## ----echo = FALSE-------------------------------------------------------------
library(httr)
knitr::opts_chunk$set(comment = "#>", collapse = TRUE)

## ----eval = FALSE-------------------------------------------------------------
# Sys.chmod("secret.file", mode = "0400")

## -----------------------------------------------------------------------------
my_secrets <- function() {
  path <- "~/secrets/secret.json"
  if (!file.exists(path)) {
    stop("Can't find secret file: '", path, "'")
  }
  
  jsonlite::read_json(path)
}

## ----eval = FALSE-------------------------------------------------------------
# password <- rstudioapi::askForPassword()

## ----eval = FALSE-------------------------------------------------------------
# file.edit("~/.Renviron")

## ----include = FALSE----------------------------------------------------------
Sys.setenv("VAR1" = "value1")

## -----------------------------------------------------------------------------
Sys.getenv("VAR1")

## ----eval = FALSE-------------------------------------------------------------
# keyring::key_set("MY_SECRET")
# keyring::key_get("MY_SECRET")

## ----eval = FALSE-------------------------------------------------------------
# keyring::keyring_create("httr")
# keyring::key_set("MY_SECRET", keyring = "httr")

## ----eval = FALSE-------------------------------------------------------------
# keyring::keyring_lock("httr")

## ----eval = FALSE-------------------------------------------------------------
# library(openssl)
# library(jsonlite)
# library(curl)
# 
# encrypt <- function(secret, username) {
#   url <- paste("https://api.github.com/users", username, "keys", sep = "/")
# 
#   resp <- httr::GET(url)
#   httr::stop_for_status(resp)
#   pubkey <- httr::content(resp)[[1]]$key
# 
#   opubkey <- openssl::read_pubkey(pubkey)
#   cipher <- openssl::rsa_encrypt(charToRaw(secret), opubkey)
#   jsonlite::base64_enc(cipher)
# }
# 
# cipher <- encrypt("<username>\n<password>", "hadley")
# cat(cipher)

## ----eval = FALSE-------------------------------------------------------------
# decrypt <- function(cipher, key = openssl::my_key()) {
#   cipherraw <- jsonlite::base64_dec(cipher)
#   rawToChar(openssl::rsa_decrypt(cipherraw, key = key))
# }
# 
# decrypt(cipher)
# #> username
# #> password

## -----------------------------------------------------------------------------
my_secret <- function() {
  val <- Sys.getenv("SECRET")
  if (identical(val, "")) {
    stop("`SECRET` env var has not been set")
  }
  val
}

## -----------------------------------------------------------------------------
NOT_CRAN <- identical(tolower(Sys.getenv("NOT_CRAN")), "true")
knitr::opts_chunk$set(purl = NOT_CRAN)