vault with copy, move, and token-unwrap-to-path

vault-copy-unwrap.sh

#!/bin/bash

set -eo pipefail
export VAULT_BIN="$HOME/.local/bin/vault-0.10.3"  # or wherever you've installed vault

oopsie() {
  echo "usage: $*"
  exit 1
}

vault_copy() {
  "$VAULT_BIN" read -format=json -field=data "$1" | "$VAULT_BIN" write -format=json "$2" -
}

vault_unwrap_to() {
  "$VAULT_BIN" unwrap -format=json -field=data "$1" | "$VAULT_BIN" write -format=json "$2" -
}

case "$1" in
  move|mv)
    if [ "$#" -ne 3 ] || [ "$2" == "help" ]; then oopsie "vault move <from> <to>"; fi
    vault_copy "$2" "$3"
    vault delete "$2"
    ;;
  copy|cp)
    if [ "$#" -ne 3 ] || [ "$2" == "help" ]; then oopsie "vault copy <from> <to>"; fi
    vault_copy "$2" "$3"
    ;;
  unwrap-to-path)
    if [ "$#" -ne 3 ] || [ "$2" == "help" ]; then oopsie "vault unwrap-to-path <token> <path>"; fi
    vault_unwrap_to "$2" "$3"
    ;;
  *)
    "$VAULT_BIN" "$@"
    ;;
esac