"""vault client"""
import os
import re
import urllib.parse
import hvac
import hvac.exceptions
def client() -> hvac.Client:
"""construct and validate authenticated vault client"""
# assign url value
url: str = os.getenv('VAULT_URL', 'http://127.0.0.1:8200')
# validate url
parsed = urllib.parse.urlparse(url)
if not all([parsed.scheme, parsed.netloc]):
raise ValueError('invalid vault url')
# assign token value
token: str = os.getenv('VAULT_TOKEN', '')
# validate token value
if not re.match(r'^[a-zA-Z0-9.]+$', token):
raise ValueError('invalid token format')
# construct and validate client
client: hvac.Client = hvac.Client(url=url, token=token)
if not client.is_authenticated:
raise hvac.exceptions.Unauthorized('invalid authentication')
if client.sys.is_sealed():
raise hvac.exceptions.VaultNotInitialized('vault server is sealed')
# return authenticated client
return client
