Add support for SecretManagement and SecretStore providers, enhance configuration data handling, and introduce new utility functions

2026-07-02 23:57:14 +02:00
parent 115b8be385
commit 9b36693444
16 changed files with 979 additions and 7 deletions
--- a/Private/ConvertFrom-ConfigurationDataSecretValue.ps1
+++ b/Private/ConvertFrom-ConfigurationDataSecretValue.ps1
@@ -0,0 +1,101 @@
+function ConvertFrom-ConfigurationDataSecretValue {
+    [CmdletBinding()]
+    Param(
+        [Parameter(Mandatory=$true)]
+        [AllowNull()]
+        $Secret,
+
+        [Parameter(Mandatory=$true)]
+        [ValidateSet("credential", "securestring", "string")]
+        [string]
+        $ExpectedType,
+
+        [Parameter(Mandatory=$false)]
+        [string]
+        $Name = "",
+
+        [Parameter(Mandatory=$false)]
+        [string]
+        $UserName = ""
+    )
+
+    if($null -eq $Secret){
+        throw "Secret [$Name] was not found."
+    }
+
+    if($ExpectedType -eq "credential"){
+        if($Secret -is [System.Management.Automation.PSCredential]){
+            return $Secret
+        }
+
+        if($Secret -is [System.Collections.IDictionary]){
+            if([string]::IsNullOrWhiteSpace($UserName) -and $Secret.Contains("UserName")){
+                $UserName = [string]$Secret["UserName"]
+            }
+
+            if($Secret.Contains("Password")){
+                return ConvertTo-ConfigurationDataCredential -UserName $UserName -Password $Secret["Password"]
+            }
+        }
+
+        if($Secret.PSObject.Properties["UserName"] -and [string]::IsNullOrWhiteSpace($UserName)){
+            $UserName = [string]$Secret.UserName
+        }
+
+        if($Secret.PSObject.Properties["Password"]){
+            return ConvertTo-ConfigurationDataCredential -UserName $UserName -Password $Secret.Password
+        }
+
+        if([string]::IsNullOrWhiteSpace($UserName)){
+            throw "Secret [$Name] cannot be converted to [PSCredential] because no username was provided."
+        }
+
+        return ConvertTo-ConfigurationDataCredential -UserName $UserName -Password $Secret
+    }
+
+    if($ExpectedType -eq "securestring"){
+        if($Secret -is [System.Security.SecureString]){
+            return $Secret
+        }
+
+        if($Secret -is [System.Management.Automation.PSCredential]){
+            return $Secret.Password
+        }
+
+        if($Secret -is [System.Collections.IDictionary] -and $Secret.Contains("Password")){
+            $Secret = $Secret["Password"]
+        }elseif($Secret.PSObject.Properties["Password"]){
+            $Secret = $Secret.Password
+        }
+
+        if($Secret -is [System.Security.SecureString]){
+            return $Secret
+        }
+
+        return ConvertTo-SecureString -String ([string]$Secret) -AsPlainText -Force
+    }
+
+    if($Secret -is [System.Management.Automation.PSCredential]){
+        return $Secret.GetNetworkCredential().Password
+    }
+
+    if($Secret -is [System.Security.SecureString]){
+        $Pointer = [Runtime.InteropServices.Marshal]::SecureStringToBSTR($Secret)
+        try {
+            return [Runtime.InteropServices.Marshal]::PtrToStringBSTR($Pointer)
+        }
+        finally {
+            [Runtime.InteropServices.Marshal]::ZeroFreeBSTR($Pointer)
+        }
+    }
+
+    if($Secret -is [System.Collections.IDictionary] -and $Secret.Contains("Password")){
+        return [string]$Secret["Password"]
+    }
+
+    if($Secret.PSObject.Properties["Password"]){
+        return [string]$Secret.Password
+    }
+
+    return [string]$Secret
+}