Pascal (Lazarus/Delphi)

Oracle Cloud Secrets - Setup Bootstrap Secret in Local Manager

See more Secrets Examples

Accessing a cloud-based secrets manager requires authentication credentials, which cannot be stored in the manager itself. Instead, they must be securely stored locally.

One solution is to store the authentication credentials as a secret in the Windows Credentials Manager or Apple Keychain. These credentials serve as the "bootstrap secret" for authenticating with the cloud-based secrets manager.

This example demonstrates how to setup a bootstrap secret for the Oracle Cloud Secrets.

Note: This example requires Chilkat v10.1.0 or later.

Pascal (Lazarus/Delphi)

program ChilkatDemo;

// Demonstrates using the Chilkat Pascal wrapper via the C bridge DLL.
// Builds as a console application under Lazarus (FPC) or Delphi.

{$IFDEF FPC}
  {$MODE DELPHI}
{$ENDIF}
{$APPTYPE CONSOLE}

uses
  {$IFDEF UNIX}
  cthreads,
  {$ENDIF}
  SysUtils,
  CkDllLoader,
  Chilkat.Secrets,
  Chilkat.StringBuilder,
  Chilkat.JsonObject;

// ---------------------------------------------------------------------------

procedure RunDemo;
var
  success: Boolean;
  bootstrap: TSecrets;
  json: TJsonObject;
  sbPem: TStringBuilder;

begin
  success := False;

  //  This example requires the Chilkat API to have been previously unlocked.
  //  See Global Unlock Sample for sample code.

  bootstrap := TSecrets.Create;

  //  We're going to store the bootstrap secret in the local manager.
  //  On Windows, this is the Windows Credentials Manager
  //  On MacOS/iOS, it is the Apple Keychain
  bootstrap.Location := 'local_manager';

  //  Specify the name of the bootstrap secret.
  //  service and username are required.
  //  appName and domain are optional.
  //  Note: The values are arbitrary and can be anything you want.
  json := TJsonObject.Create;
  json.UpdateString('appName','oracle_bs');
  json.UpdateString('service','Example');
  json.UpdateString('username','Joe');

  //  The bootstrap secret for Oracle Cloud Secrets is the PEM of your private key.
  sbPem := TStringBuilder.Create;
  success := sbPem.LoadFile('qa_data/pem/oracle_cloud_privkey.pem','utf-8');
  if (success = False) then
    begin
      WriteLn('Failed to load the private key PEM file.');
      Exit;
    end;

  //  The bootstrap secret for the Oracle Cloud Secrets will contain
  //  the private key PEM, like this:
  success := bootstrap.UpdateSecretSb(json,sbPem);
  if (success = False) then
    begin
      WriteLn(bootstrap.LastErrorText);
      Exit;
    end;

  WriteLn('The Oracle Cloud bootstrap secret has been stored.');


  bootstrap.Free;
  json.Free;
  sbPem.Free;

end;

// ---------------------------------------------------------------------------

begin

  try
    RunDemo;
  except
    on E: Exception do
      WriteLn('Unhandled exception: ', E.ClassName, ': ', E.Message);
  end;

  WriteLn;
  {$IFDEF MSWINDOWS}
  WriteLn('Press Enter to exit...');
  ReadLn;
  {$ENDIF}
end.