A Vault Client implemented in pure javascript for HashiCorp Vault. It supports variety of Auth Backends and performs lease renewal for issued auth token.

npm install --save node-vault-client

const VaultClient = require('node-vault-client');

const vaultClient = VaultClient.boot('main', {
    api: { url: 'https://vault.example.com:8200/' },
    auth: { 
        type: 'appRole', // or 'token', 'iam'
        config: { role_id: '637c065f-c644-5e12-d3d1-e9fa4363af61' } 
    },
});

vaultClient.read('secret/tst').then(v => {
    console.log(v);
}).catch(e => console.error(e));

• AWS IAM
• AppRole
• Token

• VaultClient
  • new VaultClient(options)
  • instance
    • .fillNodeConfig()
    • .read(path) ⇒ Promise.<Lease>
    • .list(path) ⇒ Promise.<Lease>
    • .write(path, data) ⇒ Promise.<(T|never)>
  • static
    • .boot(name, [options]) ⇒
    • .get(name) ⇒
    • .clear([name])

Client constructor function.

Populates Vault's values to NPM "config" module

Kind: instance method of VaultClient

Read secret from Vault

Kind: instance method of VaultClient

Retrieves secrets list

Kind: instance method of VaultClient

Writes data to Vault

Kind: instance method of VaultClient

Boot an instance of Vault

The instance will be stored in a local hash. Calling Vault.boot multiple times with the same name will return the same instance.

Kind: static method of VaultClient
Returns: Vault

Get an instance of Vault

The instance will be stored in a local hash. Calling Vault.pop multiple times with the same name will return the same instance.

Kind: static method of VaultClient
Returns: Vault

Clear named Vault instance

If no name passed all named instances will be cleared.

Kind: static method of VaultClient