-
Notifications
You must be signed in to change notification settings - Fork 0
/
secret.go
64 lines (50 loc) · 1.41 KB
/
secret.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
package otp
import (
"bytes"
"encoding/gob"
"fmt"
"github.com/keybase/go-keychain"
)
type (
secret struct {
Name string
Secret string
Options map[string]interface{}
}
)
const (
KEYCHAIN_SERVICE = "keymold"
KEYCHAIN_LABEL = "keymold secret"
KEYCHAIN_AG = "com.narusejun.keymold"
)
func NewSecret(name, value string) *secret {
return &secret{name, value, make(map[string]interface{})}
}
func LoadSecret(name string) (*secret, error) {
data, err := keychain.GetGenericPassword(KEYCHAIN_SERVICE, name, KEYCHAIN_LABEL, KEYCHAIN_AG)
if err != nil {
return nil, fmt.Errorf("reading from keychain failed: %v", err)
}
s := &secret{}
if err := gob.NewDecoder(bytes.NewReader(data)).Decode(s); err != nil {
return nil, fmt.Errorf("deseliarization failed: %v", err)
}
return s, nil
}
func (s *secret) Save() error {
buf := bytes.NewBuffer(nil)
if err := gob.NewEncoder(buf).Encode(s); err != nil {
return fmt.Errorf("seliarization failed: %v", err)
}
item := keychain.NewGenericPassword(KEYCHAIN_SERVICE, s.Name, KEYCHAIN_LABEL, buf.Bytes(), KEYCHAIN_AG)
if err := keychain.AddItem(item); err != nil {
if err != keychain.ErrorDuplicateItem {
return fmt.Errorf("writing to keychain failed: %v", err)
}
if err := keychain.DeleteGenericPasswordItem(KEYCHAIN_SERVICE, s.Name); err != nil {
return fmt.Errorf("existing item deletion failed: %v", err)
}
return s.Save()
}
return nil
}