFound
+}
+
 func TokenFromEntry(entry vault.Entry) (Token, bool, error) {
 	if entry.Fields[FieldType] != EntryTypeAPIToken {
 		return Token{}, false, nil