feat/gen ssh key

api/projects/keys.go

@@ -140,6 +140,7 @@ func (c *KeyController) AddKey(w http.ResponseWriter, r *http.Request) {
 		helpers.WriteError(w, err)
 		return
 	}
+	key.Plain = newKey.Plain
 
 	helpers.WriteJSON(w, http.StatusCreated, key)
 }

db/AccessKey.go

@@ -50,6 +50,7 @@ type AccessKey struct {
 	String         string        `db:"-" json:"string"`
 	LoginPassword  LoginPassword `db:"-" json:"login_password"`
 	SshKey         SshKey        `db:"-" json:"ssh"`
+	GenerateSSHKey bool          `db:"-" json:"generate_ssh_key,omitempty"`
 	OverrideSecret bool          `db:"-" json:"override_secret,omitempty"`
 
 	StorageID *int `db:"storage_id" json:"-" backup:"-"`

db/sql/access_key.go

@@ -82,10 +82,10 @@ func (d *SqlDb) UpdateAccessKey(key db.AccessKey) error {
 	}
 
 	if key.OverrideSecret {
-
-		query += ", type=?, secret=?, source_storage_id=?, source_storage_key=?, source_storage_type=?"
+		query += ", type=?, secret=?, plain=?, source_storage_id=?, source_storage_key=?, source_storage_type=?"
 		args = append(args, key.Type)
 		args = append(args, key.Secret)
+		args = append(args, key.Plain)
 		args = append(args, key.SourceStorageID)
 		args = append(args, key.SourceStorageKey)
 		args = append(args, key.SourceStorageType)

services/server/access_key_svc.go

@@ -1,9 +1,13 @@
 package server
 
 import (
+	"bufio"
+	"bytes"
+	"encoding/json"
 	"errors"
 
 	"github.com/semaphoreui/semaphore/db"
+	"github.com/semaphoreui/semaphore/util"
 	"github.com/semaphoreui/semaphore/pkg/common_errors"
 )
 
@@ -69,7 +73,48 @@ func (s *AccessKeyServiceImpl) GetAll(projectID int, options db.GetAccessKeyOpti
 	return s.accessKeyRepo.GetAccessKeys(projectID, options, params)
 }
 
+func maybeGenerateSSHPrivateKey(key *db.AccessKey) error {
+	if !key.GenerateSSHKey || key.Type != db.AccessKeySSH {
+		key.Plain = nil
+		return nil
+	}
+
+	var b bytes.Buffer
+	privateKeyFile := bufio.NewWriter(&b)
+
+	publicKey, err := util.GeneratePrivateKey(privateKeyFile)
+	if err != nil {
+		return err
+	}
+
+	err = privateKeyFile.Flush()
+	if err != nil {
+		return err
+	}
+
+	key.SshKey.PrivateKey = b.String()
+
+	type sshPublicKey struct {
+		PublicKey string `json:"public_key"`
+	}
+
+	plainBytes, err := json.Marshal(sshPublicKey{
+		PublicKey: publicKey,
+	})
+	if err != nil {
+		return err
+	}
+
+	plain := string(plainBytes)
+	key.Plain = &plain
+	return nil
+}
+
 func (s *AccessKeyServiceImpl) Create(key db.AccessKey) (newKey db.AccessKey, err error) {
+	err = maybeGenerateSSHPrivateKey(&key)
+	if err != nil {
+		return
+	}
 
 	// SerializeSecret encrypts/persists the secret for writable backends. For read-only
 	// external storage the secret is not stored in Semaphore, so SerializeSecret fails
@@ -89,6 +134,11 @@ func (s *AccessKeyServiceImpl) Update(key db.AccessKey) (err error) {
 		return
 	}
 
+  err = maybeGenerateSSHPrivateKey(&key)
+  if err != nil {
+    return
+  }
+
 	var oldKey db.AccessKey
 	oldKey, err = s.accessKeyRepo.GetAccessKey(*key.ProjectID, key.ID)
 	if err != nil {

web/src/components/KeyForm.vue

@@ -150,15 +150,49 @@
       dense
     />
 
+    <v-checkbox
+      v-model="item.generate_ssh_key"
+      label="Generate SSH Key"
+      v-if="!isReadOnly && item.type === 'ssh'"
+      :disabled="formSaving || !canEditSecrets"
+    />
+
     <v-textarea
       outlined
       v-model="item.ssh.private_key"
       :label="$t('privateKey')"
       :disabled="formSaving || !canEditSecrets"
-      :rules="[(v) => !canEditSecrets || !!v || $t('private_key_required')]"
+      :rules="
+        [
+          (v) => !canEditSecrets || item.generate_ssh_key || !!v || $t('private_key_required')
+        ]"
       v-if="!isReadOnly && item.type === 'ssh'"
     />
 
+    <div
+      v-if="item.type === 'ssh' && !isNew && hasGeneratedPublicKey"
+      class="mb-4"
+    >
+      <div style="position: relative">
+        <pre
+          style="
+            overflow: auto;
+            background: gray;
+            color: white;
+            border-radius: 10px;
+            margin-top: 5px;
+          "
+          class="pa-2"
+          >{{ publicKey }}</pre
+        >
+
+        <CopyClipboardButton
+          style="position: absolute; right: 0; top: 0; transform: scale(0.9);"
+          :text="publicKey"
+        />
+      </div>
+    </div>
+
     <v-checkbox v-model="item.override_secret" :label="$t('override')" v-if="!isNew" />
 
     <v-alert dense text type="info" v-if="item.type === 'none'">
@@ -168,8 +202,13 @@
 </template>
 <script>
 import ItemFormBase from '@/components/ItemFormBase';
+import CopyClipboardButton from '@/components/CopyClipboardButton.vue';
 
 export default {
+  components: {
+    CopyClipboardButton,
+  },
+
   mixins: [ItemFormBase],
 
   props: {
@@ -200,6 +239,20 @@ export default {
   },
 
   computed: {
+    hasGeneratedPublicKey() {
+      return this.publicKey !== '';
+    },
+
+    publicKey: {
+      get() {
+        try {
+          const plain = JSON.parse(this.item?.plain || '{}');
+          return plain.public_key || '';
+        } catch (e) {
+          return '';
+        }
+      },
+    },
 
     isPro() {
       return (process.env.VUE_APP_BUILD_TYPE || '').startsWith('pro_');
@@ -266,6 +319,7 @@ export default {
       return {
         ssh: {},
         login_password: {},
+        generate_ssh_key: false,
       };
     },
 

web/src/views/project/Keys.vue

@@ -5,7 +5,7 @@
       :save-button-text="itemId === 'new' ? $t('create') : $t('save')"
       :title="`${itemId === 'new' ? $t('nnew') : $t('edit')} Key`"
       :max-width="450"
-      @save="loadItems()"
+      @save="loadItemsAndShowPublicKey($event)"
     >
       <template v-slot:form="{ onSave, onError, needSave, needReset }">
         <KeyForm
@@ -20,6 +20,37 @@
       </template>
     </EditDialog>
 
+    <EditDialog
+      :max-width="700"
+      v-model="createdPublicKeyDialog"
+      :save-button-text="null"
+      title="Generated SSH Public Key"
+      hide-buttons
+    >
+      <template v-slot:form="{}">
+        <div class="mb-4">
+          <div style="position: relative">
+            <pre
+              style="
+                overflow: auto;
+                background: gray;
+                color: white;
+                border-radius: 10px;
+                margin-top: 5px;
+              "
+              class="pa-2"
+              >{{ createdPublicKey }}</pre
+            >
+
+            <CopyClipboardButton
+              style="position: absolute; right: 10px; top: 10px"
+              :text="createdPublicKey"
+            />
+          </div>
+        </div>
+      </template>
+    </EditDialog>
+
     <ObjectRefsDialog
       object-title="access key"
       :object-refs="itemRefs"
@@ -94,9 +125,14 @@ import ItemListPageBase from '@/components/ItemListPageBase';
 import KeyForm from '@/components/KeyForm.vue';
 import PageMixin from '@/components/PageMixin';
 import KeyStoreMenu from '@/components/KeyStoreMenu.vue';
+import CopyClipboardButton from '@/components/CopyClipboardButton.vue';
 
 export default {
-  components: { KeyStoreMenu, KeyForm },
+  components: {
+    CopyClipboardButton,
+    KeyStoreMenu,
+    KeyForm,
+  },
 
   mixins: [ItemListPageBase, PageMixin],
 
@@ -110,7 +146,51 @@ export default {
     },
   },
 
+  data() {
+    return {
+      createdPublicKeyDialog: false,
+      createdPublicKey: '',
+    };
+  },
+
   methods: {
+    async loadItemsAndShowPublicKey(e) {
+      await this.loadItems();
+
+      const isGeneratedOnCreate = e && e.action === 'new';
+      const isGeneratedOnUpdate = e && e.action === 'edit' && e.item && e.item.generate_ssh_key;
+      if (!isGeneratedOnCreate && !isGeneratedOnUpdate) {
+        this.createdPublicKey = '';
+        return;
+      }
+
+      const itemId = e && e.item ? e.item.id : null;
+      const reloadedItem = itemId ? this.items.find((x) => x.id === itemId) : null;
+      const sourceItem = reloadedItem || (e || {}).item;
+      const publicKey = this.extractPublicKey(sourceItem);
+
+      if (!publicKey) {
+        this.createdPublicKey = '';
+        return;
+      }
+
+      this.createdPublicKey = publicKey;
+      this.createdPublicKeyDialog = true;
+    },
+
+    extractPublicKey(item) {
+      if (!item || !item.plain) {
+        return '';
+      }
+
+      try {
+        const plain = JSON.parse(item.plain);
+        return plain.public_key || '';
+      } catch (e) {
+        return '';
+      }
+    },
+
     getHeaders() {
       return [{
         text: this.$i18n.t('name'),