encryptor = $encryptor;
$this->cache = $cache;
$this->writer = $writer;
$this->random = $random;
parent::__construct();
}
/**
* @inheritDoc
*/
protected function configure()
{
$this->setName('encryption:key:change');
$this->setDescription('Change the encryption key inside the env.php file.');
$this->addOption(
'key',
'k',
InputOption::VALUE_OPTIONAL,
'Key has to be a 32 characters long string. If not provided, a random key will be generated.'
);
parent::configure();
}
/**
* @inheritDoc
*/
protected function execute(InputInterface $input, OutputInterface $output)
{
try {
$key = $input->getOption('key');
if (!empty($key)) {
$this->encryptor->validateKey($key);
}
$this->updateEncryptionKey($key);
$this->cache->clean();
$output->writeln('Encryption key has been updated successfully.');
return Command::SUCCESS;
} catch (\Exception $e) {
$output->writeln('' . $e->getMessage() . '');
return Command::FAILURE;
}
}
/**
* Update encryption key
*
* @param string|null $key
* @return void
* @throws FileSystemException
*/
private function updateEncryptionKey(?string $key = null): void
{
// prepare new key, encryptor and new configuration segment
if (!$this->writer->checkIfWritable()) {
throw new FileSystemException(__('Deployment configuration file is not writable.'));
}
if (null === $key) {
$key = ConfigOptionsListConstants::STORE_KEY_ENCODED_RANDOM_STRING_PREFIX .
$this->random->getRandomBytes(ConfigOptionsListConstants::STORE_KEY_RANDOM_STRING_SIZE);
}
$this->encryptor->setNewKey($key);
$encryptSegment = new ConfigData(ConfigFilePool::APP_ENV);
$encryptSegment->set(ConfigOptionsListConstants::CONFIG_PATH_CRYPT_KEY, $this->encryptor->exportKeys());
$configData = [$encryptSegment->getFileKey() => $encryptSegment->getData()];
$this->writer->saveConfig($configData);
}
}