json parse extract substring - regex

Question

I am trying to extract credentials client secret from the cloud foundry env json string
cf env myapp
gives the exact following,(not a proper json so thats why i cant use jq)
Getting env variables for app icm in org myorg / space myspace as
xxyy...
OK
{
"myenv_env_json": {
"http_proxy": "http://mycompany-svr-proxy-qa.mycompany.com:7070",
"https_proxy": "http://mycompany-svr-proxy-qa.mycompany.com:7070",
"no_proxy": "*.mycompany.com"
},
"running_env_json": {},
"system_env_json": {
"VCAP_SERVICES": {
"user-provided": [
{
"name": "myapp-parameters",
"instance_name": "myapp-parameters",
"binding_name": null,
"credentials": {
"auth-domain": "https://sso.login.run-np.mycompany.com",
"backend-url-other": "https://myservice-other.apps-np.mycompany.com",
"client-secret": "121322332-32322-23232-232-32-23232",
"stage": "mystg",
"backend-url": "https://myservice-other.apps-np.mycompany.com",
"client-secret-other": "121322332-32322-23232-232-32-23232"
},
"syslog_drain_url": "",
"volume_mounts": [],
"label": "user-provided",
"tags": []
},
{
"name": "appdynamics",
"instance_name": "appdynamics",
"binding_name": null,
"credentials": {
"account-access-key": "1213232-232-322-2322323-2323232-311",
"account-name": "customer1",
"application-name": "myenv-dev",
"host-name": "appdx-qa.mycompany.com",
"node-name": "$(ruby -e \"require 'json'; a = JSON.parse(ENV['VCAP_APPLICATION']); puts \\\"#{a['application_name']}-#{a['cf_api'].split(/\\.|-/)[2]}:#{a['instance_index']}\\\"\")",
"port": "9401",
"ssl-enabled": "true",
"tier-name": "$(ruby -e \"require 'json'; a = JSON.parse(ENV['VCAP_APPLICATION']); puts \\\"#{a['application_name']}-#{a['cf_api'].split(/\\.|-/)[2]}\\\"\")",
"version": "4.2.7_1"
},
"syslog_drain_url": "",
"volume_mounts": [],
"label": "user-provided",
"tags": []
}
],
"p-identity": [
{
"name": "sso",
"instance_name": "sso",
"binding_name": null,
"credentials": {
"auth_domain": "https://sso.login.run-np.mycompany.com",
"client_secret": "123232-23232-2323243-242323r3r",
"client_id": "afdvdf-dvdfdd-fgdgdf-d23232"
},
"syslog_drain_url": null,
"volume_mounts": [],
"label": "p-identity",
"provider": null,
"plan": "sso",
"tags": []
}
]
}
},
"application_env_json": {
"VCAP_APPLICATION": {
"cf_api": "https://api.run-np.mycompany.com",
"limits": {
"fds": 16384
},
"application_name": "myapp",
"application_uris": [
"myapp-dev.apps-np.mycompany.com"
],
"name": "myapp",
"space_name": "myapp-dev",
"space_id": "392929-23223-2323-2322-2322",
"uris": [
"myapp-dev.apps-np.mycompany.com"
],
"users": null,
"application_id": "fwew78cc-wewc5c-dfd8a7-89d5-fdfefwewb"
}
}
}
User-Provided:
APP_ENV: development
GRANT_TYPE: authorization_code
SSO_AUTO_APPROVED_SCOPES: openid
SSO_IDENTITY_PROVIDERS: mycompany-single-signon
SSO_LAUNCH_URL: https://myapp-dev.apps-np.mycompany.com/
SSO_REDIRECT_URIS: https://myapp-dev.apps-np.mycompany.com/callback,http://myapp-dev.apps-np.mycompany.com/callback
SSO_SCOPES: openid,user_attributes
callback_url: https://myapp-dev.apps-np.mycompany.com/callback
client_secret: secret
client_secret_other: secretother
No running env variables have been set
Staging Environment Variable Groups:
http_proxy: http://myapp-svr-proxy-qa.mycompany.com:7070
https_proxy: http://myapp-svr-proxy-qa.mycompany.com:7070
no_proxy: *.mycompany.com
Here is what i am trying to use, and so far no luck extracting p-identity sub json, what is wrong in my sed
cf env myapp|sed 's/.*\(p-identity[^}].*}\).*/\1/p'
my expected output should be as follows
"p-identity": [
{
"name": "sso",
"instance_name": "sso",
"binding_name": null,
"credentials": {
"auth_domain": "https://sso.login.run-np.mycompany.com",
"client_secret": "123232-23232-2323243-242323r3r",
"client_id": "afdvdf-dvdfdd-fgdgdf-d23232"
}

Answer 1

I found a dirty workaround, may not be efficient but works for now
cf env myapp|sed 1,4d|sed -n '/User-Provided:/q;p'|jq -c -r '.VCAP_SERVICES."p-identity"[0].credentials.client_secret'| head -n1

Answer 2

For your case it may be easier to pipe the output to grep to extract the JSON, then use jq to extract the field that you want, for example:
cf env myapp | grep -oz '{.*}' | jq 'your filter here'